Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: lX3VH4a7z0Lm8yajXYpqE4jqpmwTjVz54XjEyJRQlBM=
Subject key identifier: A9:BA:58:99:16:BE:60:C7:20:84:3A:08:FB:F5:48:59:91:6B:83:E4
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019F29C8B3111369BAB8C89DF536F753E538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1991
Signing time: Fri 03 Jul 2026 21:00:46 +0000
Manifest this update: Fri 03 Jul 2026 21:00:46 +0000
Manifest next update: Sat 04 Jul 2026 21:00:46 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: kwvhF5BHaiqINpdXwWz4ksKlf2nU6KmmTsw9BMj6rv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:c8:b3:11:13:69:ba:b8:c8:9d:f5:36:f7:53:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jul 3 21:00:46 2026 GMT
Not After : Jul 4 21:00:46 2026 GMT
Subject: CN=a9ba589916be60c720843a08fbf54859916b83e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:14:95:9a:58:73:01:f6:24:c3:3c:45:67:
44:39:1f:b5:4e:24:92:1d:e5:a9:86:0b:3e:21:34:
d0:2a:65:31:10:d4:34:86:61:8b:a9:48:96:be:fb:
40:a8:e8:0c:45:1f:49:48:30:b0:7a:84:90:e6:45:
ac:34:fa:e6:26:7d:44:21:fb:dc:a5:28:c6:03:71:
70:05:9b:b9:a5:42:7a:54:66:d2:84:c9:82:f9:6a:
1a:d6:4b:e4:5d:68:7a:b9:14:ac:71:9d:5c:bf:e6:
e9:39:0c:b8:d8:21:40:9d:52:14:a1:83:1d:34:4d:
54:9c:9f:ae:d7:73:9e:4f:db:aa:e1:22:3d:f5:d0:
f3:62:b5:da:30:e6:31:7b:94:3a:56:a8:11:71:d3:
75:24:de:72:c2:e7:5d:98:4f:61:15:60:95:1e:f4:
cf:eb:1d:24:e5:53:49:b5:68:94:06:81:f0:73:2d:
58:f9:d8:aa:8c:ec:84:99:29:44:7f:ff:0f:1c:db:
18:28:1c:0d:27:df:40:b8:d9:91:6c:6f:5d:33:e1:
6d:bc:89:15:f2:cd:9a:2f:39:2e:9c:ba:ff:09:16:
f6:39:fa:fe:4d:e5:0b:50:f4:8e:de:3d:34:b4:42:
ff:1c:66:58:39:36:c3:60:53:bb:6b:cd:d0:d7:76:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:58:99:16:BE:60:C7:20:84:3A:08:FB:F5:48:59:91:6B:83:E4
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d6:76:97:4b:4a:ad:fe:02:e9:62:74:06:3d:93:43:dd:24:
1f:a4:13:08:79:3a:a1:df:24:c0:8f:48:62:87:7f:ee:60:a1:
a3:e3:9c:de:2d:3f:18:a0:a5:86:85:e0:2d:e8:cf:e7:1f:b0:
f3:26:d1:4a:01:ba:34:7f:3e:18:75:35:71:b6:7a:dc:e2:6d:
81:86:7e:58:6b:9a:c9:29:41:fb:9f:d4:72:22:4b:87:ee:eb:
20:3b:5e:95:de:df:9e:ef:48:79:90:8d:4a:1e:68:58:89:52:
4c:7c:5f:f6:7c:00:16:68:4f:d0:94:e6:08:4e:fe:53:0f:5e:
64:b0:33:d3:34:68:d6:88:37:73:42:37:7c:57:4e:49:d6:e3:
3a:2b:35:0d:9a:d9:57:5d:c2:11:7d:46:69:72:eb:61:44:b6:
07:9d:f1:77:1e:0a:39:51:10:95:48:e7:58:06:49:c4:d0:4f:
e7:b5:dc:22:d4:d9:22:83:05:76:65:8b:3b:06:a5:1b:d5:c5:
3d:48:00:9a:d0:65:19:fc:27:b9:51:2e:22:b2:f7:69:31:f0:
42:6b:bf:db:bc:19:e5:af:c9:b5:8e:8d:38:0b:41:43:a5:7c:
2b:8c:1d:0d:f1:e3:3d:b6:0b:73:d6:1e:48:7f:63:a0:38:27:
23:57:4e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pyLMRE2m6uMid9Tb3U+U4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw
MWFhZTEwHhcNMjYwNzAzMjEwMDQ2WhcNMjYwNzA0MjEwMDQ2WjAzMTEwLwYDVQQD
EyhhOWJhNTg5OTE2YmU2MGM3MjA4NDNhMDhmYmY1NDg1OTkxNmI4M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjYUlZpYcwH2JMM8RWdEOR+1TiSS
HeWphgs+ITTQKmUxENQ0hmGLqUiWvvtAqOgMRR9JSDCweoSQ5kWsNPrmJn1EIfvc
pSjGA3FwBZu5pUJ6VGbShMmC+Woa1kvkXWh6uRSscZ1cv+bpOQy42CFAnVIUoYMd
NE1UnJ+u13OeT9uq4SI99dDzYrXaMOYxe5Q6VqgRcdN1JN5ywuddmE9hFWCVHvTP
6x0k5VNJtWiUBoHwcy1Y+diqjOyEmSlEf/8PHNsYKBwNJ99AuNmRbG9dM+FtvIkV
8s2aLzkunLr/CRb2Ofr+TeULUPSO3j00tEL/HGZYOTbDYFO7a83Q13aPpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm6WJkWvmDHIIQ6CPv1SFmRa4PkMB8GA1UdIwQY
MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt
MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2
LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodZ2l0tK
rf4C6WJ0Bj2TQ90kH6QTCHk6od8kwI9IYod/7mCho+Oc3i0/GKClhoXgLejP5x+w
8ybRSgG6NH8+GHU1cbZ63OJtgYZ+WGuaySlB+5/UciJLh+7rIDteld7fnu9IeZCN
Sh5oWIlSTHxf9nwAFmhP0JTmCE7+Uw9eZLAz0zRo1og3c0I3fFdOSdbjOis1DZrZ
V13CEX1GaXLrYUS2B53xdx4KOVEQlUjnWAZJxNBP57XcItTZIoMFdmWLOwalG9XF
PUgAmtBlGfwnuVEuIrL3aTHwQmu/27wZ5a/JtY6NOAtBQ6V8K4wdDfHjPbYLc9Ye
SH9joDgnI1dO7w==
-----END CERTIFICATE-----
Generated at Sat Jul 4 01:24:15 2026 by rpki-client