Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: D4hRERJwdbGOsldphXoD7HEZBJLWrZB85Xaaj6hB4Ek=
Subject key identifier: B1:53:E3:6C:11:74:B8:E4:17:3C:A5:9F:9E:52:E5:7F:E3:54:1A:FE
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 019EB87CA996CE7D55718B667D6FE91ADFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0FEB
Signing time: Thu 11 Jun 2026 21:00:38 +0000
Manifest this update: Thu 11 Jun 2026 21:00:38 +0000
Manifest next update: Fri 12 Jun 2026 21:00:38 +0000
Files and hashes: 1: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: pvFJ3aYpKzlHE3MhJFqQVsWycKKnseUQucAP6t44pyA=)
2: uocAhhBHBra0ODge7OOLK9aTFIc.roa (hash: oBpQMaQKW9QFUbGv72QiYqlRk6w8Opo+61BD41Uub2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:a9:96:ce:7d:55:71:8b:66:7d:6f:e9:1a:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Jun 11 21:00:38 2026 GMT
Not After : Jun 12 21:00:38 2026 GMT
Subject: CN=b153e36c1174b8e4173ca59f9e52e57fe3541afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:ec:e3:dc:65:ac:68:de:5f:69:24:bc:40:
c0:6d:63:c1:3b:02:1f:cb:08:4f:a3:cd:9a:3d:c1:
62:7a:74:f9:0e:7d:8b:d1:71:fd:b9:c9:d3:69:7c:
5b:ee:87:0d:cc:96:4e:57:17:61:36:58:74:82:84:
41:48:05:7d:02:91:ec:e2:85:8c:66:8e:ec:88:7a:
8a:b2:2b:fe:e3:9b:5b:71:26:7a:0b:d2:79:a5:39:
13:f5:f9:ad:0f:3d:54:7c:e8:1c:19:db:40:69:d7:
f5:88:fb:be:f5:8f:de:7f:e5:9e:6d:b4:96:36:67:
a8:5f:18:0a:61:9d:2c:ab:8e:62:a9:6c:a2:ea:24:
8a:4c:27:84:f0:3e:53:73:69:96:42:a8:1d:da:95:
cc:9c:fc:5a:b5:49:b7:21:cd:72:a1:86:06:93:1b:
87:88:ba:21:ee:8d:cf:b9:a4:10:a9:4b:16:3c:8d:
11:50:db:38:79:93:61:dd:8b:f5:f1:bb:07:1b:c5:
4c:02:b8:8a:5e:8d:2f:91:24:1f:12:bb:11:4f:44:
eb:7e:4e:4f:1f:40:d5:22:63:96:71:c2:14:d0:d1:
32:a2:64:14:29:25:3c:7c:d6:cd:aa:59:60:86:e2:
01:e5:ae:3d:1c:c0:62:25:60:f6:7f:4d:95:b3:85:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:E3:6C:11:74:B8:E4:17:3C:A5:9F:9E:52:E5:7F:E3:54:1A:FE
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:99:38:02:c8:1b:ce:c1:be:a9:66:a6:72:af:55:ca:a6:84:
4f:9f:7a:41:3c:f5:48:e0:01:ac:69:23:09:e6:0f:23:b5:d9:
c7:52:35:38:32:37:93:66:21:76:14:20:14:ab:0e:1c:c8:97:
61:de:62:0f:db:ff:0a:6f:59:1b:15:b7:ad:d6:8a:08:15:72:
66:39:30:05:33:02:db:b6:cf:9c:64:21:72:5d:d2:10:d5:6b:
55:0d:f4:ce:5b:5b:af:c0:c5:45:f9:3a:ea:96:de:4a:86:ff:
f3:5e:01:68:57:48:51:9d:db:b7:4d:aa:56:e4:d9:1a:b0:38:
00:f0:9c:e0:af:28:e6:b7:e8:01:c5:e3:e0:ec:22:f9:e2:c9:
32:6d:5b:a5:84:27:7f:34:7a:04:36:ce:43:b2:b7:69:86:eb:
20:8b:4b:10:4b:95:ff:16:be:be:9c:84:61:0f:57:73:d6:0d:
83:31:c8:e7:19:0b:ca:19:dd:47:11:43:d5:a0:c3:c1:3a:55:
51:8d:47:96:71:e3:6e:96:6f:ed:6f:c6:4f:4e:28:68:4f:65:
7b:19:f0:31:91:10:f9:90:52:a6:e0:c3:c2:84:d7:88:7d:e1:
e9:14:77:75:74:01:78:d3:e8:fc:9c:69:8a:69:b7:25:d0:b7:
4e:da:af:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fKmWzn1VcYtmfW/pGt/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTdiMGJkOTA4MjdkZTA4ZDI0ZmVmNjFiY2M0NDg2MjAy
NGJmN2UwHhcNMjYwNjExMjEwMDM4WhcNMjYwNjEyMjEwMDM4WjAzMTEwLwYDVQQD
EyhiMTUzZTM2YzExNzRiOGU0MTczY2E1OWY5ZTUyZTU3ZmUzNTQxYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQHs49xlrGjeX2kkvEDAbWPBOwIf
ywhPo82aPcFienT5Dn2L0XH9ucnTaXxb7ocNzJZOVxdhNlh0goRBSAV9ApHs4oWM
Zo7siHqKsiv+45tbcSZ6C9J5pTkT9fmtDz1UfOgcGdtAadf1iPu+9Y/ef+WebbSW
NmeoXxgKYZ0sq45iqWyi6iSKTCeE8D5Tc2mWQqgd2pXMnPxatUm3Ic1yoYYGkxuH
iLoh7o3PuaQQqUsWPI0RUNs4eZNh3Yv18bsHG8VMAriKXo0vkSQfErsRT0Trfk5P
H0DVImOWccIU0NEyomQUKSU8fNbNqllghuIB5a49HMBiJWD2f02Vs4WnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFT42wRdLjkFzyln55S5X/jVBr+MB8GA1UdIwQY
MBaAFJAXsL2Qgn3gjST+9hvMRIYgJL9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQt
YThiZTk5MzJhYTg5LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQtYThiZTk5MzJhYTg5
LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJk4Asgb
zsG+qWamcq9VyqaET596QTz1SOABrGkjCeYPI7XZx1I1ODI3k2YhdhQgFKsOHMiX
Yd5iD9v/Cm9ZGxW3rdaKCBVyZjkwBTMC27bPnGQhcl3SENVrVQ30zltbr8DFRfk6
6pbeSob/814BaFdIUZ3bt02qVuTZGrA4APCc4K8o5rfoAcXj4Owi+eLJMm1bpYQn
fzR6BDbOQ7K3aYbrIItLEEuV/xa+vpyEYQ9Xc9YNgzHI5xkLyhndRxFD1aDDwTpV
UY1HlnHjbpZv7W/GT04oaE9lexnwMZEQ+ZBSpuDDwoTXiH3h6RR3dXQBeNPo/Jxp
imm3JdC3Ttqviw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:12 2026 by rpki-client