Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: dWI1HmxgTC6AktYpkFU+huMjL6xYOrf3ImWmuvytDWU=
Subject key identifier: 23:00:4D:83:CE:5A:DF:1B:FF:AF:4B:98:59:89:24:0B:92:16:A3:D7
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019F19E878D670F8458A4C30B91A04707536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 1278
Signing time: Tue 30 Jun 2026 19:01:33 +0000
Manifest this update: Tue 30 Jun 2026 19:01:33 +0000
Manifest next update: Wed 01 Jul 2026 19:01:33 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: dtfr8aGfVfkv1P5ARksiCNYiBURA2QEZpqfGXFmD8Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:78:d6:70:f8:45:8a:4c:30:b9:1a:04:70:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jun 30 19:01:33 2026 GMT
Not After : Jul 1 19:01:33 2026 GMT
Subject: CN=23004d83ce5adf1bffaf4b985989240b9216a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:d0:8f:6a:18:64:f0:db:fd:00:97:df:e4:
21:d1:21:ff:fa:4b:6f:cc:19:c7:1e:a8:be:94:cc:
21:e6:68:e6:86:07:c9:e3:8f:d6:ac:38:47:e5:eb:
3f:5b:f2:69:b0:2d:5b:dd:40:0e:f8:1e:1d:4e:e5:
f1:43:2c:41:8c:2c:04:a6:df:d1:3f:d2:23:a1:36:
c8:f6:c1:2d:be:a3:29:b0:a2:f7:f2:df:48:64:09:
cb:30:87:3d:3b:a4:a2:8c:b6:ee:1d:d9:28:64:39:
3b:92:a2:26:b7:f6:c6:fb:a3:23:05:89:c2:18:64:
9a:02:bd:c6:12:0c:c5:1c:0c:c9:65:8b:cd:54:44:
3c:34:3b:42:04:19:28:8c:c6:f0:ce:7e:2c:bf:97:
df:c2:79:90:47:36:18:17:03:5c:3d:b0:59:d4:f7:
67:62:6c:89:61:91:d1:1e:8d:dc:44:1c:27:28:44:
8e:9c:35:88:65:17:66:0a:cc:10:92:05:84:b1:d1:
0b:81:ed:37:97:8e:57:2c:81:d6:39:52:6c:ab:0a:
50:41:12:64:98:59:4b:e2:8e:fc:72:56:de:85:31:
3d:bb:86:25:02:95:f6:f3:03:5a:fa:69:87:a3:37:
5f:cf:29:1b:48:a3:58:c1:f4:7b:a2:37:c3:02:b3:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:4D:83:CE:5A:DF:1B:FF:AF:4B:98:59:89:24:0B:92:16:A3:D7
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b7:b1:50:6d:f2:b8:c5:eb:af:e2:af:8c:a8:c7:6f:55:c4:
74:3f:45:a5:fa:85:22:6b:d4:37:56:2f:e9:a8:78:c5:03:f7:
5b:33:46:15:17:46:c3:47:bc:13:af:37:fb:26:3e:32:ad:61:
db:0f:1d:6f:54:d2:68:88:fc:1b:28:28:91:f6:e9:df:35:59:
05:35:0a:fe:7e:f5:11:27:7e:be:1d:61:56:39:f3:84:12:3f:
84:a1:2c:15:96:9f:5e:72:0c:22:b0:8d:fb:83:a1:1a:a0:69:
9f:90:dd:5d:ee:4e:65:d4:c9:af:d7:9d:6b:dd:c7:53:44:1b:
8c:d1:68:82:81:5b:6a:be:7f:b9:65:46:03:c0:a5:2f:00:92:
17:a7:71:71:76:9d:7d:48:4e:47:a0:f9:02:31:a6:5c:41:25:
9e:71:61:92:27:4b:2e:ec:e4:53:be:00:d4:41:cc:6f:85:d7:
52:ab:20:0a:ff:47:07:60:34:2a:d5:44:ab:7e:65:21:bc:46:
4b:df:69:70:16:f1:5e:78:56:46:7d:bd:72:ad:14:1b:47:1e:
fe:f8:22:ee:b5:00:b0:34:95:3e:0d:96:6b:f4:ac:06:67:60:
f5:46:e6:7a:2b:c9:21:fb:87:23:6f:a8:2c:85:78:b0:1f:4a:
25:60:45:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Z6HjWcPhFikwwuRoEcHU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjYwNjMwMTkwMTMzWhcNMjYwNzAxMTkwMTMzWjAzMTEwLwYDVQQD
EygyMzAwNGQ4M2NlNWFkZjFiZmZhZjRiOTg1OTg5MjQwYjkyMTZhM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNPQj2oYZPDb/QCX3+Qh0SH/+ktv
zBnHHqi+lMwh5mjmhgfJ44/WrDhH5es/W/JpsC1b3UAO+B4dTuXxQyxBjCwEpt/R
P9IjoTbI9sEtvqMpsKL38t9IZAnLMIc9O6SijLbuHdkoZDk7kqImt/bG+6MjBYnC
GGSaAr3GEgzFHAzJZYvNVEQ8NDtCBBkojMbwzn4sv5ffwnmQRzYYFwNcPbBZ1Pdn
YmyJYZHRHo3cRBwnKESOnDWIZRdmCswQkgWEsdELge03l45XLIHWOVJsqwpQQRJk
mFlL4o78clbehTE9u4YlApX28wNa+mmHozdfzykbSKNYwfR7ojfDArM9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMATYPOWt8b/69LmFmJJAuSFqPXMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLexUG3y
uMXrr+KvjKjHb1XEdD9FpfqFImvUN1Yv6ah4xQP3WzNGFRdGw0e8E683+yY+Mq1h
2w8db1TSaIj8Gygokfbp3zVZBTUK/n71ESd+vh1hVjnzhBI/hKEsFZafXnIMIrCN
+4OhGqBpn5DdXe5OZdTJr9eda93HU0QbjNFogoFbar5/uWVGA8ClLwCSF6dxcXad
fUhOR6D5AjGmXEElnnFhkidLLuzkU74A1EHMb4XXUqsgCv9HB2A0KtVEq35lIbxG
S99pcBbxXnhWRn29cq0UG0ce/vgi7rUAsDSVPg2Wa/SsBmdg9UbmeivJIfuHI2+o
LIV4sB9KJWBFmQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:34 2026 by rpki-client