Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: MrQukZn3W0UYp0MfiCFcMBkMHdshxRmdtIPTPPpkWlM=
Subject key identifier: F0:B2:C1:7A:96:7A:E6:82:BA:29:C3:1A:55:21:6C:D4:16:58:6F:EC
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 01A0024ACF7A7E2A39A4503268CDE60ABED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 023E
Signing time: Fri 14 Aug 2026 22:00:52 +0000
Manifest this update: Fri 14 Aug 2026 22:00:52 +0000
Manifest next update: Sat 15 Aug 2026 22:00:52 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: ALMitSlWQvHL3KoLt1RUdjF6awFPKjTl83EbtwXVpGs=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:cf:7a:7e:2a:39:a4:50:32:68:cd:e6:0a:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Aug 14 22:00:52 2026 GMT
Not After : Aug 15 22:00:52 2026 GMT
Subject: CN=f0b2c17a967ae682ba29c31a55216cd416586fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:e1:bb:ff:a5:37:be:cd:58:97:af:99:cf:
cc:71:33:b5:11:d2:63:f7:5c:d6:a2:de:9f:32:c5:
52:8a:a6:62:29:47:33:6f:e0:26:3b:fc:3e:6d:ab:
19:f3:93:1f:37:c8:0e:62:3a:c5:0c:83:30:60:82:
09:59:29:bb:cc:ff:2e:77:93:ab:ee:2a:75:bd:0c:
40:db:53:11:4c:87:2f:5a:14:ea:df:1f:5d:8b:ea:
0a:d1:92:9a:52:a2:dd:4b:83:a6:27:0d:09:d6:ec:
de:16:3d:a8:b2:77:42:43:8d:c2:d0:69:7b:44:8e:
0e:6a:12:fb:e9:f6:66:b2:56:6e:36:59:30:e0:f0:
64:55:99:71:6e:4f:96:ab:f6:9e:7a:e7:73:aa:b6:
a9:4c:b9:a6:f2:a3:95:78:60:c8:02:73:24:54:78:
bc:da:f7:4a:df:e6:aa:07:29:a5:72:55:85:99:65:
16:72:9e:83:0e:c0:76:ea:da:12:7a:20:80:c8:95:
bf:c1:55:f3:a5:cc:de:1b:a4:a4:c7:09:6f:f6:ad:
4d:8b:b1:46:21:70:be:83:da:a4:c9:13:49:d3:e8:
da:0a:9c:98:cc:30:41:c1:76:43:3a:8b:45:1f:75:
6e:51:23:95:6e:b0:f5:63:a6:ef:16:ce:7e:f6:57:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:C1:7A:96:7A:E6:82:BA:29:C3:1A:55:21:6C:D4:16:58:6F:EC
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:3a:0b:fe:d0:8f:ee:1f:47:c2:aa:52:ea:2b:35:da:0e:
75:43:a0:70:c9:2f:c9:2e:50:e0:d7:6d:9f:51:f7:a1:61:f1:
a0:79:c1:6f:19:61:73:04:68:80:a3:34:97:c7:24:9c:5b:45:
8e:15:ac:34:79:45:9c:ae:62:26:b2:c4:8d:28:a7:26:16:42:
e2:f0:53:fb:8a:7c:c6:18:87:61:bc:59:67:ca:57:4d:f7:0e:
7f:d4:c9:bd:cc:b2:e5:88:cd:41:54:e1:3b:aa:ab:fb:83:87:
3f:34:d3:a5:08:93:ac:d0:97:6f:76:d3:9d:14:0f:8d:6c:91:
83:a6:48:16:a8:ae:1e:19:2b:f6:b1:82:66:02:c3:95:d9:39:
e3:d1:06:3b:53:cc:85:bf:ac:95:da:32:87:da:73:ff:f1:50:
46:f1:27:0c:3f:a9:a8:50:92:e4:ab:2b:ca:33:a4:63:6b:6e:
b5:3c:0f:75:72:ac:73:bc:2e:53:e0:f4:c0:dd:42:10:ae:aa:
22:26:4b:e4:3e:a0:1d:fa:46:a9:49:f1:27:62:cb:cd:ec:65:
04:35:1e:17:bf:5a:77:3e:fb:be:00:bb:a3:32:08:a1:51:c7:
f1:fa:10:6c:c0:56:5b:c3:d6:87:56:ef:40:96:10:7e:12:74:
6e:68:1b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSs96fio5pFAyaM3mCr7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTY0MmMwZDQ2ZjhkNGU0YzIzNGMzM2FmYmVmNWE0ODM5
YzZhMjIwHhcNMjYwODE0MjIwMDUyWhcNMjYwODE1MjIwMDUyWjAzMTEwLwYDVQQD
EyhmMGIyYzE3YTk2N2FlNjgyYmEyOWMzMWE1NTIxNmNkNDE2NTg2ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35fhu/+lN77NWJevmc/McTO1EdJj
91zWot6fMsVSiqZiKUczb+AmO/w+basZ85MfN8gOYjrFDIMwYIIJWSm7zP8ud5Or
7ip1vQxA21MRTIcvWhTq3x9di+oK0ZKaUqLdS4OmJw0J1uzeFj2osndCQ43C0Gl7
RI4OahL76fZmslZuNlkw4PBkVZlxbk+Wq/aeeudzqrapTLmm8qOVeGDIAnMkVHi8
2vdK3+aqBymlclWFmWUWcp6DDsB26toSeiCAyJW/wVXzpczeG6Skxwlv9q1Ni7FG
IXC+g9qkyRNJ0+jaCpyYzDBBwXZDOotFH3VuUSOVbrD1Y6bvFs5+9lezNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCywXqWeuaCuinDGlUhbNQWWG/sMB8GA1UdIwQY
MBaAFJAWQsDUb41OTCNMM6++9aSDnGoiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAt
NDMxMjViZjA5NmIxLzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAtNDMxMjViZjA5NmIx
LzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbk6C/7Q
j+4fR8KqUuorNdoOdUOgcMkvyS5Q4Ndtn1H3oWHxoHnBbxlhcwRogKM0l8cknFtF
jhWsNHlFnK5iJrLEjSinJhZC4vBT+4p8xhiHYbxZZ8pXTfcOf9TJvcyy5YjNQVTh
O6qr+4OHPzTTpQiTrNCXb3bTnRQPjWyRg6ZIFqiuHhkr9rGCZgLDldk549EGO1PM
hb+sldoyh9pz//FQRvEnDD+pqFCS5KsryjOkY2tutTwPdXKsc7wuU+D0wN1CEK6q
IiZL5D6gHfpGqUnxJ2LLzexlBDUeF79adz77vgC7ozIIoVHH8foQbMBWW8PWh1bv
QJYQfhJ0bmgbgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:47:33 2026 by rpki-client