Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: +Onqj/dHTemYUgh9tPJHmBvcJq92JtgSFg7011eL4w8=
Subject key identifier: 47:B6:64:23:03:D6:5D:75:6A:EA:2E:E3:C5:D9:67:40:66:F5:2E:F2
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019EB87CEEF44F3EEE8D3EC4AA8EE035EBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: 0175
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: Qbj6GXZQa9Nq91HTF9UWmHhMD3iCjmcRfZpzO4WIFxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ee:f4:4f:3e:ee:8d:3e:c4:aa:8e:e0:35:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=47b6642303d65d756aea2ee3c5d9674066f52ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:07:09:cc:20:15:ce:a6:b9:b6:c7:af:e6:
8c:40:dd:41:b0:ca:78:ca:75:99:1c:23:be:77:a7:
14:e6:ab:d7:c0:25:4e:23:97:9e:d0:61:fd:eb:eb:
c3:9d:be:dc:63:52:fd:1c:d6:ac:ac:6d:07:35:c7:
ac:12:ed:b5:ba:25:11:1d:e4:fd:8f:7e:fc:e3:9c:
6d:b7:7f:01:da:0a:a7:2d:22:e3:e3:f7:fb:a9:d0:
56:7e:6c:ab:eb:89:69:79:9c:d2:61:73:05:c0:6a:
3d:53:9c:0f:70:03:b4:29:c9:f6:45:a0:01:8e:85:
34:39:00:3d:fe:05:77:77:b3:5c:0d:6b:13:c8:b2:
8f:bc:a2:e7:73:ac:22:5d:bc:30:e6:01:00:a2:60:
75:72:e9:e7:b6:6a:80:33:6e:0e:6f:8b:84:98:ce:
47:f0:36:07:1b:f2:42:45:e4:ea:11:3b:79:9c:bd:
33:5d:40:d6:2d:9d:30:8b:ae:dc:85:b4:e8:34:09:
4d:d7:34:83:a7:ef:22:05:1f:60:d0:f7:8b:74:33:
21:3e:b5:fa:8c:4a:b5:b3:5b:1a:87:04:33:31:17:
4d:9e:fb:7b:2b:60:cb:0b:cc:7f:c8:77:27:e2:53:
e8:89:32:f9:36:76:21:8c:6f:e7:0c:6b:4d:d8:dc:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:64:23:03:D6:5D:75:6A:EA:2E:E3:C5:D9:67:40:66:F5:2E:F2
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:ab:7b:a9:50:d7:26:75:c4:78:9f:f7:d3:bb:f6:ee:d3:
ac:43:2c:8f:9c:c5:2f:b2:51:95:1d:4e:31:e2:90:b2:6a:d1:
68:2f:fd:da:6a:47:9a:bd:bc:eb:b4:e1:fe:6d:7c:73:0d:c6:
3e:d8:6d:6b:f1:13:bc:4a:bc:52:db:44:51:4f:cb:5b:5c:0e:
ae:a3:5f:d6:ca:36:50:49:d5:ca:6d:aa:f2:df:3d:45:cf:cf:
2f:85:e6:d2:40:8f:e8:eb:7c:ea:56:bb:00:0c:c7:08:11:61:
9a:f3:31:09:7d:4f:dd:43:7a:33:9a:d1:72:18:9b:0c:4c:4e:
4f:17:8b:4a:bb:07:b8:84:bb:8c:aa:0c:6e:51:70:b7:e7:db:
f4:5a:2b:5b:0d:7f:69:f1:9c:d8:b3:fd:10:e8:ad:bd:fe:97:
c6:be:d0:06:d9:31:8b:d6:90:f9:02:f8:6e:a1:70:62:68:48:
d8:3d:84:aa:f0:8f:a3:7e:56:8f:f7:20:d9:f8:42:2e:5e:15:
33:9d:16:56:93:53:7e:72:77:c4:64:4c:ca:38:0e:48:4a:0d:
a6:62:c1:44:1e:d7:9e:33:75:8b:1a:b0:5f:7b:57:4c:b7:72:
b9:cc:c5:cb:e1:80:ff:35:dd:da:fc:4c:a2:21:a6:99:53:4a:
9f:03:87:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fO70Tz7ujT7Eqo7gNeugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz
NDhmNDYwHhcNMjYwNjExMjEwMDU1WhcNMjYwNjEyMjEwMDU1WjAzMTEwLwYDVQQD
Eyg0N2I2NjQyMzAzZDY1ZDc1NmFlYTJlZTNjNWQ5Njc0MDY2ZjUyZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB4HCcwgFc6mubbHr+aMQN1BsMp4
ynWZHCO+d6cU5qvXwCVOI5ee0GH96+vDnb7cY1L9HNasrG0HNcesEu21uiURHeT9
j37845xtt38B2gqnLSLj4/f7qdBWfmyr64lpeZzSYXMFwGo9U5wPcAO0Kcn2RaAB
joU0OQA9/gV3d7NcDWsTyLKPvKLnc6wiXbww5gEAomB1cunntmqAM24Ob4uEmM5H
8DYHG/JCReTqETt5nL0zXUDWLZ0wi67chbToNAlN1zSDp+8iBR9g0PeLdDMhPrX6
jEq1s1sahwQzMRdNnvt7K2DLC8x/yHcn4lPoiTL5NnYhjG/nDGtN2Nz2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe2ZCMD1l11auou48XZZ0Bm9S7yMB8GA1UdIwQY
MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt
YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx
LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh6re6lQ
1yZ1xHif99O79u7TrEMsj5zFL7JRlR1OMeKQsmrRaC/92mpHmr2867Th/m18cw3G
Pthta/ETvEq8UttEUU/LW1wOrqNf1so2UEnVym2q8t89Rc/PL4Xm0kCP6Ot86la7
AAzHCBFhmvMxCX1P3UN6M5rRchibDExOTxeLSrsHuIS7jKoMblFwt+fb9ForWw1/
afGc2LP9EOitvf6Xxr7QBtkxi9aQ+QL4bqFwYmhI2D2EqvCPo35Wj/cg2fhCLl4V
M50WVpNTfnJ3xGRMyjgOSEoNpmLBRB7XnjN1ixqwX3tXTLdyuczFy+GA/zXd2vxM
oiGmmVNKnwOHtA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:12:51 2026 by rpki-client