Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: YrzU/tRYcuZCgUJbAkbs6h9Ri7uN70yF8ksllWmMM/U=
Subject key identifier: 0C:E7:24:80:78:F2:C5:86:27:25:F2:FB:C0:21:F3:D2:2B:29:0E:7F
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019FC3DA3E6342B4CCCE0808E8A224424655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 19E2
Signing time: Sun 02 Aug 2026 19:01:27 +0000
Manifest this update: Sun 02 Aug 2026 19:01:27 +0000
Manifest next update: Mon 03 Aug 2026 19:01:27 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: BFO2fAMl9z0CREGEAwIisxPm21XIqdq7dj+7tV3W76s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:da:3e:63:42:b4:cc:ce:08:08:e8:a2:24:42:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Aug 2 19:01:27 2026 GMT
Not After : Aug 3 19:01:27 2026 GMT
Subject: CN=0ce7248078f2c5862725f2fbc021f3d22b290e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:a2:a7:8b:07:62:d2:c3:bc:05:b3:aa:c4:
12:37:c6:d1:28:92:73:3b:e6:10:1e:cc:11:ca:53:
52:63:68:51:71:55:c3:5d:66:3b:2c:7f:88:2d:52:
d8:be:c1:02:6b:b0:7d:9e:56:43:25:9f:bf:a8:d7:
93:d4:a9:70:cd:f4:db:0b:62:b7:7c:a5:41:3a:a3:
e6:1c:b8:2b:ed:4b:d5:54:c1:ab:80:30:8e:bc:74:
ef:8b:43:64:59:3e:57:e8:fa:b0:80:46:f5:46:34:
0b:f9:4f:22:e2:f0:a3:1b:11:21:b7:ab:c6:8a:56:
25:a8:c6:97:c6:4b:60:9c:d0:9a:63:67:c6:60:d0:
6e:ad:b9:67:1d:d7:f2:e3:11:0a:0d:fd:99:93:4b:
b0:ec:57:60:0c:36:05:50:1a:c1:97:a8:ff:d2:e6:
8b:cb:b3:00:ab:9d:d9:cd:f3:57:14:91:ff:f5:73:
5e:a3:5a:75:58:f1:fc:d6:a4:95:04:0d:86:10:4c:
47:b7:65:46:4b:4f:21:cb:90:1f:9c:82:e6:ad:2a:
a0:73:af:0c:37:14:6c:11:e1:61:92:3c:66:78:39:
16:fc:6f:54:b3:d2:12:98:8a:77:ad:86:d1:13:87:
b5:ac:7d:75:4c:2d:7b:4a:57:e5:3c:de:99:80:d6:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:24:80:78:F2:C5:86:27:25:F2:FB:C0:21:F3:D2:2B:29:0E:7F
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8e:1a:80:08:89:c9:da:38:f8:49:51:e4:ec:b1:0a:ad:3e:
58:53:60:6b:3f:5d:fa:fa:d5:57:29:d1:34:15:47:d8:82:a8:
62:d5:55:7d:0c:1f:f7:2a:63:f4:12:64:b6:2f:82:18:d7:a4:
f5:5a:24:17:2f:7f:80:0b:35:a5:e7:b2:02:cf:4e:0e:9c:9a:
9b:df:31:ea:cb:5a:a7:87:d7:82:ae:34:c0:c8:17:c7:64:bc:
b7:fa:60:34:e5:e7:51:0e:8c:ea:1f:8c:44:af:56:7f:91:84:
69:57:f7:da:47:43:d2:58:df:79:7c:6e:5c:ca:b0:2b:5b:e1:
cc:7c:7e:e5:6c:f4:c2:15:07:67:0c:a8:42:f1:cb:da:66:09:
96:c8:5f:01:3e:fc:cc:8a:1d:bd:98:ff:5e:51:f1:26:90:39:
3c:c3:8a:a8:ab:ca:5a:c5:28:94:43:dd:89:3e:27:8c:9e:65:
fb:0b:66:3f:e5:51:c7:cf:81:45:5e:17:db:61:c1:ce:f8:81:
7d:98:38:49:69:ba:54:a5:3e:28:d1:ff:c0:fa:fe:e2:83:4f:
db:f0:12:43:d1:e5:3a:0f:99:44:e0:f3:d6:7c:b6:8d:a7:18:
eb:53:bc:72:43:7d:d8:9c:54:cd:f8:44:a2:4c:28:c7:05:47:
fa:61:0b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/D2j5jQrTMzggI6KIkQkZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5
OWM4ZTEwHhcNMjYwODAyMTkwMTI3WhcNMjYwODAzMTkwMTI3WjAzMTEwLwYDVQQD
EygwY2U3MjQ4MDc4ZjJjNTg2MjcyNWYyZmJjMDIxZjNkMjJiMjkwZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6yip4sHYtLDvAWzqsQSN8bRKJJz
O+YQHswRylNSY2hRcVXDXWY7LH+ILVLYvsECa7B9nlZDJZ+/qNeT1KlwzfTbC2K3
fKVBOqPmHLgr7UvVVMGrgDCOvHTvi0NkWT5X6PqwgEb1RjQL+U8i4vCjGxEht6vG
ilYlqMaXxktgnNCaY2fGYNBurblnHdfy4xEKDf2Zk0uw7FdgDDYFUBrBl6j/0uaL
y7MAq53ZzfNXFJH/9XNeo1p1WPH81qSVBA2GEExHt2VGS08hy5AfnILmrSqgc68M
NxRsEeFhkjxmeDkW/G9Us9ISmIp3rYbRE4e1rH11TC17SlflPN6ZgNaBpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAznJIB48sWGJyXy+8Ah89IrKQ5/MB8GA1UdIwQY
MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt
NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz
LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo4agAiJ
ydo4+ElR5OyxCq0+WFNgaz9d+vrVVynRNBVH2IKoYtVVfQwf9ypj9BJkti+CGNek
9VokFy9/gAs1peeyAs9ODpyam98x6stap4fXgq40wMgXx2S8t/pgNOXnUQ6M6h+M
RK9Wf5GEaVf32kdD0ljfeXxuXMqwK1vhzHx+5Wz0whUHZwyoQvHL2mYJlshfAT78
zIodvZj/XlHxJpA5PMOKqKvKWsUolEPdiT4njJ5l+wtmP+VRx8+BRV4X22HBzviB
fZg4SWm6VKU+KNH/wPr+4oNP2/ASQ9HlOg+ZRODz1ny2jacY61O8ckN92JxUzfhE
okwoxwVH+mEL9Q==
-----END CERTIFICATE-----
Generated at Mon Aug 3 03:47:57 2026 by rpki-client