Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: TikeHmNP7noP9U/3CDmoNmE0S2H+bpv9hz1O8nibSis=
Subject key identifier: CA:27:D0:EF:EC:D6:E0:09:CE:59:6C:95:7B:61:37:3B:83:25:17:52
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019ECF72DC863991FD78ABC2213D29DE2D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1964
Signing time: Tue 16 Jun 2026 08:01:11 +0000
Manifest this update: Tue 16 Jun 2026 08:01:11 +0000
Manifest next update: Wed 17 Jun 2026 08:01:11 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: Ws8DRdaJUTOMf6EBMDz/HwvCxqzSoG/Nl1LZ40+ys+w=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:72:dc:86:39:91:fd:78:ab:c2:21:3d:29:de:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 16 08:01:11 2026 GMT
Not After : Jun 17 08:01:11 2026 GMT
Subject: CN=ca27d0efecd6e009ce596c957b61373b83251752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:5b:3a:c7:53:02:08:7d:9b:69:4d:d6:94:
0c:99:7a:de:74:85:87:24:f5:c8:66:f9:54:d8:bf:
2c:c2:3e:34:98:f7:51:e3:50:d7:2c:6a:17:2c:44:
5d:7e:ed:60:81:71:d2:58:21:83:50:21:ff:fe:10:
e9:bd:3a:ab:f1:ff:cc:72:1a:ba:2c:af:f2:7c:62:
e7:f4:bd:00:eb:93:66:5f:ec:76:9a:59:00:f3:ce:
d3:f1:d9:d8:c3:94:33:5e:5d:1c:92:76:44:e6:a7:
38:e9:98:62:9f:03:2d:95:3d:a5:d5:9b:6e:07:0f:
cb:6b:17:42:99:fc:64:b2:c8:34:05:32:35:5f:16:
a1:d6:aa:ed:33:6b:84:01:d2:aa:93:40:24:6b:f3:
da:8e:95:05:e6:67:94:7d:f8:93:b8:c2:1a:cd:d5:
1d:58:0b:6c:0b:8b:da:3e:ad:a8:ad:63:6d:16:fe:
1b:59:2e:6c:63:a8:51:2f:16:4e:1d:42:20:15:40:
be:68:c9:08:be:90:4b:04:db:46:07:c8:ea:09:07:
07:d9:d7:0a:5c:7c:27:d1:ab:e0:6b:6d:6a:c4:43:
39:ac:51:66:cd:c6:ca:80:c0:9e:b4:63:97:18:06:
2a:db:b2:7c:c7:64:f5:e7:b9:e8:b4:7b:86:a0:0e:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:D0:EF:EC:D6:E0:09:CE:59:6C:95:7B:61:37:3B:83:25:17:52
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e0:80:f1:2d:79:f4:09:ce:84:d0:36:00:54:e8:a5:8d:e8:
7e:6d:4e:f1:88:52:c8:0d:0f:9a:cd:5f:08:fa:77:36:fe:36:
34:50:0d:c5:90:db:49:97:56:2a:ed:22:cd:65:94:05:f7:f1:
3a:0a:99:c0:e7:ec:36:c0:a1:e2:07:76:49:ba:ca:ee:39:1c:
c0:46:69:dd:78:3d:f6:15:62:c5:70:a6:7e:f3:26:69:10:e6:
81:df:c9:9f:b7:d7:1d:e3:0b:97:c5:13:f2:0a:8d:c3:bb:0e:
49:3b:eb:28:9f:b3:be:1d:35:b6:a8:05:a2:b6:42:b2:a9:ed:
2d:d6:a1:7c:2e:3a:0a:76:fd:ac:b5:7f:6e:41:f8:e5:ec:9b:
b8:7f:91:b7:3d:5e:46:36:3c:87:ec:02:06:97:a6:88:3e:e5:
3c:31:7e:2f:2f:43:32:b3:b3:cc:bf:7a:1b:5e:78:23:55:f9:
d1:54:78:1d:03:67:85:27:6f:31:9e:0d:ab:f3:5c:8e:34:c9:
7f:3d:0b:e5:9e:53:8b:bf:21:fd:20:5d:54:a7:9e:e2:03:c2:
38:84:e4:dd:87:72:92:d5:24:e6:71:0e:2a:2f:7b:a0:0a:cd:
8b:7e:1d:e9:f7:9a:98:80:c6:aa:39:06:b2:a7:d6:57:82:02:
8c:ac:b0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7PctyGOZH9eKvCIT0p3i2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjYwNjE2MDgwMTExWhcNMjYwNjE3MDgwMTExWjAzMTEwLwYDVQQD
EyhjYTI3ZDBlZmVjZDZlMDA5Y2U1OTZjOTU3YjYxMzczYjgzMjUxNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplFbOsdTAgh9m2lN1pQMmXredIWH
JPXIZvlU2L8swj40mPdR41DXLGoXLERdfu1ggXHSWCGDUCH//hDpvTqr8f/Mchq6
LK/yfGLn9L0A65NmX+x2mlkA887T8dnYw5QzXl0cknZE5qc46ZhinwMtlT2l1Ztu
Bw/LaxdCmfxkssg0BTI1Xxah1qrtM2uEAdKqk0Aka/PajpUF5meUffiTuMIazdUd
WAtsC4vaPq2orWNtFv4bWS5sY6hRLxZOHUIgFUC+aMkIvpBLBNtGB8jqCQcH2dcK
XHwn0avga21qxEM5rFFmzcbKgMCetGOXGAYq27J8x2T157notHuGoA4g7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMon0O/s1uAJzllslXthNzuDJRdSMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuCA8S15
9AnOhNA2AFTopY3ofm1O8YhSyA0Pms1fCPp3Nv42NFANxZDbSZdWKu0izWWUBffx
OgqZwOfsNsCh4gd2SbrK7jkcwEZp3Xg99hVixXCmfvMmaRDmgd/Jn7fXHeMLl8UT
8gqNw7sOSTvrKJ+zvh01tqgForZCsqntLdahfC46Cnb9rLV/bkH45eybuH+Rtz1e
RjY8h+wCBpemiD7lPDF+Ly9DMrOzzL96G154I1X50VR4HQNnhSdvMZ4Nq/NcjjTJ
fz0L5Z5Ti78h/SBdVKee4gPCOITk3YdyktUk5nEOKi97oArNi34d6feamIDGqjkG
sqfWV4ICjKywaQ==
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:09:02 2026 by rpki-client