Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: 4rFE1xNZn0hrxfH+jKs6UZB1gj3wnIIHAngIW+mhG6Q=
Subject key identifier: AA:FB:B2:1A:9C:FE:FF:64:2A:E2:DA:7F:62:70:53:EC:81:7A:48:D5
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019EB9223438B825240CEE008F8494159364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0912
Signing time: Fri 12 Jun 2026 00:01:26 +0000
Manifest this update: Fri 12 Jun 2026 00:01:26 +0000
Manifest next update: Sat 13 Jun 2026 00:01:26 +0000
Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: +bw2HJh+w8Yar9cgwDqlkjP3deFM4R924H2C37Yvwkw=)
2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:34:38:b8:25:24:0c:ee:00:8f:84:94:15:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jun 12 00:01:26 2026 GMT
Not After : Jun 13 00:01:26 2026 GMT
Subject: CN=aafbb21a9cfeff642ae2da7f627053ec817a48d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:be:52:bd:c9:a1:e0:fa:e2:a2:66:79:37:
70:f2:76:ed:40:c3:05:40:51:db:21:05:2d:c2:b5:
56:ff:af:d4:f7:0b:1d:be:eb:47:8d:e0:9a:b4:46:
88:e6:b0:63:d1:13:d8:c1:38:fa:83:03:94:dc:24:
20:60:34:99:6d:9c:d3:21:e8:60:87:0d:15:1b:57:
de:92:84:ae:67:0d:78:fd:13:b8:b1:96:19:67:4b:
bc:f5:79:14:06:f6:4f:77:e6:3f:43:1d:1f:40:0c:
32:30:15:51:3c:23:4a:e8:d1:39:b0:63:75:1b:b1:
ad:33:1b:d4:76:13:4b:83:9b:08:7c:37:f2:82:7a:
66:70:e6:a6:40:33:b6:b1:91:b5:1d:f4:10:cd:7a:
c6:7c:1e:ea:d1:3d:c0:ef:9c:b5:24:34:f8:d3:00:
30:ce:ed:ff:db:b7:81:08:ac:85:dc:86:b2:e6:6e:
a8:f6:55:87:6d:dd:fc:f0:70:8c:5c:31:ba:1a:40:
9d:31:84:84:16:d0:6f:27:f3:2e:3d:85:43:ed:49:
3d:9e:e7:ce:6f:b4:86:81:a2:2f:9c:1a:a8:24:bc:
b4:b5:73:fe:3e:6e:20:74:5a:32:f0:77:5e:5f:1c:
da:1f:07:e3:a5:cb:a3:82:a3:34:62:d7:fc:ab:73:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:B2:1A:9C:FE:FF:64:2A:E2:DA:7F:62:70:53:EC:81:7A:48:D5
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:e2:f0:46:63:54:ee:85:bf:08:06:b6:89:5a:01:b8:dd:
ff:5b:16:c0:a5:fd:14:00:89:47:24:89:ac:e8:d5:cf:6a:0d:
f0:e7:bd:50:a1:cb:08:78:2a:9f:eb:08:2d:7f:38:e2:9a:6f:
83:a1:01:c8:07:f4:d6:de:59:cf:26:79:6d:cc:b5:da:94:c8:
97:d6:d8:3b:9c:1d:e4:e1:69:59:a5:86:27:a4:da:d1:b3:f0:
84:4b:69:93:22:69:98:d7:ba:43:2e:64:9f:7a:5e:b7:24:a3:
bf:aa:0f:80:0a:74:89:79:bb:7f:9e:0f:69:9b:38:70:2b:fd:
52:33:ed:0c:b7:95:88:be:0d:3e:2e:00:d2:63:47:51:ab:f7:
ed:67:3d:2c:b2:c1:2e:b9:ec:56:20:9f:d5:75:7b:03:c0:b8:
93:be:9e:94:17:5e:70:ee:25:f7:83:e6:39:d4:5c:b0:00:e4:
94:07:e3:7e:30:97:62:5c:74:a0:3f:2a:10:22:df:3d:35:b0:
3a:61:23:55:e1:0d:ba:e8:5b:35:ec:b4:c9:1b:d0:c0:41:0e:
8b:c1:0e:b9:92:c9:cf:bb:59:e9:1b:75:f5:3f:5b:93:8f:ff:
5c:65:0b:d0:7e:3c:5c:52:7a:88:11:47:e3:5e:60:87:ae:d8:
b1:d0:16:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IjQ4uCUkDO4Aj4SUFZNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh
YmVhNWIwHhcNMjYwNjEyMDAwMTI2WhcNMjYwNjEzMDAwMTI2WjAzMTEwLwYDVQQD
EyhhYWZiYjIxYTljZmVmZjY0MmFlMmRhN2Y2MjcwNTNlYzgxN2E0OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqm+Ur3JoeD64qJmeTdw8nbtQMMF
QFHbIQUtwrVW/6/U9wsdvutHjeCatEaI5rBj0RPYwTj6gwOU3CQgYDSZbZzTIehg
hw0VG1fekoSuZw14/RO4sZYZZ0u89XkUBvZPd+Y/Qx0fQAwyMBVRPCNK6NE5sGN1
G7GtMxvUdhNLg5sIfDfygnpmcOamQDO2sZG1HfQQzXrGfB7q0T3A75y1JDT40wAw
zu3/27eBCKyF3Iay5m6o9lWHbd388HCMXDG6GkCdMYSEFtBvJ/MuPYVD7Uk9nufO
b7SGgaIvnBqoJLy0tXP+Pm4gdFoy8HdeXxzaHwfjpcujgqM0Ytf8q3PwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr7shqc/v9kKuLaf2JwU+yBekjVMB8GA1UdIwQY
MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt
Y2EzYjFjYWM2OWM3LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3
LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLri8EZj
VO6FvwgGtolaAbjd/1sWwKX9FACJRySJrOjVz2oN8Oe9UKHLCHgqn+sILX844ppv
g6EByAf01t5ZzyZ5bcy12pTIl9bYO5wd5OFpWaWGJ6Ta0bPwhEtpkyJpmNe6Qy5k
n3petySjv6oPgAp0iXm7f54PaZs4cCv9UjPtDLeViL4NPi4A0mNHUav37Wc9LLLB
LrnsViCf1XV7A8C4k76elBdecO4l94PmOdRcsADklAfjfjCXYlx0oD8qECLfPTWw
OmEjVeENuuhbNey0yRvQwEEOi8EOuZLJz7tZ6Rt19T9bk4//XGUL0H48XFJ6iBFH
415gh67YsdAWrw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:09:32 2026 by rpki-client