Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: uCWd49cbKkhCleZbkcqWcLc6XynpL4RgsBpIhjn6+qw=
Subject key identifier: 26:37:98:98:0E:36:ED:7A:2D:64:03:3A:85:43:8C:16:76:03:96:DC
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019F40F6551659F9C57B66F41FACC9FA9185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1A38
Signing time: Wed 08 Jul 2026 09:01:53 +0000
Manifest this update: Wed 08 Jul 2026 09:01:53 +0000
Manifest next update: Thu 09 Jul 2026 09:01:53 +0000
Files and hashes: 1: BeEhpJ2vUthjwMyk1lGhO1-3Auo.roa (hash: A0KiswBiQPD6jOHQLri8ashYBW809fAnElJPzPUJSj0=)
2: E6q6eSrLi268w1uPKMft6UdzObk.roa (hash: S1oys4ak/3DgjByILcVQEYtOAEhLnSHTS9hR+3ZaKKA=)
3: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
4: MLJTDLF6ov2d8CfzpAjbs1bI62A.roa (hash: +MihOq2rYGVN7ggNp0KRd6/6WeF44oBwxXDejz3+p68=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: cXLvsHvbg46dXys6tsFGlStaivg.roa (hash: xZAflEOGoHPXdRw1KqKL76cGPns+HOuukJvybKU+IFM=)
7: n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa (hash: FSpOuQ2nrISxfoUe3fSxdbkQG7z+i/gLxzEWx9TRdDM=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: Gabe3f+vHWGa+SrDUpycOUUKdfKweozcl4DEF41kV3Q=)
9: whZDnVbA7DTq6XCQtpnwVv571yY.roa (hash: jaXDYTJdd7AC0EYJLuwjwpmbHTLmmIjlV4gnm9WnvPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:f6:55:16:59:f9:c5:7b:66:f4:1f:ac:c9:fa:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jul 8 09:01:53 2026 GMT
Not After : Jul 9 09:01:53 2026 GMT
Subject: CN=263798980e36ed7a2d64033a85438c16760396dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:a6:26:25:05:b0:4a:d7:06:b0:52:ba:1e:
3a:95:87:f6:5e:04:2c:ef:12:41:c8:37:b9:13:ef:
9d:89:fb:ec:96:eb:dd:46:2a:99:e0:20:52:a5:cc:
4d:6b:22:6c:c9:28:c6:73:cf:7b:75:7a:25:c9:fe:
b3:ba:4e:28:b6:e2:b7:53:13:5c:25:48:0e:a9:bc:
9c:38:ea:7b:65:45:b4:19:8e:22:2a:4b:8d:eb:21:
37:74:40:f3:ca:87:30:4f:c5:85:e8:e9:9b:fe:ad:
8a:75:64:40:31:53:3d:e5:50:f5:05:0e:52:8f:78:
41:98:26:08:22:e8:86:c1:4b:83:38:9a:10:f8:6d:
e8:80:2c:4a:3a:78:1a:bd:df:3a:da:73:55:c6:f5:
97:35:0f:81:d1:f7:1e:0d:19:56:54:6c:e5:e7:06:
35:01:c2:ef:73:7c:7a:9d:49:6b:c3:19:e7:55:8b:
83:8a:98:aa:dd:09:e5:b5:f3:a4:d1:a1:89:d3:2f:
36:ea:25:6a:a4:95:bb:bb:f8:1d:01:5b:e2:37:21:
58:ef:7a:ca:fd:3d:42:be:57:56:2f:f4:42:93:50:
3f:1e:e3:0c:fe:60:ea:8b:18:e6:3c:6a:e9:21:a7:
68:05:75:69:a0:f9:dc:4b:2e:f2:1d:96:fe:1b:61:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:98:98:0E:36:ED:7A:2D:64:03:3A:85:43:8C:16:76:03:96:DC
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:c1:02:a5:63:89:31:aa:88:f1:2f:ac:d5:57:7b:b1:44:
90:96:68:d6:c3:52:4d:c6:b0:18:bf:35:bd:0e:cc:30:fb:bb:
a0:39:91:89:68:df:db:79:69:68:81:9b:ea:97:90:74:ee:57:
aa:26:64:d9:0a:0f:e4:40:6d:36:95:2a:72:64:56:c1:26:f2:
ae:2c:03:b2:e7:b9:49:c4:d6:f4:95:0e:6a:a9:b1:e2:75:1f:
03:5c:ba:c6:68:47:41:17:ca:3d:5c:ac:f1:cc:f6:0b:c6:b0:
be:07:40:8a:82:5b:7d:e2:70:0d:18:6c:f0:40:d2:15:19:50:
03:6c:48:d0:6a:1b:a1:64:95:b4:83:36:24:cd:46:f2:8c:70:
90:79:71:2f:2f:05:3c:51:8e:2d:78:2b:90:3a:45:78:4d:71:
11:f1:f3:0b:f7:14:b1:82:80:72:2e:5c:ae:60:0a:e5:3a:8f:
cc:20:c9:47:58:37:22:94:9a:80:cc:34:a6:77:2e:65:40:b0:
91:cf:48:24:80:2e:a9:5d:62:aa:a3:95:95:0f:11:a7:54:67:
6b:f2:22:45:56:f2:cc:33:a2:42:1d:9b:91:8b:b3:43:87:20:
c9:9d:82:ca:58:24:b5:a1:f6:1c:29:ff:b4:5d:18:ff:a9:70:
f9:d2:7d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9A9lUWWfnFe2b0H6zJ+pGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNzA4MDkwMTUzWhcNMjYwNzA5MDkwMTUzWjAzMTEwLwYDVQQD
EygyNjM3OTg5ODBlMzZlZDdhMmQ2NDAzM2E4NTQzOGMxNjc2MDM5NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52qmJiUFsErXBrBSuh46lYf2XgQs
7xJByDe5E++difvsluvdRiqZ4CBSpcxNayJsySjGc897dXolyf6zuk4otuK3UxNc
JUgOqbycOOp7ZUW0GY4iKkuN6yE3dEDzyocwT8WF6Omb/q2KdWRAMVM95VD1BQ5S
j3hBmCYIIuiGwUuDOJoQ+G3ogCxKOngavd862nNVxvWXNQ+B0fceDRlWVGzl5wY1
AcLvc3x6nUlrwxnnVYuDipiq3QnltfOk0aGJ0y826iVqpJW7u/gdAVviNyFY73rK
/T1CvldWL/RCk1A/HuMM/mDqixjmPGrpIadoBXVpoPncSy7yHZb+G2EX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY3mJgONu16LWQDOoVDjBZ2A5bcMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldfBAqVj
iTGqiPEvrNVXe7FEkJZo1sNSTcawGL81vQ7MMPu7oDmRiWjf23lpaIGb6peQdO5X
qiZk2QoP5EBtNpUqcmRWwSbyriwDsue5ScTW9JUOaqmx4nUfA1y6xmhHQRfKPVys
8cz2C8awvgdAioJbfeJwDRhs8EDSFRlQA2xI0GoboWSVtIM2JM1G8oxwkHlxLy8F
PFGOLXgrkDpFeE1xEfHzC/cUsYKAci5crmAK5TqPzCDJR1g3IpSagMw0pncuZUCw
kc9IJIAuqV1iqqOVlQ8Rp1Rna/IiRVbyzDOiQh2bkYuzQ4cgyZ2CylgktaH2HCn/
tF0Y/6lw+dJ9Wg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:52 2026 by rpki-client