Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: FezcKiGDVB6jmkM0hM575y9FsMmY3ZIgifgFmgPpBTw=
Subject key identifier: 97:D2:53:CF:E1:C2:E2:07:15:E4:88:7E:07:6B:B4:AF:6C:51:CC:CF
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019F10E4C0E1DC49A788692DECD300C9F13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 01:00:54 +0000
Manifest this update: Mon 29 Jun 2026 01:00:54 +0000
Manifest next update: Tue 30 Jun 2026 01:00:54 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: ne2pU5KL+2T7btMS0fvnDxcUpyiVs1yl2PniS8EB904=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (hash: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:c0:e1:dc:49:a7:88:69:2d:ec:d3:00:c9:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Jun 29 01:00:54 2026 GMT
Not After : Jun 30 01:00:54 2026 GMT
Subject: CN=97d253cfe1c2e20715e4887e076bb4af6c51cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:be:37:e3:4d:cb:62:16:44:2a:7b:cd:6e:
07:72:db:69:40:7e:03:2c:50:6a:b7:38:d9:04:ff:
85:26:ae:94:7a:aa:48:5c:f5:70:30:4c:bb:03:16:
c9:57:c6:96:f9:00:57:47:de:63:3b:69:2e:d3:4d:
09:47:36:41:2f:4b:e5:48:f4:fa:d3:45:00:24:09:
3e:68:38:d4:65:7b:3c:70:c4:dd:2a:e1:94:e6:22:
ec:6f:73:c7:2f:4a:b0:c4:47:45:1a:e4:f5:b0:d8:
5d:14:4a:16:59:c3:08:dd:8a:ef:a1:22:7b:cd:1e:
63:41:8f:8b:eb:66:dc:66:65:ec:f3:24:07:e1:ae:
21:04:4e:26:e3:58:ca:11:54:e5:88:be:67:88:11:
31:ec:ee:26:33:e2:3a:96:9a:bb:29:2f:b6:f3:60:
0b:82:f3:ef:27:bd:38:c7:6d:1b:6c:d6:1b:ab:ba:
8f:8e:7a:80:d3:6f:8e:a9:7c:27:93:59:99:0a:57:
b0:8e:31:27:5e:a4:9f:90:64:cf:bb:91:85:d4:34:
54:ee:64:97:fa:9c:db:13:eb:d7:ec:21:d2:2d:26:
f2:42:13:89:fe:39:30:64:e2:c1:48:03:af:0a:2e:
9d:b9:65:e8:23:b1:6b:22:48:b8:4b:c0:f4:5c:50:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:53:CF:E1:C2:E2:07:15:E4:88:7E:07:6B:B4:AF:6C:51:CC:CF
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:7c:c2:42:40:c3:98:fe:53:c9:4a:59:39:c4:cf:4b:ae:
63:5c:96:66:07:ec:93:fc:cc:ad:80:36:c1:ab:0f:dc:45:11:
04:d7:88:9b:5a:74:3e:a1:f1:fd:ef:27:68:8a:96:af:38:47:
88:b4:e6:69:27:f3:6f:e6:06:3b:c2:4e:43:c8:f3:fe:88:0d:
4e:ba:8a:a0:33:8c:3f:37:ac:99:42:5e:90:68:7d:fe:c4:5a:
31:de:f3:37:fc:15:5e:75:5a:2e:00:c2:c8:76:68:53:f8:b3:
5c:4e:10:69:80:24:fa:6d:f1:7a:ad:83:92:44:b5:89:bb:b8:
61:e6:d0:04:3a:b1:38:3f:55:85:a9:fe:93:cd:9a:39:4a:4e:
63:09:b0:30:e9:3c:1f:41:30:d7:20:87:b1:67:7d:9a:3b:15:
31:6e:39:68:40:e2:bc:ab:da:7d:c1:0a:83:89:12:04:f4:3f:
b4:fb:87:fe:f8:92:00:71:97:26:85:f6:f6:ba:a0:ae:ae:3d:
51:fa:17:7d:61:2a:fc:bf:24:f4:c9:7e:0f:f6:d3:ae:b7:d8:
4c:2c:5e:14:03:c1:45:c4:3e:7d:08:68:07:7e:b2:2c:ea:7c:
09:a5:4c:e7:7f:60:a3:f0:8b:ac:87:a2:4f:26:dc:73:82:1a:
74:37:60:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5MDh3EmniGkt7NMAyfE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTcwODhlMzllN2FkODgxN2I3ZDEwZWEyYTViOGEwOThh
NDdhMGIwHhcNMjYwNjI5MDEwMDU0WhcNMjYwNjMwMDEwMDU0WjAzMTEwLwYDVQQD
Eyg5N2QyNTNjZmUxYzJlMjA3MTVlNDg4N2UwNzZiYjRhZjZjNTFjY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6a+N+NNy2IWRCp7zW4HcttpQH4D
LFBqtzjZBP+FJq6UeqpIXPVwMEy7AxbJV8aW+QBXR95jO2ku000JRzZBL0vlSPT6
00UAJAk+aDjUZXs8cMTdKuGU5iLsb3PHL0qwxEdFGuT1sNhdFEoWWcMI3YrvoSJ7
zR5jQY+L62bcZmXs8yQH4a4hBE4m41jKEVTliL5niBEx7O4mM+I6lpq7KS+282AL
gvPvJ704x20bbNYbq7qPjnqA02+OqXwnk1mZClewjjEnXqSfkGTPu5GF1DRU7mSX
+pzbE+vX7CHSLSbyQhOJ/jkwZOLBSAOvCi6duWXoI7FrIki4S8D0XFDNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfSU8/hwuIHFeSIfgdrtK9sUczPMB8GA1UdIwQY
MBaAFCunCI45562IF7fRDqKluKCYpHoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYt
NGE2N2U0ZDA1NmFiLzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYtNGE2N2U0ZDA1NmFi
LzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5B8wkJA
w5j+U8lKWTnEz0uuY1yWZgfsk/zMrYA2wasP3EURBNeIm1p0PqHx/e8naIqWrzhH
iLTmaSfzb+YGO8JOQ8jz/ogNTrqKoDOMPzesmUJekGh9/sRaMd7zN/wVXnVaLgDC
yHZoU/izXE4QaYAk+m3xeq2DkkS1ibu4YebQBDqxOD9Vhan+k82aOUpOYwmwMOk8
H0Ew1yCHsWd9mjsVMW45aEDivKvafcEKg4kSBPQ/tPuH/viSAHGXJoX29rqgrq49
UfoXfWEq/L8k9Ml+D/bTrrfYTCxeFAPBRcQ+fQhoB36yLOp8CaVM539go/CLrIei
Tybcc4IadDdgAA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:44:08 2026 by rpki-client