Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier: rHeVX+C/PouAlLDWGqvHZotzhd97OIysvHcjG8qQqE8=
Subject key identifier: 0A:7C:A8:FD:76:E5:C7:4A:11:A5:00:ED:6F:5A:ED:D2:B4:2D:0E:C7
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer: /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial: 019EB76AEC67A501E017EC1930FE547572CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number: 8B
Signing time: Thu 11 Jun 2026 16:01:38 +0000
Manifest this update: Thu 11 Jun 2026 16:01:38 +0000
Manifest next update: Fri 12 Jun 2026 16:01:38 +0000
Files and hashes: 1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: pls0MDCqCZbkbqqg+Se4GQy6T5oaGkAP/iQA7mpqRWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:ec:67:a5:01:e0:17:ec:19:30:fe:54:75:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Validity
Not Before: Jun 11 16:01:38 2026 GMT
Not After : Jun 12 16:01:38 2026 GMT
Subject: CN=0a7ca8fd76e5c74a11a500ed6f5aedd2b42d0ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:ad:7e:ef:fb:93:c1:04:d3:3e:cd:2c:bb:
06:2c:5d:46:42:40:d0:39:44:54:0d:1f:c1:cb:b5:
c8:97:8c:2a:f1:5b:8d:77:4f:bf:5e:4b:59:69:84:
93:f3:79:11:af:06:58:eb:38:c5:1e:22:67:52:3a:
96:af:b1:2c:de:6b:ce:03:3c:0a:46:a7:3c:12:fa:
42:1d:44:1a:b8:de:18:a4:8f:63:b2:16:a4:83:86:
cd:92:81:65:09:3a:cd:7c:27:8c:21:6b:78:ae:2b:
58:33:c1:05:6c:3b:a2:9d:fd:82:45:07:58:a9:6c:
73:3e:8e:f4:36:e9:5a:cc:d9:db:1a:e4:c3:69:60:
dc:a2:9a:b4:ad:d3:da:9b:c4:8f:e1:e2:ea:72:7e:
47:0b:ca:5c:33:4f:29:d0:1f:a3:2a:17:7e:70:75:
b4:46:0e:c3:ed:f9:3f:d0:1d:f8:5b:91:03:77:01:
f9:9e:dd:ad:f5:a6:df:2b:1f:93:e3:b0:ab:57:85:
fc:67:71:fc:25:77:83:7e:c4:85:24:8b:62:9e:82:
5f:91:1c:eb:68:57:b0:40:df:c5:31:ff:34:e3:16:
b5:c3:0a:0b:82:09:52:62:ed:5b:7d:c0:97:ac:d0:
be:5e:b5:f8:a3:1b:93:54:08:8a:9e:f5:cc:ba:c1:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:A8:FD:76:E5:C7:4A:11:A5:00:ED:6F:5A:ED:D2:B4:2D:0E:C7
X509v3 Authority Key Identifier:
keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c6:fd:0d:02:6f:78:8e:62:9f:1d:d8:0a:0a:b2:3e:18:29:
a9:24:15:ca:17:22:d4:c5:2f:f2:42:4a:10:a8:36:a7:36:04:
94:b4:7c:d7:0b:79:ae:77:6e:7f:62:61:52:ff:21:51:21:92:
1d:c9:5d:75:0c:0f:70:b9:f2:b2:d1:0f:f6:e9:58:b2:ff:7b:
eb:45:7a:63:7f:e8:64:9e:f6:5f:e3:16:bd:38:a6:ba:d1:7f:
39:9c:e6:e8:7f:ba:ce:86:ba:62:79:e3:09:e3:4f:8b:21:60:
42:06:ca:9e:92:5b:0a:00:c7:05:ce:07:5e:96:b7:4d:c9:bb:
b8:70:eb:ab:b0:18:ab:7f:6e:fd:a2:d0:cb:6d:9e:05:a8:2e:
cb:43:c0:da:93:7c:97:ad:05:42:ed:8e:4c:cb:96:0f:b3:da:
a5:cd:66:f7:2e:39:fb:c4:7a:49:51:5b:8f:6b:01:31:b3:ec:
ee:d4:12:b3:51:3a:f5:8f:d5:ec:19:43:7a:a9:49:ff:b0:fa:
f5:8c:d9:ec:9f:85:a2:fa:c8:89:c8:82:3e:3d:33:fe:68:92:
e4:ec:73:90:58:75:1c:e4:e3:c6:07:13:4e:57:80:dd:d2:34:
97:27:f8:04:4e:53:79:c0:75:60:96:f1:75:9f:53:b4:b8:d7:
77:cb:be:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63auxnpQHgF+wZMP5UdXLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2ZlZDI0N2M2NmQwNDJlNzM5NDBkMmI0NzEyZjNiZWQ5
NDUxZWUwHhcNMjYwNjExMTYwMTM4WhcNMjYwNjEyMTYwMTM4WjAzMTEwLwYDVQQD
EygwYTdjYThmZDc2ZTVjNzRhMTFhNTAwZWQ2ZjVhZWRkMmI0MmQwZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uitfu/7k8EE0z7NLLsGLF1GQkDQ
OURUDR/By7XIl4wq8VuNd0+/XktZaYST83kRrwZY6zjFHiJnUjqWr7Es3mvOAzwK
Rqc8EvpCHUQauN4YpI9jshakg4bNkoFlCTrNfCeMIWt4ritYM8EFbDuinf2CRQdY
qWxzPo70NulazNnbGuTDaWDcopq0rdPam8SP4eLqcn5HC8pcM08p0B+jKhd+cHW0
Rg7D7fk/0B34W5EDdwH5nt2t9abfKx+T47CrV4X8Z3H8JXeDfsSFJItinoJfkRzr
aFewQN/FMf804xa1wwoLgglSYu1bfcCXrNC+XrX4oxuTVAiKnvXMusHCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp8qP125cdKEaUA7W9a7dK0LQ7HMB8GA1UdIwQY
MBaAFJE/7SR8ZtBC5zlA0rRxLzvtlFHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RfdEpIeG0wRUxuT1VEU3RIRXZPLTJVVWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZjExMGUtM2VkYS00NWFhLWJkODAt
NWM3MDlkMjBjMzA0LzEva1RfdEpIeG0wRUxuT1VEU3RIRXZPLTJVVWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZjExMGUtM2VkYS00NWFhLWJkODAtNWM3MDlkMjBjMzA0
LzEva1RfdEpIeG0wRUxuT1VEU3RIRXZPLTJVVWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcb9DQJv
eI5inx3YCgqyPhgpqSQVyhci1MUv8kJKEKg2pzYElLR81wt5rnduf2JhUv8hUSGS
HclddQwPcLnystEP9ulYsv9760V6Y3/oZJ72X+MWvTimutF/OZzm6H+6zoa6Ynnj
CeNPiyFgQgbKnpJbCgDHBc4HXpa3Tcm7uHDrq7AYq39u/aLQy22eBaguy0PA2pN8
l60FQu2OTMuWD7Papc1m9y45+8R6SVFbj2sBMbPs7tQSs1E69Y/V7BlDeqlJ/7D6
9YzZ7J+FovrIiciCPj0z/miS5OxzkFh1HOTjxgcTTleA3dI0lyf4BE5TecB1YJbx
dZ9TtLjXd8u+8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:23 2026 by rpki-client