Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
File: KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft (raw, json)
Hash identifier: BvCnOakzdk+/aNKa69OadZRPnsrXVv+G7Fnpq1yGIsk=
Subject key identifier: CF:88:19:41:85:E5:2A:BD:8A:BE:DF:6C:9E:FF:5A:66:B8:E0:D8:2D
Authority key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Certificate issuer: /CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Certificate serial: 019FFD5B4CCB26E3C55AB9DC6C1912721AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
Manifest number: 197B
Signing time: Thu 13 Aug 2026 23:00:46 +0000
Manifest this update: Thu 13 Aug 2026 23:00:46 +0000
Manifest next update: Fri 14 Aug 2026 23:00:46 +0000
Files and hashes: 1: KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl (hash: MbBXjX2KaEIkDoO0zjzm71Zo61kVwtQPk96bQTW7f74=)
2: ubLK8V8AN7yzYWZ8GjbAC2BzmVk.roa (hash: soBVeg6Yikd3nUzcvoeLHOcCe6rQjh4SHsU1xYr91hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:5b:4c:cb:26:e3:c5:5a:b9:dc:6c:19:12:72:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Validity
Not Before: Aug 13 23:00:46 2026 GMT
Not After : Aug 14 23:00:46 2026 GMT
Subject: CN=cf88194185e52abd8abedf6c9eff5a66b8e0d82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:36:3f:b2:37:e7:14:fb:81:24:5b:84:cf:
51:00:73:c3:f6:58:b8:7d:02:3a:15:e9:7c:ce:3e:
0c:78:2f:dc:75:fa:b8:d0:3d:58:d2:38:28:72:55:
ae:36:6e:4d:41:ae:d6:9c:71:08:cd:f7:7a:88:ef:
e0:3b:86:34:1a:05:4c:76:a5:4a:66:07:6b:47:f6:
91:2e:a6:f7:a2:1f:52:c3:45:7d:75:cb:fd:fe:18:
ad:ce:d4:8b:d4:bd:33:a7:f4:4a:5e:e9:40:10:0f:
1f:82:97:ef:2d:f1:be:72:d4:61:a1:7e:04:69:93:
89:f3:25:d4:b7:46:ba:d4:57:78:67:e9:38:9d:07:
4d:97:0c:96:96:6a:af:bf:00:33:a5:e6:b7:1e:be:
26:b7:8a:f6:c2:5d:c6:79:2f:d8:f3:99:d0:e7:bc:
13:88:28:b3:02:9f:51:e0:48:81:4a:4e:d5:43:62:
29:47:23:db:ed:01:4b:47:90:1a:aa:d2:7b:a8:fb:
d1:2d:2a:a4:b7:56:32:2c:b9:48:e3:67:ce:05:00:
a1:1d:cc:45:8a:05:98:da:9a:d7:73:d1:3f:d4:37:
c9:e3:9e:2c:fd:bb:b4:7e:d7:e3:fc:b0:15:9a:90:
9d:06:52:06:43:9a:74:55:60:a4:d2:2e:70:42:d4:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:19:41:85:E5:2A:BD:8A:BE:DF:6C:9E:FF:5A:66:B8:E0:D8:2D
X509v3 Authority Key Identifier:
keyid:28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:66:d5:f3:09:74:15:4e:f5:e5:f4:2a:8a:73:6e:48:39:1f:
1f:12:e5:b3:47:da:51:7e:da:dc:66:ed:02:99:f2:43:40:ed:
fb:9c:d8:91:72:3d:26:c4:c3:96:6e:28:96:77:92:84:cd:68:
2c:7f:53:ea:22:0f:c2:cd:13:22:e7:5f:d7:22:f1:8d:56:d6:
a4:d7:c8:2a:cb:0b:8e:7f:b5:99:33:02:eb:32:7b:cd:fc:dd:
93:cd:73:f1:a8:3a:66:3b:56:5d:45:e4:37:d6:c5:a2:fb:4b:
d9:59:1d:61:98:0c:79:b1:87:6a:f0:cb:b6:03:47:c3:d6:a3:
4c:33:40:8b:31:72:2a:86:25:8b:38:5f:4b:4b:ac:45:32:5f:
df:f8:40:50:42:78:7a:79:d8:40:04:85:f8:c4:1d:37:0a:77:
7c:42:a1:f9:af:17:0b:ae:75:33:44:f9:67:6c:5a:0f:9a:ab:
bb:87:23:2c:ab:e7:39:b3:47:64:86:fd:c0:1e:f0:68:ab:63:
32:62:05:c0:68:6f:4a:d5:3f:c4:41:2c:35:e6:89:37:f2:74:
45:9e:b5:80:30:58:8a:ed:8a:c0:00:81:83:10:57:07:e5:82:
0e:27:24:4c:e9:a9:da:62:a8:4e:8a:44:67:d9:9a:6a:e0:1b:
51:68:16:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9W0zLJuPFWrncbBkSchrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDJiNWIwMjVjZjRlYTEzMzk1ZmM1N2I1YTRkNjg5OGU3
MzMyY2YwHhcNMjYwODEzMjMwMDQ2WhcNMjYwODE0MjMwMDQ2WjAzMTEwLwYDVQQD
EyhjZjg4MTk0MTg1ZTUyYWJkOGFiZWRmNmM5ZWZmNWE2NmI4ZTBkODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZQ2P7I35xT7gSRbhM9RAHPD9li4
fQI6Fel8zj4MeC/cdfq40D1Y0jgoclWuNm5NQa7WnHEIzfd6iO/gO4Y0GgVMdqVK
ZgdrR/aRLqb3oh9Sw0V9dcv9/hitztSL1L0zp/RKXulAEA8fgpfvLfG+ctRhoX4E
aZOJ8yXUt0a61Fd4Z+k4nQdNlwyWlmqvvwAzpea3Hr4mt4r2wl3GeS/Y85nQ57wT
iCizAp9R4EiBSk7VQ2IpRyPb7QFLR5AaqtJ7qPvRLSqkt1YyLLlI42fOBQChHcxF
igWY2prXc9E/1DfJ454s/bu0ftfj/LAVmpCdBlIGQ5p0VWCk0i5wQtQ2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+IGUGF5Sq9ir7fbJ7/Wma44NgtMB8GA1UdIwQY
MBaAFCgCtbAlz06hM5X8V7Wk1omOczLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FLMXNDWFBUcUV6bGZ4WHRhVFdpWTV6TXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNzU1MjItYjY5NS00MzFiLThkNDkt
NjZiNDM0ZmRmOWFlLzEvS0FLMXNDWFBUcUV6bGZ4WHRhVFdpWTV6TXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNzU1MjItYjY5NS00MzFiLThkNDktNjZiNDM0ZmRmOWFl
LzEvS0FLMXNDWFBUcUV6bGZ4WHRhVFdpWTV6TXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGbV8wl0
FU715fQqinNuSDkfHxLls0faUX7a3GbtApnyQ0Dt+5zYkXI9JsTDlm4olneShM1o
LH9T6iIPws0TIudf1yLxjVbWpNfIKssLjn+1mTMC6zJ7zfzdk81z8ag6ZjtWXUXk
N9bFovtL2VkdYZgMebGHavDLtgNHw9ajTDNAizFyKoYlizhfS0usRTJf3/hAUEJ4
ennYQASF+MQdNwp3fEKh+a8XC651M0T5Z2xaD5qru4cjLKvnObNHZIb9wB7waKtj
MmIFwGhvStU/xEEsNeaJN/J0RZ61gDBYiu2KwACBgxBXB+WCDickTOmp2mKoTopE
Z9maauAbUWgWvw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 06:12:10 2026 by rpki-client