Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: H6oxih32fEivlocwa/oCoEWN2fKjV54PzU+FATEsPgs=
Subject key identifier: 7D:92:DF:CD:35:FD:44:DF:5F:E7:A7:83:30:7F:34:4E:16:02:CC:E4
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019F1868180EE143B9C54AE63B32FF74D9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 15EF
Signing time: Tue 30 Jun 2026 12:01:42 +0000
Manifest this update: Tue 30 Jun 2026 12:01:42 +0000
Manifest next update: Wed 01 Jul 2026 12:01:42 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: Oz+iNmSyKQCONLek2fF+68cEfhNhLHRQFQ1IPsDr1p4=)
2: S6WAJx7TbU110k_g0oyFg1H_34U.roa (hash: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:18:0e:e1:43:b9:c5:4a:e6:3b:32:ff:74:d9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Jun 30 12:01:42 2026 GMT
Not After : Jul 1 12:01:42 2026 GMT
Subject: CN=7d92dfcd35fd44df5fe7a783307f344e1602cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:1c:fd:e2:b6:3a:d6:85:77:07:07:f4:ae:
b3:4b:92:6c:58:1b:11:42:cd:85:2e:d0:5f:99:9a:
86:4f:16:4f:09:21:c3:82:08:c4:ee:93:d7:7d:d3:
4a:24:07:72:7f:6b:b8:da:ce:46:01:96:c6:6d:50:
58:e1:2d:71:e3:6f:c4:b5:4b:0f:f4:60:29:90:91:
fa:cf:1d:aa:30:80:20:19:7d:90:36:64:0e:9f:96:
69:9e:5a:0a:b1:4e:a6:9a:6f:d7:bf:a5:cf:fb:c4:
22:e5:19:91:a2:63:40:1a:de:6d:94:85:99:6d:9a:
ec:76:6c:30:d7:6e:c0:40:59:b2:e5:eb:b4:bb:85:
3f:af:f7:e2:bd:b0:6c:6f:23:79:98:06:0b:66:21:
6b:ef:c4:39:97:af:ff:9e:2d:c4:db:ec:41:ef:bb:
3b:d4:3c:f8:1e:db:eb:6d:bb:a2:e8:c7:fd:43:d3:
30:89:ee:f6:8c:08:85:14:34:0b:9d:b8:3c:2a:02:
d8:80:1f:65:f0:b3:fa:91:fd:b8:99:67:15:c4:33:
0e:d2:a2:64:04:31:ac:3a:4e:3a:eb:03:b5:8b:ff:
16:8b:a6:6b:cc:eb:9c:0d:49:7d:31:f7:ed:a9:66:
19:b9:e6:a2:85:14:69:7e:44:7e:f1:52:de:d1:74:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:92:DF:CD:35:FD:44:DF:5F:E7:A7:83:30:7F:34:4E:16:02:CC:E4
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ea:67:a5:44:d3:25:90:27:29:f1:b8:f6:ca:7d:ed:38:7c:
d5:55:60:5e:5a:41:a2:5e:33:51:8f:8b:33:57:76:8c:46:8a:
22:e9:64:63:62:b4:d8:43:c6:11:02:d2:50:cd:ee:41:0d:44:
3a:5a:0a:83:28:5c:ff:7c:90:f2:44:8c:82:ef:ed:76:4e:c2:
18:f5:aa:59:66:92:75:4c:43:0d:ed:90:ed:71:37:6b:c1:2c:
c7:c8:21:bf:36:35:6c:a1:f1:76:22:6d:40:89:a4:54:2a:ba:
15:45:5c:09:f5:f7:e3:7e:b8:59:2e:2c:32:4f:71:3c:14:77:
88:e4:c0:29:2e:34:a3:f8:81:88:34:cc:90:5f:75:42:67:66:
d1:32:d2:e3:7a:fb:a0:02:49:11:9e:01:f7:99:76:ec:22:26:
5b:30:a9:a9:17:90:ed:e9:fa:87:aa:9d:99:0a:e7:4a:ae:43:
86:80:5b:60:eb:f7:7f:ed:31:91:5c:e4:02:32:ef:f2:07:6c:
dc:c7:51:cc:51:7f:82:9e:06:9a:33:66:a4:74:45:41:77:f0:
d6:ed:ed:ca:21:fe:19:64:31:c0:28:a6:52:dc:e0:c9:c4:a6:
e6:86:0a:e5:b9:5e:f6:99:f6:20:d3:78:90:98:07:d9:7e:0c:
ec:b4:42:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YaBgO4UO5xUrmOzL/dNmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx
MWE0ZTYwHhcNMjYwNjMwMTIwMTQyWhcNMjYwNzAxMTIwMTQyWjAzMTEwLwYDVQQD
Eyg3ZDkyZGZjZDM1ZmQ0NGRmNWZlN2E3ODMzMDdmMzQ0ZTE2MDJjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm24c/eK2OtaFdwcH9K6zS5JsWBsR
Qs2FLtBfmZqGTxZPCSHDggjE7pPXfdNKJAdyf2u42s5GAZbGbVBY4S1x42/EtUsP
9GApkJH6zx2qMIAgGX2QNmQOn5ZpnloKsU6mmm/Xv6XP+8Qi5RmRomNAGt5tlIWZ
bZrsdmww127AQFmy5eu0u4U/r/fivbBsbyN5mAYLZiFr78Q5l6//ni3E2+xB77s7
1Dz4Htvrbbui6Mf9Q9Mwie72jAiFFDQLnbg8KgLYgB9l8LP6kf24mWcVxDMO0qJk
BDGsOk466wO1i/8Wi6ZrzOucDUl9MfftqWYZueaihRRpfkR+8VLe0XQFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2S3801/UTfX+engzB/NE4WAszkMB8GA1UdIwQY
MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt
YzYyY2YyMGE1ZWM5LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5
LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOpnpUTT
JZAnKfG49sp97Th81VVgXlpBol4zUY+LM1d2jEaKIulkY2K02EPGEQLSUM3uQQ1E
OloKgyhc/3yQ8kSMgu/tdk7CGPWqWWaSdUxDDe2Q7XE3a8Esx8ghvzY1bKHxdiJt
QImkVCq6FUVcCfX34364WS4sMk9xPBR3iOTAKS40o/iBiDTMkF91Qmdm0TLS43r7
oAJJEZ4B95l27CImWzCpqReQ7en6h6qdmQrnSq5DhoBbYOv3f+0xkVzkAjLv8gds
3MdRzFF/gp4GmjNmpHRFQXfw1u3tyiH+GWQxwCimUtzgycSm5oYK5ble9pn2INN4
kJgH2X4M7LRC2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:27 2026 by rpki-client