Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: Fg0QK8gHxtMRNar8pJYoX45AFQrJDZ9FPEZzaR0xRow=
Subject key identifier: 52:AA:B0:F6:F7:CD:46:0F:ED:74:F6:45:4B:D9:F0:6E:5C:76:86:4F
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 019EB6C5721224D49A03033E5D5A4B8E7488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 0777
Signing time: Thu 11 Jun 2026 13:00:53 +0000
Manifest this update: Thu 11 Jun 2026 13:00:53 +0000
Manifest next update: Fri 12 Jun 2026 13:00:53 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: UNKBbMCkXhfj/ILS0ma2onzV6SkuuVgDrWVtVT8IVCM=)
2: g4xjb4e47FjJKWJTrcOzbEKGcYM.roa (hash: Vadq8UA+c7ZsdSe4j5kxXAgAyPf++4Wc9tdJZHjBAKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:72:12:24:d4:9a:03:03:3e:5d:5a:4b:8e:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Jun 11 13:00:53 2026 GMT
Not After : Jun 12 13:00:53 2026 GMT
Subject: CN=52aab0f6f7cd460fed74f6454bd9f06e5c76864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:46:46:bf:e7:fd:e8:ed:64:c3:ee:d7:87:
26:e6:28:de:7a:5f:b5:34:db:da:0f:87:11:2e:36:
7e:8e:fb:d2:1d:8a:f7:28:40:a2:9c:de:a7:43:6a:
ab:36:40:d1:a1:64:8a:c8:e5:74:47:0a:d4:4d:2b:
ac:a2:2b:3f:63:12:41:b5:f0:0d:fd:21:37:79:61:
d2:69:f6:ec:09:c5:ee:3e:27:1a:c9:cf:ba:1f:bb:
b7:da:36:1b:14:bb:97:99:9a:29:f4:af:5d:b8:1e:
a3:b4:ac:b8:00:5d:65:f3:4f:91:f6:d8:ac:4b:5b:
45:1d:9d:50:77:fb:28:6a:f4:e6:0b:8d:ac:1d:f1:
da:52:a3:44:bd:f4:50:81:30:b6:5c:05:ec:b1:b8:
a2:bc:25:61:67:49:15:06:b9:85:d3:16:e7:b9:48:
26:0f:96:5f:6a:e2:22:18:06:0c:9f:da:56:9a:e9:
1d:b7:e5:39:da:2d:80:89:51:25:0e:e9:39:47:ba:
b3:af:91:39:f2:70:2f:e7:2c:05:57:96:a8:12:6b:
4c:2f:27:29:d2:86:18:60:3e:a3:3f:b7:91:7a:3c:
cb:23:b9:b6:1f:8a:8b:f5:ee:d4:0a:99:28:2f:66:
44:f3:a5:75:0d:a7:5f:78:c8:5d:cd:99:e2:88:ea:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:B0:F6:F7:CD:46:0F:ED:74:F6:45:4B:D9:F0:6E:5C:76:86:4F
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:19:d5:f9:eb:51:10:83:e3:0a:da:23:db:eb:d8:df:ec:28:
82:48:f5:52:72:e6:ed:4e:87:52:e2:ed:c6:d4:b5:df:e7:28:
6b:7b:e7:9d:b8:f3:e6:c0:1d:8c:6b:aa:29:b3:7f:53:ba:69:
ff:35:ff:d5:ef:23:97:31:9e:88:d6:d1:00:f0:a4:7f:6b:5e:
88:e8:01:d8:a8:bd:6d:a2:e6:94:a3:09:5d:a2:65:7c:d1:1c:
7c:6c:ec:ae:92:7e:c4:6c:cc:ee:4f:b6:ec:fb:26:d0:58:b3:
bb:1c:bf:81:b4:cf:76:a9:c6:98:e9:6b:c4:b7:df:4d:fb:de:
42:64:e7:42:c3:09:8b:87:17:c4:ff:ea:43:63:1f:14:23:f9:
ab:37:ee:4b:d4:a2:0a:13:29:f0:da:46:92:11:ed:4a:f3:a1:
f1:5f:7b:43:6f:11:86:67:d9:3e:14:1e:37:36:63:65:c9:9c:
4e:aa:ae:31:d5:63:b1:96:f3:e1:4d:5d:28:f8:63:df:f2:4d:
94:25:ea:eb:dc:30:55:48:b7:60:e3:09:bf:12:d7:d6:45:f3:
9e:18:66:3b:ca:03:ba:35:13:36:ac:f0:3e:00:9f:b0:8e:e6:
e8:7f:af:28:52:26:82:a7:e8:e6:c1:14:81:73:2d:3f:ca:68:
1f:d7:fb:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xXISJNSaAwM+XVpLjnSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk3YmM3MzMwZWE5OTkwMGY0ZmM5MTAzM2EzMzE3ZTU2
Zjc1ZTIwHhcNMjYwNjExMTMwMDUzWhcNMjYwNjEyMTMwMDUzWjAzMTEwLwYDVQQD
Eyg1MmFhYjBmNmY3Y2Q0NjBmZWQ3NGY2NDU0YmQ5ZjA2ZTVjNzY4NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspBGRr/n/ejtZMPu14cm5ijeel+1
NNvaD4cRLjZ+jvvSHYr3KECinN6nQ2qrNkDRoWSKyOV0RwrUTSusois/YxJBtfAN
/SE3eWHSafbsCcXuPicayc+6H7u32jYbFLuXmZop9K9duB6jtKy4AF1l80+R9tis
S1tFHZ1Qd/soavTmC42sHfHaUqNEvfRQgTC2XAXssbiivCVhZ0kVBrmF0xbnuUgm
D5ZfauIiGAYMn9pWmukdt+U52i2AiVElDuk5R7qzr5E58nAv5ywFV5aoEmtMLycp
0oYYYD6jP7eRejzLI7m2H4qL9e7UCpkoL2ZE86V1DadfeMhdzZniiOoCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKqsPb3zUYP7XT2RUvZ8G5cdoZPMB8GA1UdIwQY
MBaAFCkZe8czDqmZAPT8kQM6Mxflb3XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjct
MzUwMDRhZjVjOTM1LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjctMzUwMDRhZjVjOTM1
LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExnV+etR
EIPjCtoj2+vY3+wogkj1UnLm7U6HUuLtxtS13+coa3vnnbjz5sAdjGuqKbN/U7pp
/zX/1e8jlzGeiNbRAPCkf2teiOgB2Ki9baLmlKMJXaJlfNEcfGzsrpJ+xGzM7k+2
7Psm0Fizuxy/gbTPdqnGmOlrxLffTfveQmTnQsMJi4cXxP/qQ2MfFCP5qzfuS9Si
ChMp8NpGkhHtSvOh8V97Q28RhmfZPhQeNzZjZcmcTqquMdVjsZbz4U1dKPhj3/JN
lCXq69wwVUi3YOMJvxLX1kXznhhmO8oDujUTNqzwPgCfsI7m6H+vKFImgqfo5sEU
gXMtP8poH9f7Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:33:01 2026 by rpki-client