Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: /KufdsxNYN3yfjvpaSjQgaJaCL2yWNZGHqOgxJFX3vQ=
Subject key identifier: 17:6D:6E:CB:7D:F8:CC:05:37:32:60:7E:35:FB:8B:72:39:F1:3C:46
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019FCC6FD12A664FA6828CFE6BF2DAEC23CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 19E6
Signing time: Tue 04 Aug 2026 11:01:47 +0000
Manifest this update: Tue 04 Aug 2026 11:01:47 +0000
Manifest next update: Wed 05 Aug 2026 11:01:47 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: Yc9R7zzm6qlFKpCwEwnnWO/GafwcH5pbvszpIa3C25w=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:6f:d1:2a:66:4f:a6:82:8c:fe:6b:f2:da:ec:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Aug 4 11:01:47 2026 GMT
Not After : Aug 5 11:01:47 2026 GMT
Subject: CN=176d6ecb7df8cc053732607e35fb8b7239f13c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:79:b4:01:7d:72:9b:a1:7a:68:8d:f1:a5:
a6:5f:6f:a1:26:bb:e4:c1:5b:84:06:8a:36:b8:41:
40:1e:00:5c:b7:7a:4c:74:e7:64:d1:e2:4f:3c:7e:
22:3a:4c:be:97:2f:e7:e5:00:91:a6:74:36:26:c2:
0f:01:a8:a8:b0:7a:cd:ed:67:4f:98:66:30:82:24:
f3:8e:11:64:d6:3d:83:ab:09:2c:c9:0e:41:aa:88:
d2:df:83:ba:4f:59:70:29:a6:61:a1:1e:36:4a:7d:
ce:da:fd:77:51:53:02:fa:59:0a:b1:b3:85:bd:25:
f8:9b:a7:c1:48:2f:5f:29:65:7d:8f:24:24:74:c7:
3f:9c:15:39:63:35:ad:37:04:eb:f3:f0:a0:b0:ae:
c1:61:36:19:0a:24:25:fe:af:41:47:c6:5e:a1:62:
89:fe:24:0a:c3:b0:e5:a2:b7:c3:86:47:be:cf:eb:
4e:f8:c8:cb:b3:f4:a3:7e:42:11:66:55:23:53:f5:
d5:a8:4b:82:55:fd:d1:18:c1:35:ba:02:51:1b:e7:
06:53:5e:09:ae:ca:fa:43:da:57:8f:06:19:d0:8c:
91:be:6c:17:ef:92:30:1d:02:20:60:65:bf:93:1e:
a7:1d:21:23:dd:e4:d0:6a:ec:77:7d:f4:15:ac:fb:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:6E:CB:7D:F8:CC:05:37:32:60:7E:35:FB:8B:72:39:F1:3C:46
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0a:d6:b4:66:02:17:fe:48:b4:b3:3e:00:0c:41:c9:b6:ee:
a6:22:e2:df:40:82:8b:3d:1e:12:c5:c9:41:07:61:02:aa:a2:
20:a9:0e:b5:61:b6:f6:72:22:39:39:1e:43:7f:8b:1c:8a:a0:
12:53:c1:ec:44:f4:ef:fb:85:6f:a0:20:46:0c:44:b1:10:04:
77:18:2f:94:13:05:1c:b9:a7:ee:d9:61:3c:32:99:7d:61:3f:
32:77:26:a2:a0:0b:de:b1:15:be:da:8e:07:a6:25:01:e6:66:
39:cd:b8:21:68:43:6b:82:9c:0b:b0:10:95:ca:1a:e8:db:e3:
89:87:6f:63:ca:6f:ef:fc:96:ee:7f:62:9a:01:d0:8a:3b:b6:
95:1d:3f:e2:ec:39:83:92:54:ed:6a:a4:7e:5a:9a:f6:ff:c9:
fa:13:d9:90:83:c2:58:6f:ba:bd:dc:7d:df:ee:de:4c:66:7d:
8a:20:1a:3c:e4:44:b4:72:1b:90:57:73:3c:cf:3b:b7:0a:4e:
d5:c9:89:c4:3f:c9:91:02:a3:60:d5:3a:2b:9e:3d:28:72:12:
e7:b7:13:87:3c:c4:f2:b1:4f:03:07:89:6a:3b:6d:3c:d4:49:
b6:ca:f8:32:e7:0b:67:f5:16:06:0d:b2:a9:c4:0f:60:5b:1b:
8e:27:8b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Mb9EqZk+mgoz+a/La7CPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl
MmY2YTUwHhcNMjYwODA0MTEwMTQ3WhcNMjYwODA1MTEwMTQ3WjAzMTEwLwYDVQQD
EygxNzZkNmVjYjdkZjhjYzA1MzczMjYwN2UzNWZiOGI3MjM5ZjEzYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn55tAF9cpuhemiN8aWmX2+hJrvk
wVuEBoo2uEFAHgBct3pMdOdk0eJPPH4iOky+ly/n5QCRpnQ2JsIPAaiosHrN7WdP
mGYwgiTzjhFk1j2DqwksyQ5BqojS34O6T1lwKaZhoR42Sn3O2v13UVMC+lkKsbOF
vSX4m6fBSC9fKWV9jyQkdMc/nBU5YzWtNwTr8/CgsK7BYTYZCiQl/q9BR8ZeoWKJ
/iQKw7DlorfDhke+z+tO+MjLs/SjfkIRZlUjU/XVqEuCVf3RGME1ugJRG+cGU14J
rsr6Q9pXjwYZ0IyRvmwX75IwHQIgYGW/kx6nHSEj3eTQaux3ffQVrPsA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdtbst9+MwFNzJgfjX7i3I58TxGMB8GA1UdIwQY
MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt
MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi
LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQrWtGYC
F/5ItLM+AAxBybbupiLi30CCiz0eEsXJQQdhAqqiIKkOtWG29nIiOTkeQ3+LHIqg
ElPB7ET07/uFb6AgRgxEsRAEdxgvlBMFHLmn7tlhPDKZfWE/MncmoqAL3rEVvtqO
B6YlAeZmOc24IWhDa4KcC7AQlcoa6NvjiYdvY8pv7/yW7n9imgHQiju2lR0/4uw5
g5JU7Wqkflqa9v/J+hPZkIPCWG+6vdx93+7eTGZ9iiAaPOREtHIbkFdzPM87twpO
1cmJxD/JkQKjYNU6K549KHIS57cThzzE8rFPAweJajttPNRJtsr4MucLZ/UWBg2y
qcQPYFsbjieLTA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:16:13 2026 by rpki-client