Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: QquLPIesUEhQ0X/6OgVqtqf3a5y1mQ+Wbe7pE6Iyha0=
Subject key identifier: AB:10:F0:3D:56:1D:9C:0B:FE:56:74:7E:3D:1B:CC:B0:1B:51:F2:39
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 01A001DD36FF957C67060AE5F8208BA03538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0EA5
Signing time: Fri 14 Aug 2026 20:01:09 +0000
Manifest this update: Fri 14 Aug 2026 20:01:09 +0000
Manifest next update: Sat 15 Aug 2026 20:01:09 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: 2PBYIbdwGRfGFOy4Y77NXBfl1BuTlc93PVBPSPSCrQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:36:ff:95:7c:67:06:0a:e5:f8:20:8b:a0:35:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Aug 14 20:01:09 2026 GMT
Not After : Aug 15 20:01:09 2026 GMT
Subject: CN=ab10f03d561d9c0bfe56747e3d1bccb01b51f239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:b7:71:1a:81:12:fd:db:a5:19:9b:a3:8f:
89:78:55:1b:9e:1c:f2:cf:9d:9b:cb:44:ac:ed:b1:
d7:ab:44:5b:bb:d4:a4:d0:ed:a8:76:a5:85:91:68:
43:9e:5e:13:7f:e4:da:04:5f:0e:a8:4f:09:f6:71:
58:95:c3:1a:3e:de:86:32:1e:ac:fd:dd:ff:cb:c0:
fe:02:97:af:05:3e:c8:c4:17:fc:84:45:45:32:b7:
78:df:56:b7:22:a5:b3:05:20:54:76:b6:fd:4c:f6:
12:32:91:4b:d9:d0:de:ca:31:fe:6e:e9:31:02:57:
ea:60:39:f3:e3:0e:2c:31:bc:b2:e0:2a:07:b3:e1:
5a:e6:9f:ac:d4:d8:67:f2:1d:c8:a4:35:3d:e3:a6:
3d:8a:e9:ce:5f:dc:5a:90:3b:79:4b:40:8f:05:62:
01:9c:bf:94:2d:c1:91:81:f9:58:d1:f0:30:04:38:
43:e5:37:dc:4d:52:ef:11:3d:2b:d5:c4:01:ea:9b:
18:01:c9:b3:30:e0:63:ec:fa:be:d1:35:5d:39:24:
41:0b:a8:ac:49:9b:84:90:a4:83:27:37:c8:53:36:
93:50:4b:3f:b9:da:7c:0f:19:13:77:33:14:30:cb:
ea:93:41:f6:db:e7:3f:06:cb:2d:7b:51:70:ed:b5:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:F0:3D:56:1D:9C:0B:FE:56:74:7E:3D:1B:CC:B0:1B:51:F2:39
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:e2:e7:ee:fa:53:5a:a5:bc:e1:cc:1c:4a:c5:77:5a:27:
ac:b8:b2:9b:95:8f:59:30:14:84:30:f8:3b:59:07:7d:7c:bb:
09:29:75:2a:53:c5:b6:ad:9c:bc:33:4f:bf:0c:08:2d:49:c1:
9b:3b:d0:4b:56:5b:67:7a:70:14:8f:7c:06:f8:33:a6:f4:24:
f2:d8:01:f7:6c:26:93:c5:47:b1:32:38:1c:72:40:ca:cb:24:
e1:94:57:3c:11:42:3d:5b:89:5b:a0:8f:1d:2e:e4:47:93:57:
82:1d:43:ae:18:16:cc:4b:67:22:95:0e:b4:02:66:be:4a:8c:
0f:cc:f8:8b:9e:9b:ce:88:d6:30:f9:bb:72:a6:06:97:83:9b:
18:1f:a8:78:a7:44:2a:70:e0:dc:19:1b:29:9c:0d:a7:b2:bf:
2c:ba:d0:94:6e:1d:5c:24:48:cd:df:73:6f:20:de:79:09:d5:
69:6c:07:fa:f3:7b:24:0d:1c:a1:ec:ee:78:63:3c:a4:3e:1c:
94:aa:b2:ab:d8:ff:8f:04:17:27:e1:95:4e:f1:e6:6d:16:d9:
51:6b:65:ea:c9:ca:7f:00:10:95:19:4a:4e:b7:85:06:a1:fe:
e1:14:e5:6c:f3:e5:ba:e1:9f:40:62:fc:fd:dc:f4:2e:62:ee:
0f:14:dc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Tb/lXxnBgrl+CCLoDU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2
ODA0MTgwHhcNMjYwODE0MjAwMTA5WhcNMjYwODE1MjAwMTA5WjAzMTEwLwYDVQQD
EyhhYjEwZjAzZDU2MWQ5YzBiZmU1Njc0N2UzZDFiY2NiMDFiNTFmMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNS3cRqBEv3bpRmbo4+JeFUbnhzy
z52by0Ss7bHXq0Rbu9Sk0O2odqWFkWhDnl4Tf+TaBF8OqE8J9nFYlcMaPt6GMh6s
/d3/y8D+ApevBT7IxBf8hEVFMrd431a3IqWzBSBUdrb9TPYSMpFL2dDeyjH+bukx
AlfqYDnz4w4sMbyy4CoHs+Fa5p+s1Nhn8h3IpDU946Y9iunOX9xakDt5S0CPBWIB
nL+ULcGRgflY0fAwBDhD5TfcTVLvET0r1cQB6psYAcmzMOBj7Pq+0TVdOSRBC6is
SZuEkKSDJzfIUzaTUEs/udp8DxkTdzMUMMvqk0H22+c/Bsste1Fw7bW74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsQ8D1WHZwL/lZ0fj0bzLAbUfI5MB8GA1UdIwQY
MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt
NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk
LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV3i5+76
U1qlvOHMHErFd1onrLiym5WPWTAUhDD4O1kHfXy7CSl1KlPFtq2cvDNPvwwILUnB
mzvQS1ZbZ3pwFI98BvgzpvQk8tgB92wmk8VHsTI4HHJAyssk4ZRXPBFCPVuJW6CP
HS7kR5NXgh1DrhgWzEtnIpUOtAJmvkqMD8z4i56bzojWMPm7cqYGl4ObGB+oeKdE
KnDg3BkbKZwNp7K/LLrQlG4dXCRIzd9zbyDeeQnVaWwH+vN7JA0coezueGM8pD4c
lKqyq9j/jwQXJ+GVTvHmbRbZUWtl6snKfwAQlRlKTreFBqH+4RTlbPPluuGfQGL8
/dz0LmLuDxTcag==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:41 2026 by rpki-client