Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: M6okJSKx01EC197L/t3M140743G3xqwORb1iTNSut+0=
Subject key identifier: F9:72:D8:89:83:C8:3D:AD:DD:0C:CD:BC:98:0A:C7:9B:F3:BC:FC:3E
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019EB8EAA7B4031E57F305CEEE305E5D21B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0D04
Signing time: Thu 11 Jun 2026 23:00:46 +0000
Manifest this update: Thu 11 Jun 2026 23:00:46 +0000
Manifest next update: Fri 12 Jun 2026 23:00:46 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: Dwl/9lEMnsxFm8tU2NQOs6VTjdkqdEjhfMP7/MD5+bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:a7:b4:03:1e:57:f3:05:ce:ee:30:5e:5d:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jun 11 23:00:46 2026 GMT
Not After : Jun 12 23:00:46 2026 GMT
Subject: CN=f972d88983c83daddd0ccdbc980ac79bf3bcfc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:28:17:7b:0a:ed:72:41:25:27:10:3f:0a:
4d:4a:e5:b5:ac:42:70:bf:75:6d:5d:25:e6:fb:c6:
06:c9:78:e6:92:5f:d2:2a:44:a9:3e:3c:5f:db:13:
00:08:98:54:1a:0b:71:a9:ec:2d:31:48:40:81:b3:
f6:fb:e4:f1:f7:d7:c5:cd:5f:b5:e5:36:30:a9:9d:
9e:0e:fe:2c:6c:f0:aa:53:78:7c:c0:c8:d2:2f:7d:
fb:87:e4:e6:3c:05:39:5d:f9:e1:35:3c:29:9c:2a:
c9:6c:93:9e:cd:33:71:20:b1:e1:c9:40:54:cb:d2:
35:d5:2a:45:9d:4c:41:a0:65:26:96:e2:6d:ec:37:
88:c6:3e:60:96:70:d9:50:80:5c:67:02:d8:ed:9a:
0b:a1:f7:c8:84:6f:73:ec:f6:53:0e:d1:65:31:cc:
df:05:60:c6:f2:83:48:1a:43:01:1f:6a:8d:67:f1:
64:ff:f9:9b:fd:55:9f:47:b2:b0:a8:5a:1d:a3:e3:
73:0a:55:74:72:b6:ff:01:77:08:50:d5:15:77:2c:
60:1b:f6:cf:72:f0:e2:65:01:ca:39:2c:ba:60:28:
aa:a8:d5:86:58:f3:bd:4f:cf:cb:e3:6e:c0:ef:f5:
f8:05:8c:f0:fb:c8:c9:52:1e:bd:56:4b:b7:2d:92:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:D8:89:83:C8:3D:AD:DD:0C:CD:BC:98:0A:C7:9B:F3:BC:FC:3E
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:3b:8c:74:ca:40:69:3d:49:67:47:cc:24:bd:c8:9b:8a:
e9:e9:3b:af:b4:b5:3f:c4:ba:c6:77:56:c9:2f:f5:b9:ea:d8:
65:c0:25:9e:9f:c0:b0:5c:0b:d7:ea:40:5d:4e:4d:bf:0f:0c:
b6:94:12:36:1f:4b:7f:28:e4:ec:01:de:05:5a:13:10:eb:78:
ed:fd:dd:7f:77:31:5a:f9:69:d2:0c:2a:1f:d7:4f:94:74:ca:
ac:ea:30:f3:0f:c0:33:17:fd:42:e2:42:f7:01:ef:1e:25:df:
3b:9c:79:75:fb:3e:73:39:f4:a3:89:95:da:f8:f9:c4:09:72:
7c:fd:f8:e7:3e:d4:9b:6c:b9:70:bd:26:70:eb:80:16:79:1a:
b1:f1:52:d5:a3:04:08:9b:f0:b8:c2:2f:96:be:fd:30:5d:ba:
b9:07:c0:aa:06:89:fd:ee:05:13:f9:74:a8:74:1a:0d:11:0d:
b2:36:90:e8:11:53:8e:30:76:4d:a3:23:a1:db:13:c5:c8:3e:
2d:f1:4a:e6:92:56:05:5a:dd:12:03:02:40:8f:d5:65:85:38:
16:a1:c4:a6:6d:35:64:c7:78:be:33:48:2a:6c:87:e3:eb:b5:
37:22:a7:c5:7b:72:20:92:f7:ad:6f:e7:a8:e5:05:41:74:fb:
a4:a6:0e:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646qe0Ax5X8wXO7jBeXSG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTFlYmY4YzI4ZjgxN2I3ZjE0OGJmYzk1Y2MyYjViNGNi
MzAwODkwHhcNMjYwNjExMjMwMDQ2WhcNMjYwNjEyMjMwMDQ2WjAzMTEwLwYDVQQD
EyhmOTcyZDg4OTgzYzgzZGFkZGQwY2NkYmM5ODBhYzc5YmYzYmNmYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymYoF3sK7XJBJScQPwpNSuW1rEJw
v3VtXSXm+8YGyXjmkl/SKkSpPjxf2xMACJhUGgtxqewtMUhAgbP2++Tx99fFzV+1
5TYwqZ2eDv4sbPCqU3h8wMjSL337h+TmPAU5XfnhNTwpnCrJbJOezTNxILHhyUBU
y9I11SpFnUxBoGUmluJt7DeIxj5glnDZUIBcZwLY7ZoLoffIhG9z7PZTDtFlMczf
BWDG8oNIGkMBH2qNZ/Fk//mb/VWfR7KwqFodo+NzClV0crb/AXcIUNUVdyxgG/bP
cvDiZQHKOSy6YCiqqNWGWPO9T8/L427A7/X4BYzw+8jJUh69Vku3LZJZ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPly2ImDyD2t3QzNvJgKx5vzvPw+MB8GA1UdIwQY
MBaAFJBR6/jCj4F7fxSL/JXMK1tMswCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAt
MzEyNDdmM2E0NTM5LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAtMzEyNDdmM2E0NTM5
LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb47jHTK
QGk9SWdHzCS9yJuK6ek7r7S1P8S6xndWyS/1uerYZcAlnp/AsFwL1+pAXU5Nvw8M
tpQSNh9Lfyjk7AHeBVoTEOt47f3df3cxWvlp0gwqH9dPlHTKrOow8w/AMxf9QuJC
9wHvHiXfO5x5dfs+czn0o4mV2vj5xAlyfP345z7Um2y5cL0mcOuAFnkasfFS1aME
CJvwuMIvlr79MF26uQfAqgaJ/e4FE/l0qHQaDRENsjaQ6BFTjjB2TaMjodsTxcg+
LfFK5pJWBVrdEgMCQI/VZYU4FqHEpm01ZMd4vjNIKmyH4+u1NyKnxXtyIJL3rW/n
qOUFQXT7pKYOAA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:23:15 2026 by rpki-client