Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: SKGQgrTUVs+gpeau1CjeruoiPv73RZmYQAGqsLUZZ7o=
Subject key identifier: 51:FE:29:8B:EE:9F:C9:F6:FE:96:49:91:27:CE:79:2D:F5:13:D8:F7
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019F1009BA5C242415F9EE8782AF4E86F31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1983
Signing time: Sun 28 Jun 2026 21:01:40 +0000
Manifest this update: Sun 28 Jun 2026 21:01:40 +0000
Manifest next update: Mon 29 Jun 2026 21:01:40 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: yLTTnxm25pAx6t+EhsGCEje5owoIhTBOR35CvtKWHo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:09:ba:5c:24:24:15:f9:ee:87:82:af:4e:86:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jun 28 21:01:40 2026 GMT
Not After : Jun 29 21:01:40 2026 GMT
Subject: CN=51fe298bee9fc9f6fe96499127ce792df513d8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:4a:5a:2a:e4:5b:d9:7d:0b:b8:5b:22:f5:
0a:8d:72:5e:bc:ef:4b:9d:de:ed:fd:e6:f4:01:aa:
e6:99:94:19:ca:fb:31:f9:f2:91:d6:a6:52:f3:db:
33:d4:44:6a:99:bf:2f:ff:70:ba:2e:55:86:19:84:
8d:4d:70:8b:37:87:50:4f:5c:07:cd:53:7a:80:30:
f3:9e:c1:7b:96:84:e6:a3:13:b6:a3:97:ce:65:48:
95:5a:1a:84:6f:93:67:45:56:0d:f0:6b:47:04:a6:
a5:8c:6d:f0:08:e5:33:de:32:2a:2a:61:ae:c8:b9:
80:f1:0d:65:e5:3d:18:1c:14:ec:6a:2d:b4:57:e0:
1c:ee:3d:ec:a8:7b:1b:a9:b2:b1:41:06:57:d1:66:
6f:ff:d2:ad:1a:fb:67:06:ce:63:a7:3f:55:ee:0f:
8e:d6:88:9e:db:ab:ae:fe:98:a6:66:fd:ca:ed:97:
d3:cc:a4:12:56:e6:60:4a:af:6b:18:fc:e1:b8:c9:
d1:4e:47:70:a5:c1:77:46:b1:2a:b5:3c:52:e8:f4:
ac:f0:ca:23:8d:2a:b2:3d:d2:15:aa:0c:0c:a6:ab:
84:9f:01:67:e3:d8:20:4a:0b:d6:89:fc:73:a3:7b:
92:9c:c0:82:3f:73:4c:81:3a:c8:26:0b:73:81:51:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:29:8B:EE:9F:C9:F6:FE:96:49:91:27:CE:79:2D:F5:13:D8:F7
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:b4:cf:53:d5:df:82:43:62:b3:fc:a0:d7:30:06:e0:96:
68:26:5a:e7:d1:43:a5:f5:19:a7:05:73:20:8b:71:d3:63:38:
b6:a2:0f:67:c2:e3:5f:ec:e5:c4:d4:b1:ed:15:fb:15:8b:54:
12:e4:f7:f9:9a:05:fb:16:e5:ef:93:93:e4:df:41:dd:ad:67:
4e:24:61:29:52:ad:4d:0d:e2:c1:bf:54:f2:b9:a4:19:40:b0:
c4:27:dc:ba:ed:50:b0:14:b1:9c:97:e2:2c:18:cc:e6:41:8e:
59:8b:5a:82:1d:ae:b8:b3:56:4d:23:f3:dc:32:2d:80:4b:b8:
be:4e:3b:b7:a9:9f:21:13:78:b9:00:5a:2c:10:5d:db:dc:20:
17:b4:05:8c:4d:3f:e4:c0:9e:2f:e8:f7:50:8f:be:36:b0:35:
c5:7d:60:36:a6:2f:3f:ee:7b:cd:52:32:06:0b:4f:d5:df:b1:
f0:5e:6d:70:0b:a2:b6:ea:c5:06:29:08:e4:7d:35:3d:e6:c2:
d2:d3:d5:8e:ff:0d:cd:ea:22:c9:e8:b6:a7:14:42:8d:b4:1b:
2c:00:ba:5c:86:c1:54:25:18:89:57:7e:4c:2f:8d:33:d3:c9:
3f:fd:55:25:10:26:d7:51:7d:9b:72:3d:ec:16:c0:39:f2:0d:
56:8c:70:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8QCbpcJCQV+e6Hgq9OhvMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk
YWI0MGIwHhcNMjYwNjI4MjEwMTQwWhcNMjYwNjI5MjEwMTQwWjAzMTEwLwYDVQQD
Eyg1MWZlMjk4YmVlOWZjOWY2ZmU5NjQ5OTEyN2NlNzkyZGY1MTNkOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPFKWirkW9l9C7hbIvUKjXJevO9L
nd7t/eb0AarmmZQZyvsx+fKR1qZS89sz1ERqmb8v/3C6LlWGGYSNTXCLN4dQT1wH
zVN6gDDznsF7loTmoxO2o5fOZUiVWhqEb5NnRVYN8GtHBKaljG3wCOUz3jIqKmGu
yLmA8Q1l5T0YHBTsai20V+Ac7j3sqHsbqbKxQQZX0WZv/9KtGvtnBs5jpz9V7g+O
1oie26uu/pimZv3K7ZfTzKQSVuZgSq9rGPzhuMnRTkdwpcF3RrEqtTxS6PSs8Moj
jSqyPdIVqgwMpquEnwFn49ggSgvWifxzo3uSnMCCP3NMgTrIJgtzgVHgNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH+KYvun8n2/pZJkSfOeS31E9j3MB8GA1UdIwQY
MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt
MzY0ODMxMzlkYzVlLzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl
LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFC0z1PV
34JDYrP8oNcwBuCWaCZa59FDpfUZpwVzIItx02M4tqIPZ8LjX+zlxNSx7RX7FYtU
EuT3+ZoF+xbl75OT5N9B3a1nTiRhKVKtTQ3iwb9U8rmkGUCwxCfcuu1QsBSxnJfi
LBjM5kGOWYtagh2uuLNWTSPz3DItgEu4vk47t6mfIRN4uQBaLBBd29wgF7QFjE0/
5MCeL+j3UI++NrA1xX1gNqYvP+57zVIyBgtP1d+x8F5tcAuiturFBikI5H01PebC
0tPVjv8Nzeoiyei2pxRCjbQbLAC6XIbBVCUYiVd+TC+NM9PJP/1VJRAm11F9m3I9
7BbAOfINVoxwhw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:23 2026 by rpki-client