Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: SJxzoAvjACeDyrlW2tHZuQ6ym2RhMHYxbQ2kgoLM7U4=
Subject key identifier: 1C:07:F6:8A:89:52:46:D3:43:8B:A8:54:CC:89:5E:4C:29:FA:F5:53
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019EE367D8F6499B8073970302E560F22D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0DFD
Signing time: Sat 20 Jun 2026 05:01:34 +0000
Manifest this update: Sat 20 Jun 2026 05:01:34 +0000
Manifest next update: Sun 21 Jun 2026 05:01:34 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: ze70x+bue8RZfg44YHA1yVgxLHZDzRfkxoSmWk459Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:67:d8:f6:49:9b:80:73:97:03:02:e5:60:f2:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jun 20 05:01:34 2026 GMT
Not After : Jun 21 05:01:34 2026 GMT
Subject: CN=1c07f68a895246d3438ba854cc895e4c29faf553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:c4:9d:17:6f:60:74:c7:64:46:82:cc:c2:
2d:72:ff:5e:a0:e0:e5:a9:e1:25:a2:dc:2e:b9:9a:
19:d0:34:df:01:d0:cc:11:87:ff:c5:ac:40:ba:2c:
47:9c:ae:ca:8d:7a:bf:47:66:13:ff:23:a2:5d:0d:
1f:c1:ff:82:d2:d0:38:fc:de:c6:b1:8f:2a:97:88:
84:5d:d6:87:6f:99:d7:90:be:f4:64:d5:23:9b:08:
a6:85:04:28:db:f1:3c:68:08:38:3f:11:9f:7d:df:
33:ed:03:05:00:fd:f9:62:a1:bd:45:14:e2:66:e9:
54:de:65:ed:2c:31:b9:ad:25:13:e5:58:f7:ab:fb:
94:df:24:69:ea:3f:4c:dc:7e:c8:3a:77:cf:d3:19:
3e:a8:41:b7:5e:6e:09:17:59:59:3a:9e:22:62:e4:
23:f8:e6:9f:40:0a:2f:a4:e3:12:01:7a:ce:d6:ac:
3b:00:82:42:0e:63:f9:f6:13:6f:fd:ca:a3:d9:bd:
0c:1a:93:cd:c1:66:e7:18:43:c9:f6:b9:3c:72:91:
37:92:33:d5:1d:88:fe:f7:87:98:2e:ea:77:9f:42:
e7:1c:1e:fe:1c:b6:ac:39:fc:ec:a0:27:28:82:e6:
56:62:d5:b4:32:96:1b:67:0f:ea:f2:39:cb:61:3f:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:F6:8A:89:52:46:D3:43:8B:A8:54:CC:89:5E:4C:29:FA:F5:53
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:53:f0:a6:0f:e1:01:93:3e:7d:97:cb:41:da:b2:fc:cd:
04:5b:79:bf:91:ba:9d:33:06:35:8a:7f:85:c3:ca:73:51:d7:
2f:f7:db:90:d1:cf:1f:08:73:9f:e8:aa:80:bd:f5:a7:74:b9:
62:ab:c7:ac:be:4f:63:42:ae:b8:e9:73:6c:bb:ef:50:ab:02:
c9:ea:13:a0:c0:a8:83:c0:6c:90:ab:c2:16:3e:56:54:d9:c0:
ac:47:d8:18:8f:63:cf:5f:5e:30:03:75:2c:02:14:e8:3d:ae:
8e:00:99:7f:04:70:e2:09:fd:7f:83:b1:73:07:af:67:dc:59:
71:8e:1a:03:5b:1f:22:16:3e:0f:e0:c1:16:58:27:c2:17:77:
a4:0c:69:37:03:2e:56:8e:61:80:1e:89:f9:12:54:f0:d7:58:
f6:f0:f5:12:17:98:ff:32:01:5c:56:2e:d2:13:9d:9c:aa:e1:
52:ff:a8:2e:25:c8:0c:04:87:b3:23:04:08:0d:6e:88:3e:bb:
4d:69:5e:fd:15:48:8b:42:db:f3:39:c4:8b:1a:b0:6c:b1:dc:
54:fe:3c:47:eb:2f:fe:cc:8f:04:54:3c:5e:12:41:e3:ec:d4:
0e:d2:a3:6a:70:fa:e0:1c:1e:ac:b0:c7:10:37:a4:31:c5:c7:
a8:6f:63:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7jZ9j2SZuAc5cDAuVg8i0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh
MDM1YTMwHhcNMjYwNjIwMDUwMTM0WhcNMjYwNjIxMDUwMTM0WjAzMTEwLwYDVQQD
EygxYzA3ZjY4YTg5NTI0NmQzNDM4YmE4NTRjYzg5NWU0YzI5ZmFmNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG7EnRdvYHTHZEaCzMItcv9eoODl
qeElotwuuZoZ0DTfAdDMEYf/xaxAuixHnK7KjXq/R2YT/yOiXQ0fwf+C0tA4/N7G
sY8ql4iEXdaHb5nXkL70ZNUjmwimhQQo2/E8aAg4PxGffd8z7QMFAP35YqG9RRTi
ZulU3mXtLDG5rSUT5Vj3q/uU3yRp6j9M3H7IOnfP0xk+qEG3Xm4JF1lZOp4iYuQj
+OafQAovpOMSAXrO1qw7AIJCDmP59hNv/cqj2b0MGpPNwWbnGEPJ9rk8cpE3kjPV
HYj+94eYLup3n0LnHB7+HLasOfzsoCcoguZWYtW0MpYbZw/q8jnLYT/ncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwH9oqJUkbTQ4uoVMyJXkwp+vVTMB8GA1UdIwQY
MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt
NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj
LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkBT8KYP
4QGTPn2Xy0HasvzNBFt5v5G6nTMGNYp/hcPKc1HXL/fbkNHPHwhzn+iqgL31p3S5
YqvHrL5PY0KuuOlzbLvvUKsCyeoToMCog8BskKvCFj5WVNnArEfYGI9jz19eMAN1
LAIU6D2ujgCZfwRw4gn9f4OxcwevZ9xZcY4aA1sfIhY+D+DBFlgnwhd3pAxpNwMu
Vo5hgB6J+RJU8NdY9vD1EheY/zIBXFYu0hOdnKrhUv+oLiXIDASHsyMECA1uiD67
TWle/RVIi0Lb8znEixqwbLHcVP48R+sv/syPBFQ8XhJB4+zUDtKjanD64BwerLDH
EDekMcXHqG9jcw==
-----END CERTIFICATE-----
Generated at Sat Jun 20 12:49:24 2026 by rpki-client