Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: ZkNPU99RhAMIgu7PQvV1XE16aRpL7fz+CQfCIsWWCBQ=
Subject key identifier: D2:49:F4:1C:5A:3C:5F:58:92:DC:2A:4A:C2:28:E6:64:4E:82:F2:4A
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01A08B67D26B2E1736AD1BA5A5CA709D79A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 13:00:32 +0000
Manifest this update: Thu 10 Sep 2026 13:00:32 +0000
Manifest next update: Fri 11 Sep 2026 13:00:32 +0000
Files and hashes: 1: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (hash: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw=)
2: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (hash: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: lOosXKU9v9gb4+qoluURVZuN2mQ4G5abshQ++mxdaPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:d2:6b:2e:17:36:ad:1b:a5:a5:ca:70:9d:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Sep 10 13:00:32 2026 GMT
Not After : Sep 11 13:00:32 2026 GMT
Subject: CN=d249f41c5a3c5f5892dc2a4ac228e6644e82f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:30:b9:1a:40:15:39:5d:22:32:60:3f:75:
00:c5:15:99:bc:27:6c:7e:74:a4:24:d5:32:34:f7:
50:60:af:b5:86:25:17:5a:d8:90:e9:33:4b:5c:df:
77:00:c6:42:f6:a4:c5:4e:c3:ff:7d:35:05:50:ce:
a4:c7:42:6b:a8:94:0f:56:a7:19:66:05:04:2a:b7:
4d:b2:4b:a9:07:75:b3:78:22:2e:98:25:a1:b6:93:
99:1b:32:77:8f:dd:20:0c:96:24:e6:54:70:af:2a:
88:d8:61:cc:e9:ea:15:fb:21:ef:d8:bf:88:65:a6:
c7:69:93:28:f0:e8:64:aa:c7:97:2a:a8:3e:de:42:
e2:eb:17:32:7d:5d:86:ba:ff:b6:5b:ac:e3:36:cb:
9a:58:80:ed:2a:7c:5b:bc:83:eb:75:38:ac:e2:d4:
31:28:33:cc:fc:4b:2a:79:67:03:d7:e0:2f:81:18:
69:4d:89:69:5c:bf:31:6f:93:da:37:9f:50:30:52:
14:c0:5b:31:8c:c1:d9:19:15:0f:42:62:b3:22:dc:
19:ce:81:8f:c2:05:fa:b6:db:bc:b4:4f:60:a4:cc:
5e:87:ef:b2:43:f2:f9:aa:51:3b:c2:81:8c:f4:a1:
81:f8:56:bb:10:72:81:c2:36:ff:80:60:c0:12:e0:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:F4:1C:5A:3C:5F:58:92:DC:2A:4A:C2:28:E6:64:4E:82:F2:4A
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8c:28:06:3e:40:fa:53:0d:47:f7:ac:b4:a0:7c:8d:a5:a6:
1a:72:d6:d5:37:5d:4a:c3:58:f5:df:00:2a:35:f1:8c:2c:c0:
be:f1:fb:6a:f9:c6:c3:9c:a1:8a:e8:86:31:57:f4:e4:39:45:
a3:90:6a:2f:b8:a0:82:f7:db:f2:cb:bb:c1:63:96:26:4c:15:
38:45:0d:42:97:0a:81:e4:23:f6:a3:72:45:fe:04:6b:74:e0:
b7:c3:dc:d5:bf:d1:d3:a4:76:ae:58:b6:b5:30:59:9f:18:9e:
6b:dd:db:68:0a:3e:10:b8:83:97:1e:7c:97:91:5f:df:5b:a8:
3f:c8:4e:2d:f2:43:06:0a:91:cc:64:fb:8a:dd:0b:71:cc:c9:
6d:30:b6:a8:87:17:56:df:a5:13:c5:b9:97:05:70:9c:3c:db:
68:e2:74:f0:75:c0:ad:39:19:17:9f:45:26:61:d4:a9:a7:03:
ee:15:2a:92:d4:e4:f4:14:55:4a:8c:aa:ec:5a:f9:35:f4:a6:
fb:67:99:0f:98:e2:a6:3c:6a:60:c0:e1:24:00:1e:20:bf:f1:
a8:98:d1:f6:4d:39:bd:92:f3:91:cf:34:2f:41:d8:ec:67:29:
31:f9:32:0e:13:18:19:4b:25:b2:e0:b5:1c:45:d3:ef:f6:6b:
6b:43:dc:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLZ9JrLhc2rRulpcpwnXmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjYwOTEwMTMwMDMyWhcNMjYwOTExMTMwMDMyWjAzMTEwLwYDVQQD
EyhkMjQ5ZjQxYzVhM2M1ZjU4OTJkYzJhNGFjMjI4ZTY2NDRlODJmMjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfYwuRpAFTldIjJgP3UAxRWZvCds
fnSkJNUyNPdQYK+1hiUXWtiQ6TNLXN93AMZC9qTFTsP/fTUFUM6kx0JrqJQPVqcZ
ZgUEKrdNskupB3WzeCIumCWhtpOZGzJ3j90gDJYk5lRwryqI2GHM6eoV+yHv2L+I
ZabHaZMo8OhkqseXKqg+3kLi6xcyfV2Guv+2W6zjNsuaWIDtKnxbvIPrdTis4tQx
KDPM/EsqeWcD1+AvgRhpTYlpXL8xb5PaN59QMFIUwFsxjMHZGRUPQmKzItwZzoGP
wgX6ttu8tE9gpMxeh++yQ/L5qlE7woGM9KGB+Fa7EHKBwjb/gGDAEuDKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJJ9BxaPF9YktwqSsIo5mROgvJKMB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHowoBj5A
+lMNR/estKB8jaWmGnLW1TddSsNY9d8AKjXxjCzAvvH7avnGw5yhiuiGMVf05DlF
o5BqL7iggvfb8su7wWOWJkwVOEUNQpcKgeQj9qNyRf4Ea3Tgt8Pc1b/R06R2rli2
tTBZnxiea93baAo+ELiDlx58l5Ff31uoP8hOLfJDBgqRzGT7it0LcczJbTC2qIcX
Vt+lE8W5lwVwnDzbaOJ08HXArTkZF59FJmHUqacD7hUqktTk9BRVSoyq7Fr5NfSm
+2eZD5jipjxqYMDhJAAeIL/xqJjR9k05vZLzkc80L0HY7GcpMfkyDhMYGUslsuC1
HEXT7/Zra0PcNQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:14 2026 by rpki-client