Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: RGMjOobSVofk9hWp3TK+dC6A+vC3nrBlO5B9RSs7eGw=
Subject key identifier: B3:C5:33:F8:B1:E5:FB:A9:2D:2A:7F:A6:F8:8A:18:30:F7:36:B2:56
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 019FFAFF001957EDDD0B7EEC6DFE7312095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 19FB
Signing time: Thu 13 Aug 2026 12:00:43 +0000
Manifest this update: Thu 13 Aug 2026 12:00:43 +0000
Manifest next update: Fri 14 Aug 2026 12:00:43 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: Ks+RbL+RhMYAaAVmej0mBNUvhlDKr8DHeXmlyhwXT3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ff:00:19:57:ed:dd:0b:7e:ec:6d:fe:73:12:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Aug 13 12:00:43 2026 GMT
Not After : Aug 14 12:00:43 2026 GMT
Subject: CN=b3c533f8b1e5fba92d2a7fa6f88a1830f736b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:5b:62:db:e1:b5:6d:1f:76:31:c1:01:90:
c4:c1:3a:1b:15:91:c2:fa:07:8c:91:fd:bb:d5:d6:
d5:5e:f7:30:ea:79:f8:10:2f:f5:86:8b:60:a4:86:
66:ce:2e:3a:ef:ee:f6:6f:61:9a:97:99:39:99:96:
26:e4:ac:06:71:6f:c2:6a:30:1a:6b:36:07:6c:f5:
75:38:6e:47:80:5e:6a:7b:8b:7b:65:fc:80:fe:c4:
96:d6:6d:b1:18:3c:91:23:10:08:7a:05:df:49:28:
e0:e6:bd:19:a5:a9:94:55:5a:be:21:5f:6f:d8:53:
0a:17:7f:d3:85:43:45:69:72:c3:63:9e:6a:c7:f4:
5a:4e:b1:af:f7:48:19:f4:3b:f7:8f:99:9d:b1:8f:
07:6c:53:d1:9d:bf:d0:dc:a5:36:8c:bf:84:4f:1c:
72:2b:f1:31:a7:b3:bb:3c:6d:ee:8c:d5:19:13:ea:
f6:cf:53:8a:2d:6f:8c:7c:f0:2d:ba:55:04:6f:72:
96:17:9e:e2:59:c3:dc:ea:a1:39:62:6c:8c:3b:74:
8f:a0:92:d5:c1:55:7f:ab:d4:1e:91:6f:4d:3f:05:
f4:eb:cf:38:64:f2:e8:bd:cc:6d:70:43:c9:02:12:
71:94:d1:da:c8:ad:3e:4e:f2:97:62:02:3d:38:f3:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:33:F8:B1:E5:FB:A9:2D:2A:7F:A6:F8:8A:18:30:F7:36:B2:56
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3d:6f:f5:a0:cf:c6:9a:07:3e:1f:bc:59:a9:7d:c3:f4:54:
06:87:bb:bc:15:5a:85:9a:19:e6:6a:cd:fb:af:4c:47:c5:27:
ae:8e:a1:33:e2:a3:c8:9b:0e:a2:5b:a9:cc:7c:0f:10:99:76:
78:03:5e:46:e2:d6:86:82:a0:d5:62:d0:0c:ed:ec:f6:bc:f8:
c3:25:76:28:3c:70:89:81:e1:99:ed:34:d9:15:a7:9f:e1:cd:
79:df:eb:80:98:12:b4:58:8e:be:b3:80:5d:35:63:ca:2d:0e:
2d:4e:4a:85:7b:65:11:fc:f5:6b:1a:c4:07:da:c8:d4:0e:33:
08:f8:90:ae:be:63:9d:18:84:60:56:ac:a6:39:2e:d8:7e:b4:
3d:2b:fc:55:e5:01:7a:19:c6:e5:2a:32:57:eb:5a:ca:c0:46:
9e:03:2f:85:7f:b3:12:fe:2d:38:74:b5:a3:30:2b:0a:23:e3:
bf:34:af:7e:45:e0:01:f6:af:6b:a0:a0:d3:3e:d5:9b:77:78:
9a:fa:d0:3b:00:35:9a:0a:b4:cc:61:b4:ec:93:97:e9:05:2e:
3f:82:f2:1b:e3:66:32:c9:aa:91:89:61:4f:0a:c8:95:a4:1e:
41:12:05:5c:55:70:fb:1b:14:62:7c:32:80:47:6d:71:e9:ee:
1e:02:a5:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6/wAZV+3dC37sbf5zEglfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTAxM2EzNmU2MWJlYzQwYTEyYTBlNDFjNDhmMTkxODYz
MDcxYWYwHhcNMjYwODEzMTIwMDQzWhcNMjYwODE0MTIwMDQzWjAzMTEwLwYDVQQD
EyhiM2M1MzNmOGIxZTVmYmE5MmQyYTdmYTZmODhhMTgzMGY3MzZiMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v5bYtvhtW0fdjHBAZDEwTobFZHC
+geMkf271dbVXvcw6nn4EC/1hotgpIZmzi467+72b2Gal5k5mZYm5KwGcW/CajAa
azYHbPV1OG5HgF5qe4t7ZfyA/sSW1m2xGDyRIxAIegXfSSjg5r0ZpamUVVq+IV9v
2FMKF3/ThUNFaXLDY55qx/RaTrGv90gZ9Dv3j5mdsY8HbFPRnb/Q3KU2jL+ETxxy
K/Exp7O7PG3ujNUZE+r2z1OKLW+MfPAtulUEb3KWF57iWcPc6qE5YmyMO3SPoJLV
wVV/q9QekW9NPwX06884ZPLovcxtcEPJAhJxlNHayK0+TvKXYgI9OPPUZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPFM/ix5fupLSp/pviKGDD3NrJWMB8GA1UdIwQY
MBaAFCtQE6NuYb7EChKg5BxI8ZGGMHGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUt
ZjQzMmU5ZDhjNGQ3LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUtZjQzMmU5ZDhjNGQ3
LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD1v9aDP
xpoHPh+8Wal9w/RUBoe7vBVahZoZ5mrN+69MR8Unro6hM+KjyJsOolupzHwPEJl2
eANeRuLWhoKg1WLQDO3s9rz4wyV2KDxwiYHhme002RWnn+HNed/rgJgStFiOvrOA
XTVjyi0OLU5KhXtlEfz1axrEB9rI1A4zCPiQrr5jnRiEYFaspjku2H60PSv8VeUB
ehnG5SoyV+taysBGngMvhX+zEv4tOHS1ozArCiPjvzSvfkXgAfava6Cg0z7Vm3d4
mvrQOwA1mgq0zGG07JOX6QUuP4LyG+NmMsmqkYlhTwrIlaQeQRIFXFVw+xsUYnwy
gEdtcenuHgKlyA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:01:47 2026 by rpki-client