Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: XjWgphSfiEjw9ljoD4irr8ROnYrsQSjKDX1skMgy13k=
Subject key identifier: DE:C8:B7:D2:ED:E6:59:3B:95:B2:05:92:DA:D1:BC:80:34:D5:6B:D7
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 019F129CA44BF8B2C065F1D04F7974E9E2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 1995
Signing time: Mon 29 Jun 2026 09:01:23 +0000
Manifest this update: Mon 29 Jun 2026 09:01:23 +0000
Manifest next update: Tue 30 Jun 2026 09:01:23 +0000
Files and hashes: 1: 1-AOMCdmeoYbt2ya7aina0jr4jtY.asa (hash: xTwHqHanvk0kgMpXCUgJVeavuxMbD2EF+e+t7yaNRxM=)
2: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (hash: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM=)
3: F_BgJOvocs04aWFuQm0POmDC4qk.asa (hash: 8pzNWyrC83klHScR8mmfAawPECea/FNnp40sU7XiI9U=)
4: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (hash: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4=)
5: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: k/l8TPVt6EW9rFIFRpeZanY+ZgJY6OC0mN3AG4flgZ8=)
6: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (hash: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo=)
7: o1nw85DsZ7czict7FbvJ_kQ779I.roa (hash: SMVCZ8WXzySWtmomiDw5Tx85wLb4riJVskzdAhjKnkA=)
8: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (hash: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw=)
9: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (hash: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:a4:4b:f8:b2:c0:65:f1:d0:4f:79:74:e9:e2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jun 29 09:01:23 2026 GMT
Not After : Jun 30 09:01:23 2026 GMT
Subject: CN=dec8b7d2ede6593b95b20592dad1bc8034d56bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:70:9d:3d:42:1c:88:b3:e9:cc:f4:87:f3:
6e:cc:1a:e3:81:a2:70:2b:71:1f:d2:7e:7e:17:52:
a1:01:3d:18:c6:f5:56:5f:23:35:b6:0c:6f:1e:b4:
ca:02:b8:83:aa:c1:77:3f:a1:a1:87:1b:06:d0:15:
11:16:67:0d:99:f5:a3:3a:4e:67:55:87:e2:b2:90:
87:ed:ef:e9:3d:b8:59:f4:48:02:d3:68:8b:6c:56:
ee:d2:48:19:4d:eb:26:8c:98:74:d9:44:24:fa:1b:
f0:0d:06:da:f5:44:ef:9e:c4:0c:e3:e7:06:31:cb:
68:04:fb:95:f2:d5:9b:0c:2c:25:eb:3e:f3:16:0b:
07:37:62:8d:6f:43:b3:e4:64:44:d0:21:fb:ed:68:
14:f9:cc:7b:70:54:37:a2:07:80:14:c1:7c:80:63:
64:e8:53:74:a0:51:80:87:fd:78:4d:0c:8f:0a:a6:
f1:92:ad:47:88:79:24:d6:23:07:91:a4:68:f2:8d:
4e:53:5f:f5:ba:6b:b2:e1:13:a8:53:46:e7:25:80:
f3:91:77:a7:42:cc:0c:13:f4:0a:aa:65:8a:de:0c:
91:3e:ab:92:bc:7a:ff:5c:28:63:99:06:bc:e7:e4:
fa:24:4e:e2:82:6f:ed:e5:41:4d:35:14:f8:06:2d:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:B7:D2:ED:E6:59:3B:95:B2:05:92:DA:D1:BC:80:34:D5:6B:D7
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:00:fd:ca:50:d9:30:d2:c6:62:0c:9f:4a:6e:fc:0c:aa:63:
1e:6e:87:a4:79:b4:f9:3e:02:58:22:5b:03:ac:d1:4c:bb:91:
99:6d:de:40:ce:24:42:6d:27:99:18:df:6f:e3:d4:49:44:46:
72:d0:eb:b7:db:b7:d6:9f:c3:bc:6c:64:4c:ff:99:74:9d:2a:
8d:d2:d6:60:e9:26:a9:cd:2b:e2:5d:70:c3:c3:92:a5:ce:66:
7e:55:9f:c0:a6:92:d2:90:62:e6:36:45:ac:f8:df:d0:41:f8:
ab:84:88:04:e9:67:8f:66:68:83:f1:9e:b3:ae:82:4a:28:47:
4c:22:8c:9b:53:fa:59:d4:e4:f9:d8:d0:06:89:9f:a0:95:e5:
b7:aa:14:be:2e:e1:53:f2:42:99:59:f8:fa:ec:0d:47:04:89:
17:79:ca:b6:81:0f:c6:8c:46:74:b5:d9:67:6c:fe:f7:53:bf:
cf:58:b6:e8:3d:70:d7:23:4a:ee:0f:31:36:d1:3d:aa:9d:09:
f6:cf:1c:e0:1b:82:cb:3a:dc:49:96:55:a4:62:3b:f0:62:9b:
b6:87:79:19:b5:f8:fa:2f:6d:14:7a:a8:73:6a:97:2d:4c:66:
ab:85:d8:8c:d0:d2:fe:d2:90:e4:3e:da:7e:aa:6e:a1:55:7d:
34:ff:89:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnKRL+LLAZfHQT3l06eKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjYwNjI5MDkwMTIzWhcNMjYwNjMwMDkwMTIzWjAzMTEwLwYDVQQD
EyhkZWM4YjdkMmVkZTY1OTNiOTViMjA1OTJkYWQxYmM4MDM0ZDU2YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3dwnT1CHIiz6cz0h/NuzBrjgaJw
K3Ef0n5+F1KhAT0YxvVWXyM1tgxvHrTKAriDqsF3P6GhhxsG0BURFmcNmfWjOk5n
VYfispCH7e/pPbhZ9EgC02iLbFbu0kgZTesmjJh02UQk+hvwDQba9UTvnsQM4+cG
MctoBPuV8tWbDCwl6z7zFgsHN2KNb0Oz5GRE0CH77WgU+cx7cFQ3ogeAFMF8gGNk
6FN0oFGAh/14TQyPCqbxkq1HiHkk1iMHkaRo8o1OU1/1umuy4ROoU0bnJYDzkXen
QswME/QKqmWK3gyRPquSvHr/XChjmQa85+T6JE7igm/t5UFNNRT4Bi04YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7It9Lt5lk7lbIFktrRvIA01WvXMB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5QD9ylDZ
MNLGYgyfSm78DKpjHm6HpHm0+T4CWCJbA6zRTLuRmW3eQM4kQm0nmRjfb+PUSURG
ctDrt9u31p/DvGxkTP+ZdJ0qjdLWYOkmqc0r4l1ww8OSpc5mflWfwKaS0pBi5jZF
rPjf0EH4q4SIBOlnj2Zog/Ges66CSihHTCKMm1P6WdTk+djQBomfoJXlt6oUvi7h
U/JCmVn4+uwNRwSJF3nKtoEPxoxGdLXZZ2z+91O/z1i26D1w1yNK7g8xNtE9qp0J
9s8c4BuCyzrcSZZVpGI78GKbtod5GbX4+i9tFHqoc2qXLUxmq4XYjNDS/tKQ5D7a
fqpuoVV9NP+Jww==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:00 2026 by rpki-client