Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: ygdXYI0XMsTm8m67WPbssRiWDjmfq0uixzyZHV29gbQ=
Subject key identifier: 5F:3F:D2:72:93:A6:30:1B:A4:31:9A:C6:D3:69:67:BA:34:BD:3D:52
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019F37F22BC2AF3E76911DD46653B29B770C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1158
Signing time: Mon 06 Jul 2026 15:00:45 +0000
Manifest this update: Mon 06 Jul 2026 15:00:45 +0000
Manifest next update: Tue 07 Jul 2026 15:00:45 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: 1Q9MDjxeuGvdcISp/QGz8uR6S2XgICmUcDPRj3m2F7M=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:2b:c2:af:3e:76:91:1d:d4:66:53:b2:9b:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jul 6 15:00:45 2026 GMT
Not After : Jul 7 15:00:45 2026 GMT
Subject: CN=5f3fd27293a6301ba4319ac6d36967ba34bd3d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:59:c7:63:c6:75:24:86:17:95:8a:91:e7:
19:bf:5a:aa:09:dd:bd:92:39:c7:40:6c:60:13:15:
0c:98:17:07:d8:da:94:c3:28:99:da:35:9a:65:7f:
f7:63:75:af:e8:05:4c:4e:df:6d:61:f5:c9:fd:45:
83:b2:8b:5f:f8:5f:7c:09:d3:75:dd:ce:5d:5d:01:
08:aa:db:22:b7:f2:76:13:dd:41:ad:e9:f8:ea:dd:
eb:d3:b4:a2:a2:f1:3a:58:9d:3e:c3:ba:45:e3:57:
f9:b4:2c:8b:9f:6a:8a:32:12:05:f9:6e:a9:52:9f:
bf:75:0e:38:83:77:77:df:22:02:29:3a:4b:3e:dc:
00:67:a4:74:76:70:e6:38:0e:c4:5f:eb:98:0e:a4:
57:75:29:37:d6:77:d6:56:04:9c:75:b8:f7:1d:b9:
6c:ab:e6:8c:42:a6:b6:f7:91:fa:f2:5a:5e:6c:46:
cd:86:b8:53:52:57:31:9a:f7:20:1e:a3:59:8a:d7:
e3:1c:63:dd:ef:55:34:2e:b3:87:a1:12:1d:ef:a6:
20:25:13:87:dc:c1:9f:02:02:a2:ca:64:00:8a:05:
44:8e:69:2b:89:02:47:6f:6f:eb:f2:ca:e3:98:d5:
be:9b:f5:25:04:2f:58:79:c1:0d:fe:b3:4b:6c:30:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:D2:72:93:A6:30:1B:A4:31:9A:C6:D3:69:67:BA:34:BD:3D:52
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:35:c7:37:ba:5e:5e:28:9e:12:12:5b:25:f0:34:48:b7:
d4:92:b6:85:b7:85:da:de:3c:17:4e:ba:5f:3c:be:e1:e8:f7:
65:e1:a5:20:5a:a5:c0:f4:65:d3:1b:44:48:7e:3a:4a:3b:8f:
5c:8a:35:2c:aa:2d:0e:e7:48:d5:5e:12:03:c2:09:11:9b:2e:
d5:7b:aa:3b:50:b0:08:d3:39:73:8e:57:a5:cd:b0:79:85:47:
1f:8e:04:df:1f:b7:51:f5:6e:da:77:38:a8:fe:53:08:c3:00:
ee:32:98:dd:1b:b3:df:b2:2e:4d:47:34:e6:4a:9a:27:00:e4:
70:b9:2f:3c:8b:e1:26:11:e6:8a:2d:b7:06:80:8b:8b:a7:8e:
38:b9:10:83:87:ce:df:09:f8:5d:8f:1f:9f:0d:25:e2:84:b8:
4f:37:84:fb:11:8b:b2:03:d1:fb:4f:f5:2a:c0:95:37:89:bd:
de:03:ab:79:10:95:d6:87:9b:7c:62:8f:3d:f5:5f:13:80:04:
dc:2a:b6:23:29:1e:5c:cd:86:e4:50:6e:a6:38:18:68:94:a6:
2e:25:3b:b7:07:bb:e8:c0:b2:3b:ae:a6:47:f5:d9:e6:38:8d:
c6:fd:69:c7:bd:8d:6f:30:ee:17:02:8e:5a:5a:e1:6e:4e:e4:
48:a4:2f:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ838ivCrz52kR3UZlOym3cMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjYwNzA2MTUwMDQ1WhcNMjYwNzA3MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZjNmZDI3MjkzYTYzMDFiYTQzMTlhYzZkMzY5NjdiYTM0YmQzZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz1Zx2PGdSSGF5WKkecZv1qqCd29
kjnHQGxgExUMmBcH2NqUwyiZ2jWaZX/3Y3Wv6AVMTt9tYfXJ/UWDsotf+F98CdN1
3c5dXQEIqtsit/J2E91Bren46t3r07SiovE6WJ0+w7pF41f5tCyLn2qKMhIF+W6p
Up+/dQ44g3d33yICKTpLPtwAZ6R0dnDmOA7EX+uYDqRXdSk31nfWVgScdbj3Hbls
q+aMQqa295H68lpebEbNhrhTUlcxmvcgHqNZitfjHGPd71U0LrOHoRId76YgJROH
3MGfAgKiymQAigVEjmkriQJHb2/r8srjmNW+m/UlBC9YecEN/rNLbDCWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8/0nKTpjAbpDGaxtNpZ7o0vT1SMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirM1xze6
Xl4onhISWyXwNEi31JK2hbeF2t48F066Xzy+4ej3ZeGlIFqlwPRl0xtESH46SjuP
XIo1LKotDudI1V4SA8IJEZsu1XuqO1CwCNM5c45Xpc2weYVHH44E3x+3UfVu2nc4
qP5TCMMA7jKY3Ruz37IuTUc05kqaJwDkcLkvPIvhJhHmii23BoCLi6eOOLkQg4fO
3wn4XY8fnw0l4oS4TzeE+xGLsgPR+0/1KsCVN4m93gOreRCV1oebfGKPPfVfE4AE
3Cq2IykeXM2G5FBupjgYaJSmLiU7twe76MCyO66mR/XZ5jiNxv1px72NbzDuFwKO
Wlrhbk7kSKQvLQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:43 2026 by rpki-client