Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: Jw/9UaTA4tyNz1ZiBkqtfWFZ5u2By9+huDPLvN4Iyhk=
Subject key identifier: 13:61:11:F7:CB:30:61:77:E7:65:36:35:A7:CA:C2:72:8D:22:B5:33
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0292153BEA2D82D282C26B0CDC3A4D64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1AC6
Signing time: Sat 22 Aug 2026 11:00:44 +0000
Manifest this update: Sat 22 Aug 2026 11:00:44 +0000
Manifest next update: Sun 23 Aug 2026 11:00:44 +0000
Files and hashes: 1: 0rvExH1QWKXziRTvvOcop6xMIwQ.roa (hash: YsN4DYQKnH+OtwgjwMbgWy2KQVampjXuc4aaV1ttU8U=)
2: BF7OFUJukKHAgS7lmikNlJH2Fpk.roa (hash: eTqEnPLw1cIkRbdBnYDGMGqXIKbfscDcZOBsLX/7VRI=)
3: FlNvIBDOBdonn3aaFX3mtfoEgdY.roa (hash: NV4aCXfghszJfOz/yii1kdXVIUYUXdQt970ZYxOTSP8=)
4: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
5: USq_PbBFImqCUvsmyZhr-M-58ZY.roa (hash: L7Vdkc3Ytx2vM7ApwTigvQ3Q6rZqh17pnCq2YZjN5bI=)
6: XUXKjueynUl8CH15lFlnhScb0yc.roa (hash: cmwM0aumCj0dEcs90DQIh/pBVhCLBkdHGdbl/Tzn0j0=)
7: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
8: iyKfCMBMq-ib6l5tcHvXM7GrDoA.roa (hash: 3bSSYoP+WFxl847i19b48E53/b9VOMIschku0IY9Rms=)
9: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: TsHoHH3wzlCCcGoit0wvbbgvk4HVRblM3VMybZm9wxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:53:be:a2:d8:2d:28:2c:26:b0:cd:c3:a4:d6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 22 11:00:44 2026 GMT
Not After : Aug 23 11:00:44 2026 GMT
Subject: CN=136111f7cb306177e7653635a7cac2728d22b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:75:4d:dc:ad:c6:f5:a5:e8:11:8d:46:c7:42:
84:ec:4e:2f:b2:69:61:f1:2e:04:96:79:41:0a:90:
e1:a2:69:92:12:bf:aa:be:59:39:53:0b:b6:62:7a:
64:c1:b3:2a:a5:0e:40:22:9d:1e:80:76:ed:6a:59:
d3:05:55:26:21:18:5f:a9:d8:ed:e4:f2:c7:e0:6a:
cf:68:78:c3:f9:52:3d:fc:e8:83:ca:73:2b:c3:e2:
d4:a0:60:e5:a8:9b:72:7f:f7:2f:54:e2:3c:65:0d:
c0:72:14:11:bf:b5:8f:af:6d:22:c6:6c:fd:d7:b0:
c3:09:89:a1:2c:74:c1:c8:2d:e4:dd:2e:1e:e9:b5:
11:e0:bd:5d:f2:fa:1f:2b:1e:c0:b6:b9:0e:01:f7:
c6:ba:1e:bc:5a:3a:c4:94:f8:c5:d8:c9:25:05:39:
ca:78:8c:09:d0:54:f1:04:7a:d7:8a:fb:10:ad:52:
40:2b:b6:20:1b:b8:8e:0c:2c:24:31:27:dd:74:d8:
20:fc:73:bf:ae:d6:50:02:a5:47:d9:71:75:54:0f:
86:c7:76:29:8d:86:71:2d:31:4f:34:e5:2d:d2:50:
90:4c:06:85:06:29:5b:29:44:26:2f:24:f7:96:4d:
27:a8:29:b0:f6:31:3d:c1:33:e3:4b:e7:f4:6b:60:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:11:F7:CB:30:61:77:E7:65:36:35:A7:CA:C2:72:8D:22:B5:33
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:7d:6b:65:2b:29:50:d9:66:fc:2c:22:49:73:57:ca:49:
8f:c9:e0:54:53:2f:91:f5:1f:31:e3:85:83:07:d4:df:14:27:
6d:cb:47:87:2a:2a:b4:55:70:12:06:a6:9e:1a:fd:a0:4a:6b:
b2:78:0e:d4:be:52:30:67:98:e8:67:d0:60:16:5b:6c:49:01:
07:33:01:a6:d5:0b:3a:0d:e9:78:ef:da:90:20:63:d8:2f:f9:
99:b3:2a:56:f5:b7:df:52:a4:de:6d:59:a3:25:79:3a:fa:da:
ba:0a:72:94:ac:65:4c:ec:81:5b:d0:9c:ce:0e:a1:5b:29:73:
c6:3d:bc:33:20:c1:c2:61:08:0a:b2:4e:59:8f:c8:8d:24:44:
bb:22:f6:aa:9f:85:87:70:f3:ee:4d:e7:26:a6:67:3d:9e:1c:
0d:f7:67:03:d8:89:68:67:3e:c2:9a:2a:b2:28:3f:cd:40:92:
ab:62:a1:28:1a:94:a3:79:68:63:ff:50:a8:7e:44:e6:e5:64:
cf:ba:f8:50:71:33:37:73:1b:d4:c7:27:34:97:bf:d3:86:e9:
c5:50:0e:f0:5d:1b:30:d2:63:e0:c8:d4:fa:72:c6:ad:f1:04:
b9:a2:9e:8a:dc:27:4d:1e:fd:29:96:b3:a2:7f:28:5a:23:94:
29:c8:d1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApIVO+otgtKCwmsM3DpNZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwODIyMTEwMDQ0WhcNMjYwODIzMTEwMDQ0WjAzMTEwLwYDVQQD
EygxMzYxMTFmN2NiMzA2MTc3ZTc2NTM2MzVhN2NhYzI3MjhkMjJiNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XVN3K3G9aXoEY1Gx0KE7E4vsmlh
8S4ElnlBCpDhommSEr+qvlk5Uwu2YnpkwbMqpQ5AIp0egHbtalnTBVUmIRhfqdjt
5PLH4GrPaHjD+VI9/OiDynMrw+LUoGDlqJtyf/cvVOI8ZQ3AchQRv7WPr20ixmz9
17DDCYmhLHTByC3k3S4e6bUR4L1d8vofKx7AtrkOAffGuh68WjrElPjF2MklBTnK
eIwJ0FTxBHrXivsQrVJAK7YgG7iODCwkMSfddNgg/HO/rtZQAqVH2XF1VA+Gx3Yp
jYZxLTFPNOUt0lCQTAaFBilbKUQmLyT3lk0nqCmw9jE9wTPjS+f0a2BN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNhEffLMGF352U2NafKwnKNIrUzMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVp9a2Ur
KVDZZvwsIklzV8pJj8ngVFMvkfUfMeOFgwfU3xQnbctHhyoqtFVwEgamnhr9oEpr
sngO1L5SMGeY6GfQYBZbbEkBBzMBptULOg3peO/akCBj2C/5mbMqVvW331Kk3m1Z
oyV5OvraugpylKxlTOyBW9Cczg6hWylzxj28MyDBwmEICrJOWY/IjSREuyL2qp+F
h3Dz7k3nJqZnPZ4cDfdnA9iJaGc+wpoqsig/zUCSq2KhKBqUo3loY/9QqH5E5uVk
z7r4UHEzN3Mb1McnNJe/04bpxVAO8F0bMNJj4MjU+nLGrfEEuaKeitwnTR79KZaz
on8oWiOUKcjRRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:47:51 2026 by rpki-client