Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: CmpNQ0SpT7b71V13kVuVtuXk634VFbul9TVDR5BWRAI=
Subject key identifier: CD:81:00:F2:2C:4A:A9:C8:E4:E8:D2:03:59:2A:4F:8E:F3:FB:6B:86
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 01A0262178BF612FDC533D24809341B32CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: 8D
Signing time: Fri 21 Aug 2026 21:02:02 +0000
Manifest this update: Fri 21 Aug 2026 21:02:02 +0000
Manifest next update: Sat 22 Aug 2026 21:02:02 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: XDAjl7Sh8IvYR0rjlxuVlMju4gDHZE3z6CZwIactLnQ=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:21:78:bf:61:2f:dc:53:3d:24:80:93:41:b3:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Aug 21 21:02:02 2026 GMT
Not After : Aug 22 21:02:02 2026 GMT
Subject: CN=cd8100f22c4aa9c8e4e8d203592a4f8ef3fb6b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:c3:3e:40:d0:d5:70:c9:36:8c:ba:f6:f1:
5a:5a:bc:f4:75:ec:7e:a2:7b:80:94:1f:b8:b8:48:
e9:c2:15:93:9e:61:7e:da:09:7d:58:76:bf:96:3b:
5b:a4:49:6c:b6:c8:f2:24:a8:c3:79:a0:ef:39:b3:
47:80:fd:7f:de:43:ec:50:66:56:c3:3b:c6:29:68:
47:fc:d2:6c:ca:e5:88:8e:88:b8:82:19:ef:40:14:
c5:96:b2:35:d3:90:39:fc:84:68:0f:7e:da:fe:23:
ea:51:af:d5:a1:f1:34:29:73:e7:91:48:2c:59:cd:
06:ad:6a:a5:63:42:96:7a:4c:bd:0b:c1:14:0f:1f:
78:e0:69:79:fc:8f:d0:ea:00:13:b5:2e:80:f3:c1:
70:81:96:6e:7b:db:00:4d:ea:0a:c4:4c:f0:78:e4:
af:10:c9:a4:55:97:27:ad:8f:91:a5:f5:b8:1c:a6:
09:7e:1f:a8:86:5d:43:26:76:1a:04:4b:1f:7e:82:
22:08:2b:90:a0:27:9c:8b:75:9f:62:aa:03:f3:c2:
4e:59:67:42:4b:97:26:9b:cb:dc:31:69:94:d7:a0:
26:54:53:fe:e0:7c:92:3b:aa:ce:46:6a:67:87:29:
24:28:91:26:22:9c:f6:6b:4b:d9:01:7b:62:8c:6d:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:00:F2:2C:4A:A9:C8:E4:E8:D2:03:59:2A:4F:8E:F3:FB:6B:86
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:10:67:8f:19:ff:ca:e0:ea:09:7f:c6:c6:4f:c3:2f:c8:7a:
d7:b4:89:57:3a:a1:f4:59:44:b8:42:db:e4:d9:37:bd:45:20:
6d:73:9b:4e:70:ca:ad:f2:f5:53:09:3c:97:f2:08:6c:34:b1:
99:91:38:54:3b:c3:d6:0e:a6:bc:b6:ae:12:0b:1f:2f:47:42:
16:0b:65:9e:74:42:41:96:40:b9:d1:a2:f6:3d:32:d9:e1:cd:
87:ca:02:f3:f2:30:11:d1:b2:36:96:a6:d3:f9:f0:6f:8f:df:
2f:e8:f8:cd:b9:31:2e:6b:32:38:f7:d9:07:91:39:89:e6:1e:
71:6b:97:e0:d6:41:5b:10:e2:e6:dc:53:96:b2:63:4b:7a:32:
cf:2b:5d:cf:d9:1c:ab:48:51:df:4b:9e:ab:71:6d:97:27:15:
bb:5a:cf:04:6e:a5:d4:58:c1:5e:c9:8b:43:e8:ba:97:60:0b:
b4:a9:bd:4b:45:9d:d2:e2:4e:5f:fe:08:6e:ec:d6:f6:0a:a8:
b8:23:a0:fa:af:c3:2e:54:84:6d:45:f2:0c:01:a0:b1:19:16:
4c:df:02:1c:11:af:da:21:cc:eb:7a:83:c5:0c:b2:60:e3:ad:
81:47:9d:8f:fd:87:36:be:b4:60:84:c5:16:40:26:7f:2a:0e:
c2:01:8b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmIXi/YS/cUz0kgJNBsyzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjJlMWU0M2FhNjQ0ZGIxNTg2NzExODJmMmVmNzdlODg5
NjY2MGYwHhcNMjYwODIxMjEwMjAyWhcNMjYwODIyMjEwMjAyWjAzMTEwLwYDVQQD
EyhjZDgxMDBmMjJjNGFhOWM4ZTRlOGQyMDM1OTJhNGY4ZWYzZmI2Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9nDPkDQ1XDJNoy69vFaWrz0dex+
onuAlB+4uEjpwhWTnmF+2gl9WHa/ljtbpElstsjyJKjDeaDvObNHgP1/3kPsUGZW
wzvGKWhH/NJsyuWIjoi4ghnvQBTFlrI105A5/IRoD37a/iPqUa/VofE0KXPnkUgs
Wc0GrWqlY0KWeky9C8EUDx944Gl5/I/Q6gATtS6A88FwgZZue9sATeoKxEzweOSv
EMmkVZcnrY+RpfW4HKYJfh+ohl1DJnYaBEsffoIiCCuQoCeci3WfYqoD88JOWWdC
S5cmm8vcMWmU16AmVFP+4HySO6rORmpnhykkKJEmIpz2a0vZAXtijG2SLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2BAPIsSqnI5OjSA1kqT47z+2uGMB8GA1UdIwQY
MBaAFJHy4eQ6pkTbFYZxGC8u936IlmYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZMaDVEcW1STnNWaG5FWUx5NzNmb2lXWmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEva2ZMaDVEcW1STnNWaG5FWUx5NzNmb2lXWmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEva2ZMaDVEcW1STnNWaG5FWUx5NzNmb2lXWmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhBnjxn/
yuDqCX/Gxk/DL8h617SJVzqh9FlEuELb5Nk3vUUgbXObTnDKrfL1Uwk8l/IIbDSx
mZE4VDvD1g6mvLauEgsfL0dCFgtlnnRCQZZAudGi9j0y2eHNh8oC8/IwEdGyNpam
0/nwb4/fL+j4zbkxLmsyOPfZB5E5ieYecWuX4NZBWxDi5txTlrJjS3oyzytdz9kc
q0hR30ueq3FtlycVu1rPBG6l1FjBXsmLQ+i6l2ALtKm9S0Wd0uJOX/4IbuzW9gqo
uCOg+q/DLlSEbUXyDAGgsRkWTN8CHBGv2iHM63qDxQyyYOOtgUedj/2HNr60YITF
FkAmfyoOwgGLSA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:00 2026 by rpki-client