Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: cnLnFG2BQpaFHgxEtyvll2F+HlJUiPYPw4DYfAipSN4=
Subject key identifier: D2:20:29:73:BE:65:7F:22:13:B7:9E:5F:60:21:2E:5A:F2:85:84:3F
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019EE58D0C5C725A5F9D4401CACB3840E529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0DD3
Signing time: Sat 20 Jun 2026 15:01:26 +0000
Manifest this update: Sat 20 Jun 2026 15:01:26 +0000
Manifest next update: Sun 21 Jun 2026 15:01:26 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: dQ7Q8dpAPuuka8DJPL7zcWQStTNw481gznV9LQk/THI=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:8d:0c:5c:72:5a:5f:9d:44:01:ca:cb:38:40:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jun 20 15:01:26 2026 GMT
Not After : Jun 21 15:01:26 2026 GMT
Subject: CN=d2202973be657f2213b79e5f60212e5af285843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:d8:96:06:12:47:35:4e:9a:1a:40:22:b2:
74:63:93:ff:90:12:5d:53:0a:2a:c9:bd:52:f5:42:
d9:7c:fd:3b:2c:41:03:16:8e:3d:1a:06:ae:17:3a:
f9:2f:41:8a:f5:97:22:64:2f:93:c9:64:22:21:58:
64:ea:22:34:55:48:17:8a:fa:2d:34:bd:63:82:e2:
25:f6:40:06:d5:db:3d:4a:19:4f:8f:b1:de:ad:c3:
14:90:5f:3e:cb:47:03:06:da:09:bc:87:34:50:1d:
63:cc:eb:bc:cb:9b:27:fb:5b:8d:0d:ae:97:74:5f:
46:04:2e:40:72:9a:07:76:bc:d4:ba:3c:24:2e:c8:
97:a3:44:37:d8:7f:55:4e:7e:17:9d:cd:b8:d9:8f:
f5:3a:e2:f1:a2:f5:1c:57:f8:06:5e:eb:8e:9c:c9:
cd:6e:49:ed:fc:49:61:46:cf:eb:8b:46:c6:71:eb:
b4:d7:c6:63:fb:2c:64:b8:80:23:9a:6a:78:c8:ac:
78:74:39:00:26:e7:41:76:f6:21:ce:bb:7b:31:78:
4b:11:ec:fc:5d:f9:08:65:72:f5:06:f5:e3:e8:9a:
31:d2:25:8a:1a:32:c1:dc:64:bd:c8:63:12:7b:3a:
1c:f0:6c:e2:99:e9:89:39:1f:03:a7:19:a9:7a:95:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:29:73:BE:65:7F:22:13:B7:9E:5F:60:21:2E:5A:F2:85:84:3F
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:09:6e:74:d3:01:64:81:bd:d0:58:12:87:0f:a1:44:21:
bf:0c:d1:e7:59:47:ce:65:48:2d:dd:1c:9d:be:31:8c:6b:70:
97:a0:b3:77:97:f1:af:75:d4:c4:4f:66:aa:5e:9a:1b:8d:e7:
97:a0:46:c6:84:a4:3b:cd:27:90:87:6f:53:1b:b9:0d:f0:2a:
eb:2f:dd:7a:f3:d3:27:8b:e3:26:92:55:1d:bb:8a:79:1b:75:
42:a8:2d:35:bb:e6:24:87:14:14:14:eb:82:79:56:8a:ae:4a:
dc:9d:5b:e8:bf:43:8f:a1:2f:d0:95:ea:e5:13:91:29:da:c2:
34:8f:eb:0d:97:38:d7:b7:ab:a5:5b:d3:49:00:2b:6a:18:bd:
19:fb:de:d8:78:fb:1e:53:28:4a:02:f1:83:5e:7d:be:07:56:
28:0e:eb:45:85:74:d4:fd:21:9e:10:5b:3b:8a:a9:e8:d9:f5:
c3:15:7c:31:a5:d6:82:a0:a0:7b:bf:a9:8a:21:1f:ef:dd:8d:
8f:ec:4f:bb:6b:b4:d7:78:33:4a:99:d9:cc:83:01:41:33:b4:
b2:85:e4:7e:cf:61:94:fe:58:0a:c4:cf:b2:a5:5f:a5:4e:19:
d8:fa:98:08:a5:73:43:c9:58:a9:06:59:9c:e3:35:91:eb:99:
29:c5:e0:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ljQxcclpfnUQByss4QOUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjYwNjIwMTUwMTI2WhcNMjYwNjIxMTUwMTI2WjAzMTEwLwYDVQQD
EyhkMjIwMjk3M2JlNjU3ZjIyMTNiNzllNWY2MDIxMmU1YWYyODU4NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGDYlgYSRzVOmhpAIrJ0Y5P/kBJd
Uwoqyb1S9ULZfP07LEEDFo49GgauFzr5L0GK9ZciZC+TyWQiIVhk6iI0VUgXivot
NL1jguIl9kAG1ds9ShlPj7HercMUkF8+y0cDBtoJvIc0UB1jzOu8y5sn+1uNDa6X
dF9GBC5AcpoHdrzUujwkLsiXo0Q32H9VTn4Xnc242Y/1OuLxovUcV/gGXuuOnMnN
bknt/ElhRs/ri0bGceu018Zj+yxkuIAjmmp4yKx4dDkAJudBdvYhzrt7MXhLEez8
XfkIZXL1BvXj6Jox0iWKGjLB3GS9yGMSezoc8GzimemJOR8DpxmpepU9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIgKXO+ZX8iE7eeX2AhLlryhYQ/MB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLYJbnTT
AWSBvdBYEocPoUQhvwzR51lHzmVILd0cnb4xjGtwl6Czd5fxr3XUxE9mql6aG43n
l6BGxoSkO80nkIdvUxu5DfAq6y/devPTJ4vjJpJVHbuKeRt1QqgtNbvmJIcUFBTr
gnlWiq5K3J1b6L9Dj6Ev0JXq5RORKdrCNI/rDZc417erpVvTSQArahi9Gfve2Hj7
HlMoSgLxg159vgdWKA7rRYV01P0hnhBbO4qp6Nn1wxV8MaXWgqCge7+piiEf792N
j+xPu2u013gzSpnZzIMBQTO0soXkfs9hlP5YCsTPsqVfpU4Z2PqYCKVzQ8lYqQZZ
nOM1keuZKcXgqA==
-----END CERTIFICATE-----
Generated at Sat Jun 20 20:37:14 2026 by rpki-client