
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: UHT5ta9u5qbdT38hWsaGBGTnBGzqVnc67/QcndV64dU=
Subject key identifier: B2:A6:39:96:61:B4:02:F5:C0:AC:E9:EA:B7:7B:11:C1:04:ED:5E:49
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019F83B1620D7FB32342A0F9DB7022D4E76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0CDC
Signing time: Tue 21 Jul 2026 08:01:08 +0000
Manifest this update: Tue 21 Jul 2026 08:01:08 +0000
Manifest next update: Wed 22 Jul 2026 08:01:08 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 15+oK2zR6mb3ZtfJlHlDUX+ppb9xCcSmzBi/PGqk9Ew=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b1:62:0d:7f:b3:23:42:a0:f9:db:70:22:d4:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jul 21 08:01:08 2026 GMT
Not After : Jul 22 08:01:08 2026 GMT
Subject: CN=b2a6399661b402f5c0ace9eab77b11c104ed5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:48:be:5f:4e:a5:68:76:52:69:cd:7b:92:
e3:27:2a:b7:3b:d7:04:f8:d8:80:10:83:92:46:db:
91:2b:2a:5a:93:57:b5:50:3c:49:f7:ed:b4:55:62:
92:c8:98:80:2f:53:4f:af:2e:06:5f:16:6c:80:3d:
18:53:d2:79:33:3b:97:1b:22:07:34:ec:14:9a:1e:
dd:d9:c8:3d:f3:9e:58:97:6e:31:4e:26:8e:76:3c:
21:51:84:f4:80:a7:8d:1e:12:3b:ac:26:73:b9:1c:
40:b8:e4:40:32:51:1a:b9:7e:d1:76:e7:1a:a9:62:
b2:26:53:49:de:0d:65:b4:87:05:27:1e:f2:fc:e7:
89:78:5d:79:78:74:32:5d:d1:30:3a:e2:32:00:c0:
e7:0e:e3:a0:7a:0a:0a:d9:8d:ea:49:41:a4:9d:16:
b4:5a:ce:6f:ed:92:ed:7b:f7:ed:c1:c9:78:18:ea:
75:1e:c7:d3:35:4b:d0:9a:3f:70:e1:b8:4d:29:b4:
7f:6c:9e:3c:42:14:89:23:54:e8:a4:22:3d:47:dd:
93:00:ac:a0:ea:d7:b9:e4:df:5f:f7:60:89:35:94:
06:f5:92:f8:1e:ce:81:5e:e2:95:a2:80:62:ec:65:
1c:f1:4a:96:11:42:4d:bf:d3:95:fe:a1:98:62:01:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:39:96:61:B4:02:F5:C0:AC:E9:EA:B7:7B:11:C1:04:ED:5E:49
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7c:39:17:2c:8b:04:f9:65:59:ff:a9:fa:df:bd:92:22:a2:
7f:4d:15:f8:f3:a1:c0:ae:4a:fa:cd:f6:5d:b1:85:9f:f8:8d:
8c:14:59:96:0d:e0:00:c0:56:73:09:ba:9f:00:a6:2d:9a:46:
ba:f3:11:9f:b8:af:d6:ee:bf:a6:fe:4d:d4:a1:10:08:82:c4:
b5:7c:7b:ae:0a:d8:26:51:2c:f3:bf:55:a9:ee:1b:2f:03:20:
f5:1b:4a:59:0b:0e:d4:77:94:a1:2c:8a:a2:89:e6:29:63:b1:
9a:3c:26:49:06:63:01:14:c8:45:8b:4a:db:3b:d0:f1:28:c1:
c6:04:64:97:f1:34:82:9b:a3:43:65:62:4b:d9:07:5b:a8:9f:
4a:36:4e:07:42:87:bd:1c:b7:97:a1:3c:1c:12:22:4f:75:d8:
ab:17:e1:16:08:35:04:24:5a:b7:25:e3:d9:a4:a4:d2:5d:d7:
58:4a:b4:4b:62:74:09:41:c9:13:9f:f4:6d:5f:13:0c:03:12:
3c:cf:b5:56:b3:5a:f5:e7:be:8d:3a:6f:2f:c7:f4:e3:e4:aa:
3c:db:cd:21:f1:11:45:20:12:d0:ec:ee:9b:cf:cc:fa:86:48:
90:61:1f:39:90:32:3a:09:e4:d8:76:c6:f4:4c:c8:e8:39:89:
e9:10:f0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DsWINf7MjQqD523Ai1OduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjYwNzIxMDgwMTA4WhcNMjYwNzIyMDgwMTA4WjAzMTEwLwYDVQQD
EyhiMmE2Mzk5NjYxYjQwMmY1YzBhY2U5ZWFiNzdiMTFjMTA0ZWQ1ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YtIvl9OpWh2UmnNe5LjJyq3O9cE
+NiAEIOSRtuRKypak1e1UDxJ9+20VWKSyJiAL1NPry4GXxZsgD0YU9J5MzuXGyIH
NOwUmh7d2cg9855Yl24xTiaOdjwhUYT0gKeNHhI7rCZzuRxAuORAMlEauX7Rduca
qWKyJlNJ3g1ltIcFJx7y/OeJeF15eHQyXdEwOuIyAMDnDuOgegoK2Y3qSUGknRa0
Ws5v7ZLte/ftwcl4GOp1HsfTNUvQmj9w4bhNKbR/bJ48QhSJI1TopCI9R92TAKyg
6te55N9f92CJNZQG9ZL4Hs6BXuKVooBi7GUc8UqWEUJNv9OV/qGYYgHAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKmOZZhtAL1wKzp6rd7EcEE7V5JMB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXw5FyyL
BPllWf+p+t+9kiKif00V+POhwK5K+s32XbGFn/iNjBRZlg3gAMBWcwm6nwCmLZpG
uvMRn7iv1u6/pv5N1KEQCILEtXx7rgrYJlEs879Vqe4bLwMg9RtKWQsO1HeUoSyK
oonmKWOxmjwmSQZjARTIRYtK2zvQ8SjBxgRkl/E0gpujQ2ViS9kHW6ifSjZOB0KH
vRy3l6E8HBIiT3XYqxfhFgg1BCRatyXj2aSk0l3XWEq0S2J0CUHJE5/0bV8TDAMS
PM+1VrNa9ee+jTpvL8f04+SqPNvNIfERRSAS0Ozum8/M+oZIkGEfOZAyOgnk2HbG
9EzI6DmJ6RDwWw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:36:46 2026 by rpki-client