Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: cakwEM6nFiA5k86DWhCN6rSo4X30V7FP4tq/uHuj5vQ=
Subject key identifier: 0F:27:E6:59:F9:55:6A:C6:ED:34:C9:10:A5:87:68:58:51:C3:CE:B2
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019EEEC6CCC248060718C67509939EFB35A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 048C
Signing time: Mon 22 Jun 2026 10:01:06 +0000
Manifest this update: Mon 22 Jun 2026 10:01:06 +0000
Manifest next update: Tue 23 Jun 2026 10:01:06 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: nb8RIW//fZnaQGZ8/hf5VtDtfemmXCp9I4MXBz1tCoQ=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:c6:cc:c2:48:06:07:18:c6:75:09:93:9e:fb:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Jun 22 10:01:06 2026 GMT
Not After : Jun 23 10:01:06 2026 GMT
Subject: CN=0f27e659f9556ac6ed34c910a587685851c3ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:0c:f3:1c:c0:9d:44:09:06:bb:cf:cc:3c:
d4:6b:40:ef:8e:0c:06:40:2c:e6:a3:cf:f7:00:72:
e9:38:3d:5d:94:b3:b5:c8:b8:e4:e0:4e:90:92:43:
20:c2:14:71:d6:cd:55:04:71:37:03:9b:7c:81:fa:
e4:55:d8:60:5a:c7:cd:e3:f6:ac:fb:27:32:5a:0d:
73:71:1d:56:fa:b2:ea:18:48:1e:a3:97:fd:61:4a:
93:0e:2f:94:ab:18:7e:fb:b1:71:f3:65:4c:63:c3:
6b:d1:fc:7a:fd:96:39:cd:6f:72:b1:8a:95:34:14:
d9:50:38:d2:2b:f3:fe:0a:c8:6a:2f:5f:f7:28:97:
27:77:b8:ed:c0:39:c3:a8:15:55:22:82:8e:4c:36:
a7:a6:a4:8e:54:a6:38:8e:41:49:a9:92:09:cb:a2:
ea:0c:53:72:f9:6f:85:da:76:0d:c4:61:35:26:1c:
d4:0b:38:1b:b4:f7:15:5d:2a:17:af:69:fa:14:25:
26:87:a3:d4:a1:51:a0:44:56:a4:69:71:c5:de:de:
92:0e:c8:a9:4f:05:72:e4:f2:1c:a5:f7:81:86:1c:
ea:1b:8c:1a:b9:6a:a5:d4:2d:b9:2c:9e:b3:cf:d6:
43:2d:51:fb:d9:96:83:4d:a1:10:f3:b8:1f:2a:26:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:E6:59:F9:55:6A:C6:ED:34:C9:10:A5:87:68:58:51:C3:CE:B2
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:6b:91:72:9d:dd:3b:49:a7:1a:76:d7:9f:7a:c1:34:2b:
d2:9e:0d:7a:6c:d1:81:c5:06:83:ce:9e:9a:30:7e:81:d7:43:
f5:ef:38:17:81:2f:40:4f:d1:21:17:06:09:f6:d0:35:45:ef:
ed:02:02:00:db:e2:52:24:ca:60:1f:a3:b6:7e:10:58:2c:91:
b3:79:58:43:2f:77:13:21:05:d8:ee:32:7c:7c:11:e8:c9:38:
ff:24:e6:7d:03:70:31:3d:45:eb:cc:28:7d:f9:86:78:c7:53:
37:c1:9e:c5:13:e4:39:a7:5a:d4:70:56:bd:3c:61:ab:1e:21:
80:7d:6a:28:4e:b0:e8:75:31:63:3b:1f:29:57:2a:14:bc:f8:
c8:dc:61:e1:81:43:ae:d0:0d:63:50:ee:36:f9:43:82:1e:d5:
0a:1a:ab:a3:36:24:c0:e0:b4:c6:af:a9:60:b0:55:1a:f8:c0:
0f:8b:90:16:0a:73:a4:d5:ce:61:29:06:c4:ec:67:82:2d:6b:
b3:8a:b4:6a:1c:37:11:60:e6:88:dd:24:bd:7d:e2:9c:f1:6a:
f3:5b:6f:34:db:4a:94:6a:d2:c4:2b:da:f7:7e:7f:06:c2:95:
d6:1a:03:2e:9f:77:39:1e:e2:d5:f3:96:7e:86:3b:1a:7a:d2:
79:c7:85:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7uxszCSAYHGMZ1CZOe+zWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz
ZWQxNWUwHhcNMjYwNjIyMTAwMTA2WhcNMjYwNjIzMTAwMTA2WjAzMTEwLwYDVQQD
EygwZjI3ZTY1OWY5NTU2YWM2ZWQzNGM5MTBhNTg3Njg1ODUxYzNjZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqoM8xzAnUQJBrvPzDzUa0DvjgwG
QCzmo8/3AHLpOD1dlLO1yLjk4E6QkkMgwhRx1s1VBHE3A5t8gfrkVdhgWsfN4/as
+ycyWg1zcR1W+rLqGEgeo5f9YUqTDi+Uqxh++7Fx82VMY8Nr0fx6/ZY5zW9ysYqV
NBTZUDjSK/P+CshqL1/3KJcnd7jtwDnDqBVVIoKOTDanpqSOVKY4jkFJqZIJy6Lq
DFNy+W+F2nYNxGE1JhzUCzgbtPcVXSoXr2n6FCUmh6PUoVGgRFakaXHF3t6SDsip
TwVy5PIcpfeBhhzqG4wauWql1C25LJ6zz9ZDLVH72ZaDTaEQ87gfKibhIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8n5ln5VWrG7TTJEKWHaFhRw86yMB8GA1UdIwQY
MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct
YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj
LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcZrkXKd
3TtJpxp21596wTQr0p4NemzRgcUGg86emjB+gddD9e84F4EvQE/RIRcGCfbQNUXv
7QICANviUiTKYB+jtn4QWCyRs3lYQy93EyEF2O4yfHwR6Mk4/yTmfQNwMT1F68wo
ffmGeMdTN8GexRPkOada1HBWvTxhqx4hgH1qKE6w6HUxYzsfKVcqFLz4yNxh4YFD
rtANY1DuNvlDgh7VChqrozYkwOC0xq+pYLBVGvjAD4uQFgpzpNXOYSkGxOxngi1r
s4q0ahw3EWDmiN0kvX3inPFq81tvNNtKlGrSxCva935/BsKV1hoDLp93OR7i1fOW
foY7GnrSeceFeg==
-----END CERTIFICATE-----
Generated at Mon Jun 22 15:27:35 2026 by rpki-client