Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
File: RKw-QPgEbPOHzJFwxdFifUIh190.mft (raw, json)
Hash identifier: D6vX75omunPJkTSGk9gVf2oByPVBPV66FAljKNWHXEc=
Subject key identifier: EE:A3:33:BE:95:C9:AC:88:C9:19:B1:91:5B:81:D6:54:9D:D8:B2:CD
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Certificate issuer: /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial: 01A04CC0F63A25EEA536BD07E1F10363E595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
Manifest number: A1
Signing time: Sat 29 Aug 2026 09:01:49 +0000
Manifest this update: Sat 29 Aug 2026 09:01:49 +0000
Manifest next update: Sun 30 Aug 2026 09:01:49 +0000
Files and hashes: 1: RKw-QPgEbPOHzJFwxdFifUIh190.crl (hash: rxYmoMIhiyExxy2mK1VluOJ65Qf8sEtjYT35xeJyoso=)
2: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (hash: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:c0:f6:3a:25:ee:a5:36:bd:07:e1:f1:03:63:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Validity
Not Before: Aug 29 09:01:49 2026 GMT
Not After : Aug 30 09:01:49 2026 GMT
Subject: CN=eea333be95c9ac88c919b1915b81d6549dd8b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:e6:01:bf:ac:ac:ed:66:e2:6f:ab:ca:33:
fc:83:c8:e4:37:04:25:86:ce:c0:c9:9f:7d:99:17:
2a:ff:03:22:b9:c8:ec:e4:4b:0b:b1:9e:1a:23:00:
ed:69:b6:ec:05:99:22:7a:2e:96:5b:32:8f:96:f4:
3b:11:5a:8a:e4:fe:a5:3c:52:01:f1:55:f8:cd:29:
f3:9a:bf:c7:8a:9c:c0:ab:94:0f:19:7d:5e:d3:20:
e1:70:56:39:32:c5:bb:d4:17:ec:34:cb:41:6f:f3:
b4:f0:65:e3:3d:aa:f9:93:5e:16:20:c7:26:91:a0:
cf:a5:f4:9d:da:a1:96:b1:b8:ce:d3:07:ad:75:d8:
11:01:f3:e5:48:91:d5:18:ed:a0:0a:b7:4f:1d:66:
52:ce:bc:dc:c9:15:93:56:50:1f:10:87:4e:d8:bb:
c4:b9:6a:06:13:51:b9:15:d2:13:f6:37:5a:13:79:
eb:b5:27:15:e3:59:78:8a:95:4f:34:95:57:0b:24:
bf:e1:fe:8a:12:d8:07:b8:96:c5:79:93:7c:a8:e8:
49:63:72:d2:42:cd:8b:00:8d:00:a6:42:9b:b2:23:
fa:b2:55:c9:ac:2f:44:5f:3c:94:46:46:2a:a9:33:
0f:f3:94:9d:a4:2c:75:17:17:eb:a9:b4:ec:0a:91:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:33:BE:95:C9:AC:88:C9:19:B1:91:5B:81:D6:54:9D:D8:B2:CD
X509v3 Authority Key Identifier:
keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:20:f8:8c:2f:6b:a4:21:fc:ee:46:9e:3a:2b:3d:ee:9d:
10:8b:05:68:12:d8:21:3c:9a:d4:84:00:2d:57:5f:c6:5d:37:
a1:2f:c9:b3:ad:f5:c1:38:10:11:b3:01:cf:23:4a:4a:f2:21:
f9:be:35:2f:d4:6e:bc:a8:91:4f:ee:78:e7:c8:00:25:cc:ce:
dc:74:3c:8b:ec:8a:cd:f4:b1:9f:26:ed:ef:a0:19:34:66:15:
eb:42:44:e7:7e:90:a7:50:3e:f2:ac:f7:92:87:43:64:08:40:
08:a5:51:e8:eb:e0:d8:f8:e1:3e:c7:3c:55:3e:f7:dc:bb:84:
07:49:09:06:47:11:ac:12:a0:2b:9e:e7:7e:4d:92:4b:23:89:
09:19:00:e3:2a:a4:65:9f:a8:dc:00:42:c1:2e:d2:98:ab:bd:
ea:d4:70:b1:7a:f7:cf:6c:65:14:15:cf:e8:39:8f:b3:72:ab:
74:01:34:29:91:4b:3e:8a:9c:0d:d7:1b:12:45:0b:c2:1b:f2:
ee:93:3d:72:ef:c4:9e:4b:c8:9c:b5:e1:46:df:06:1d:68:12:
94:f9:df:f6:38:63:34:cc:c6:8a:42:4f:71:ec:26:a4:05:6a:
85:95:37:c2:aa:25:f1:d2:45:08:dc:2b:d8:18:dd:63:17:4c:
4c:64:0a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBMwPY6Je6lNr0H4fEDY+WVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWMzZTQwZjgwNDZjZjM4N2NjOTE3MGM1ZDE2MjdkNDIy
MWQ3ZGQwHhcNMjYwODI5MDkwMTQ5WhcNMjYwODMwMDkwMTQ5WjAzMTEwLwYDVQQD
EyhlZWEzMzNiZTk1YzlhYzg4YzkxOWIxOTE1YjgxZDY1NDlkZDhiMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmvmAb+srO1m4m+ryjP8g8jkNwQl
hs7AyZ99mRcq/wMiucjs5EsLsZ4aIwDtabbsBZkiei6WWzKPlvQ7EVqK5P6lPFIB
8VX4zSnzmr/HipzAq5QPGX1e0yDhcFY5MsW71BfsNMtBb/O08GXjPar5k14WIMcm
kaDPpfSd2qGWsbjO0wetddgRAfPlSJHVGO2gCrdPHWZSzrzcyRWTVlAfEIdO2LvE
uWoGE1G5FdIT9jdaE3nrtScV41l4ipVPNJVXCyS/4f6KEtgHuJbFeZN8qOhJY3LS
Qs2LAI0ApkKbsiP6slXJrC9EXzyURkYqqTMP85SdpCx1FxfrqbTsCpFNMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6jM76VyayIyRmxkVuB1lSd2LLNMB8GA1UdIwQY
MBaAFESsPkD4BGzzh8yRcMXRYn1CIdfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt
MTQ3ZTQ1NzI4NzNhLzEvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh
LzEvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYcg+Iwv
a6Qh/O5GnjorPe6dEIsFaBLYITya1IQALVdfxl03oS/Js631wTgQEbMBzyNKSvIh
+b41L9RuvKiRT+5458gAJczO3HQ8i+yKzfSxnybt76AZNGYV60JE536Qp1A+8qz3
kodDZAhACKVR6Ovg2PjhPsc8VT733LuEB0kJBkcRrBKgK57nfk2SSyOJCRkA4yqk
ZZ+o3ABCwS7SmKu96tRwsXr3z2xlFBXP6DmPs3KrdAE0KZFLPoqcDdcbEkULwhvy
7pM9cu/EnkvInLXhRt8GHWgSlPnf9jhjNMzGikJPcewmpAVqhZU3wqol8dJFCNwr
2BjdYxdMTGQKUw==
-----END CERTIFICATE-----
Generated at Sat Aug 29 12:41:43 2026 by rpki-client