Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: qYpJPSdQRjvIUL+icO9uh3JRbDJv2A3Av0WBvbWOXpE=
Subject key identifier: F3:24:A1:02:3C:D5:F4:8E:F6:59:55:B2:AB:4C:2C:93:38:E6:D9:7C
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019F11F879CC016DAA62EFBA3E234D20CCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 06:02:04 +0000
Manifest this update: Mon 29 Jun 2026 06:02:04 +0000
Manifest next update: Tue 30 Jun 2026 06:02:04 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: 5Mrk9EXmQNWOpzO2FXW617ilB44BPt3OjdFnzFKCtOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:79:cc:01:6d:aa:62:ef:ba:3e:23:4d:20:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jun 29 06:02:04 2026 GMT
Not After : Jun 30 06:02:04 2026 GMT
Subject: CN=f324a1023cd5f48ef65955b2ab4c2c9338e6d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:66:73:e0:ec:91:57:ef:bd:ec:96:51:b9:
ea:2c:97:74:ee:f2:70:37:f5:9d:cf:1d:0e:38:fd:
cc:fe:ae:1e:08:6f:74:a1:5c:69:f1:f4:63:72:52:
5a:38:b9:1d:be:bb:af:f9:84:c1:ae:74:b8:78:61:
8d:6f:2f:a2:6a:a6:0d:59:48:9c:a1:0e:72:d3:b0:
39:10:f5:42:37:2f:02:25:5b:56:3f:de:0c:52:30:
20:f7:b7:30:ca:e2:b2:a8:1a:e5:7c:94:b5:b1:79:
91:0a:ca:54:61:42:58:36:39:43:d1:0b:88:a3:1a:
13:78:a9:f8:7f:73:87:3a:e8:3b:6f:a1:e3:c4:61:
4f:71:04:f0:5d:ee:1a:d6:6c:6a:1b:96:01:38:b1:
02:d1:01:8c:13:96:17:b5:80:1f:e7:37:29:9f:f5:
49:90:fd:a1:e1:1c:30:e0:3f:a6:ee:db:87:3c:5a:
4f:ce:c3:18:70:4b:c2:27:8c:72:91:66:c0:ef:ad:
7b:ad:17:3a:49:83:cd:5f:29:ae:48:54:88:ca:83:
39:ea:fd:e5:7a:5b:05:32:72:27:97:c2:cd:27:f6:
f5:13:fd:ed:e6:e6:82:bb:83:6f:4c:78:0a:01:88:
d7:e5:db:9c:c3:e4:27:ed:95:6e:11:5e:45:9c:da:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:A1:02:3C:D5:F4:8E:F6:59:55:B2:AB:4C:2C:93:38:E6:D9:7C
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:28:5a:48:53:41:c7:c7:77:2e:69:33:85:af:8c:7c:d9:
c4:b2:07:41:ed:9a:40:3f:c4:8a:d5:7d:af:2b:3b:25:9b:06:
6c:d8:8e:4d:3e:fe:9f:61:46:35:f6:22:a2:8d:70:d7:d9:94:
48:27:38:e8:86:b2:fa:14:9f:b7:b0:ec:d5:83:bd:6b:3f:b1:
af:48:75:a4:be:64:8c:1e:55:2a:91:96:62:4c:9c:46:03:e3:
74:a6:ff:ce:37:f0:ab:f2:7e:19:0d:95:52:e6:0a:46:1e:b7:
00:e6:55:ed:ea:a6:25:66:54:89:fd:b2:db:f8:cb:cc:31:b2:
4c:e7:10:78:97:85:30:b6:dc:3f:c6:2a:2a:44:0f:bd:e9:9c:
ae:66:e3:a6:cf:b3:04:7c:e3:0d:69:14:b5:0e:9c:95:a8:d9:
ee:d6:a1:96:75:54:b2:7d:53:8a:c8:8d:c7:c4:91:e9:e9:52:
45:ad:da:45:42:a1:5c:28:43:cf:bb:54:67:66:f0:6b:d5:73:
d5:37:ca:19:c8:b0:b8:83:8a:44:38:1d:fe:b4:28:ae:d3:d2:
b4:0c:72:21:a9:3f:68:f7:aa:8a:1e:16:e7:59:55:bb:6a:8e:
1c:41:5c:9d:b8:60:ab:38:66:36:a0:2c:9d:94:3b:70:61:d3:
0e:e8:62:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R+HnMAW2qYu+6PiNNIMz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjYwNjI5MDYwMjA0WhcNMjYwNjMwMDYwMjA0WjAzMTEwLwYDVQQD
EyhmMzI0YTEwMjNjZDVmNDhlZjY1OTU1YjJhYjRjMmM5MzM4ZTZkOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aRmc+DskVfvveyWUbnqLJd07vJw
N/Wdzx0OOP3M/q4eCG90oVxp8fRjclJaOLkdvruv+YTBrnS4eGGNby+iaqYNWUic
oQ5y07A5EPVCNy8CJVtWP94MUjAg97cwyuKyqBrlfJS1sXmRCspUYUJYNjlD0QuI
oxoTeKn4f3OHOug7b6HjxGFPcQTwXe4a1mxqG5YBOLEC0QGME5YXtYAf5zcpn/VJ
kP2h4Rww4D+m7tuHPFpPzsMYcEvCJ4xykWbA7617rRc6SYPNXymuSFSIyoM56v3l
elsFMnInl8LNJ/b1E/3t5uaCu4NvTHgKAYjX5ducw+Qn7ZVuEV5FnNoH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMkoQI81fSO9llVsqtMLJM45tl8MB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7soWkhT
QcfHdy5pM4WvjHzZxLIHQe2aQD/EitV9rys7JZsGbNiOTT7+n2FGNfYioo1w19mU
SCc46Iay+hSft7Ds1YO9az+xr0h1pL5kjB5VKpGWYkycRgPjdKb/zjfwq/J+GQ2V
UuYKRh63AOZV7eqmJWZUif2y2/jLzDGyTOcQeJeFMLbcP8YqKkQPvemcrmbjps+z
BHzjDWkUtQ6clajZ7tahlnVUsn1TisiNx8SR6elSRa3aRUKhXChDz7tUZ2bwa9Vz
1TfKGciwuIOKRDgd/rQortPStAxyIak/aPeqih4W51lVu2qOHEFcnbhgqzhmNqAs
nZQ7cGHTDuhiIA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:40 2026 by rpki-client