Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File: KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier: WV2oe2ndDfNQ61hvGBrRM99nr9acPTADg1JFLwRxBEg=
Subject key identifier: AD:99:D4:77:91:92:57:C2:D1:59:BA:1E:4C:AF:85:B2:D3:A3:AD:3D
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 01A0201E1994A2258830BCC0951DBDC6616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number: 0986
Signing time: Thu 20 Aug 2026 17:00:38 +0000
Manifest this update: Thu 20 Aug 2026 17:00:38 +0000
Manifest next update: Fri 21 Aug 2026 17:00:38 +0000
Files and hashes: 1: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: WKhTQCQzFoP0WI0prFzfbscOopy2Hd0qrO9jhzplW/8=)
2: Xz9ZzxndKI0PcrapUKoUCMQ3X_Y.roa (hash: iobEnFpnj2gMfTgfXBWjm230a5l/fYY/rsdkSlzHTBY=)
3: fLAF4G67hv9tPfc_3UKCBvCfSlg.roa (hash: 3BmIz1KJKD3N0MlZqF9hPkHknhq/hRGM3d77oRfIrWk=)
4: zkEDbiGN36tLEUPTADK7tT6KZy4.roa (hash: heFMDQ/ngRlQqjUHbU5e/JEcSh3lbS47ak2zBoYzTAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:19:94:a2:25:88:30:bc:c0:95:1d:bd:c6:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Aug 20 17:00:38 2026 GMT
Not After : Aug 21 17:00:38 2026 GMT
Subject: CN=ad99d477919257c2d159ba1e4caf85b2d3a3ad3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:eb:a7:ab:2a:e7:0e:49:65:a1:e6:33:fa:
d8:f8:2d:0f:f2:be:6b:8e:09:b8:b7:ef:c7:99:5a:
f5:5e:7c:fd:c1:a6:f4:a2:cc:9c:44:75:f7:d9:51:
e3:13:e1:d2:fb:6c:01:da:33:a1:8a:03:74:c9:ae:
34:b2:9f:72:11:20:ad:9f:87:cb:73:fd:9f:84:d6:
ad:5f:79:ac:a4:ee:93:f3:7d:35:c8:44:af:34:4f:
f2:6d:12:17:be:63:6d:db:22:de:bb:6b:64:27:bc:
21:29:aa:5f:76:8e:b5:58:24:90:24:d9:f5:4e:12:
fd:00:b2:fc:62:11:c3:fd:8c:37:14:18:7f:77:86:
0d:cd:ef:9b:05:d6:ec:b2:9d:9c:4c:4e:a2:31:e1:
d2:4e:6d:d8:db:78:23:83:f5:ca:21:05:d2:5a:22:
c8:3d:1f:7d:c9:ca:d8:a9:b3:7e:a2:61:c2:ca:b8:
fd:b9:f7:75:e1:a3:f2:39:13:54:f9:8e:6e:03:5e:
cd:b1:e9:06:32:b8:0d:a2:09:e4:ea:93:af:9b:89:
4d:b6:39:c2:0d:55:10:6d:47:7b:46:b3:80:74:4e:
3d:cc:a4:f4:59:12:4b:65:e9:7e:43:c9:09:5d:97:
e8:a7:d0:07:cb:05:15:9f:21:47:b5:9b:65:2f:45:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:D4:77:91:92:57:C2:D1:59:BA:1E:4C:AF:85:B2:D3:A3:AD:3D
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f4:71:1d:c2:4b:6a:2a:08:9c:d1:4b:b7:bb:4c:74:5a:01:
9f:48:93:19:f7:e9:00:d1:09:43:70:bd:3e:65:ba:d7:fc:84:
af:68:63:f0:93:81:93:da:68:36:fd:4f:fc:12:48:63:40:d5:
c9:27:6f:f5:29:75:b7:9b:17:74:52:8e:f7:85:97:46:a4:17:
69:f1:6e:7c:b8:f2:97:c4:4d:66:99:2f:58:53:79:25:21:a6:
be:76:e0:91:82:b6:fd:13:12:80:90:82:67:83:43:1f:99:e9:
05:4e:42:71:5a:49:46:a9:2f:94:c2:38:38:88:4f:05:4d:0b:
6e:77:5d:e0:03:15:b1:63:b7:6e:fb:39:c6:44:90:41:5a:d0:
b9:4c:58:10:bc:4b:23:10:96:8c:6d:35:65:02:ee:c4:ec:f1:
bf:b7:c6:19:0f:54:1a:54:fa:ef:71:58:8a:a9:46:69:ca:3a:
d4:da:c5:e2:ce:40:4b:f6:cd:31:ca:39:5d:8a:e9:67:b6:c7:
f1:0e:ab:16:51:24:5a:9f:eb:97:f3:d7:c0:57:cc:ff:cc:01:
7b:21:3b:b8:24:5c:42:9f:47:b9:ef:27:6c:d3:88:38:1e:e5:
68:98:65:3d:3b:ab:26:70:2f:fc:dd:c1:26:c8:fc:25:c0:6e:
f2:05:61:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgHhmUoiWIMLzAlR29xmFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDg1ZmM1MzRjMTNlMDg4MmUyNjBhODk1ZjNjZjBjNTU0
M2VmMDgwHhcNMjYwODIwMTcwMDM4WhcNMjYwODIxMTcwMDM4WjAzMTEwLwYDVQQD
EyhhZDk5ZDQ3NzkxOTI1N2MyZDE1OWJhMWU0Y2FmODViMmQzYTNhZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y3rp6sq5w5JZaHmM/rY+C0P8r5r
jgm4t+/HmVr1Xnz9wab0osycRHX32VHjE+HS+2wB2jOhigN0ya40sp9yESCtn4fL
c/2fhNatX3mspO6T8301yESvNE/ybRIXvmNt2yLeu2tkJ7whKapfdo61WCSQJNn1
ThL9ALL8YhHD/Yw3FBh/d4YNze+bBdbssp2cTE6iMeHSTm3Y23gjg/XKIQXSWiLI
PR99ycrYqbN+omHCyrj9ufd14aPyORNU+Y5uA17NsekGMrgNognk6pOvm4lNtjnC
DVUQbUd7RrOAdE49zKT0WRJLZel+Q8kJXZfop9AHywUVnyFHtZtlL0UQEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Z1HeRklfC0Vm6HkyvhbLTo609MB8GA1UdIwQY
MBaAFCkIX8U0wT4IguJgqJXzzwxVQ+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWIt
YzMyOTcxMjllNGQzLzEvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWItYzMyOTcxMjllNGQz
LzEvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfRxHcJL
aioInNFLt7tMdFoBn0iTGffpANEJQ3C9PmW61/yEr2hj8JOBk9poNv1P/BJIY0DV
ySdv9Sl1t5sXdFKO94WXRqQXafFufLjyl8RNZpkvWFN5JSGmvnbgkYK2/RMSgJCC
Z4NDH5npBU5CcVpJRqkvlMI4OIhPBU0Lbndd4AMVsWO3bvs5xkSQQVrQuUxYELxL
IxCWjG01ZQLuxOzxv7fGGQ9UGlT673FYiqlGaco61NrF4s5AS/bNMco5XYrpZ7bH
8Q6rFlEkWp/rl/PXwFfM/8wBeyE7uCRcQp9Hue8nbNOIOB7laJhlPTurJnAv/N3B
Jsj8JcBu8gVhZA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:37 2026 by rpki-client