Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: 4T3wQ7+hwWmlT5H4kKQZ7YPRiOPRUh6IxqWHrKuYuNI=
Subject key identifier: DC:93:E1:21:67:E4:8B:F0:E4:F9:2C:FD:04:85:C2:36:F1:46:57:69
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019F1943F24C0EAEBF5CB7D4661DD4FD6E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 16:01:51 +0000
Manifest this update: Tue 30 Jun 2026 16:01:51 +0000
Manifest next update: Wed 01 Jul 2026 16:01:51 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: vYZxEgsXmbLDY0I7eUjqgPl5c0mxdH0a3IL+EDjNbKg=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f2:4c:0e:ae:bf:5c:b7:d4:66:1d:d4:fd:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jun 30 16:01:51 2026 GMT
Not After : Jul 1 16:01:51 2026 GMT
Subject: CN=dc93e12167e48bf0e4f92cfd0485c236f1465769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:a2:d5:34:3c:f0:71:6b:de:5e:ac:65:c4:
35:ff:68:84:be:4c:90:3d:c0:15:67:c9:32:91:a5:
94:2e:20:e7:2a:f4:08:a5:d6:f6:e2:5a:a6:cd:5e:
64:df:b6:27:36:73:67:58:49:26:45:24:63:dd:b1:
5d:86:98:42:49:8b:49:35:62:16:b9:88:1d:d4:98:
4b:ee:66:7d:b4:96:35:9a:78:b5:61:7f:6f:d2:69:
35:56:83:26:de:18:2d:1b:6f:57:fc:35:69:38:f3:
90:75:95:11:49:aa:a4:21:59:d2:2a:18:52:e3:ce:
67:55:eb:e8:b0:95:5a:d7:53:cb:df:42:a0:18:b4:
75:01:ee:ae:77:6a:ed:2e:d8:ea:e2:fe:f3:e2:e6:
80:72:82:26:d6:1b:95:00:f0:ab:a9:e7:e1:88:bb:
14:6f:84:59:f7:98:26:0c:18:e7:49:21:84:1a:69:
15:b0:65:7d:f4:15:35:77:af:f5:3c:4f:e7:8a:8d:
dc:9b:6c:1f:c3:1f:8e:6e:13:25:8a:59:50:cd:3e:
e3:83:f7:cd:df:3c:2c:b3:5f:d7:fb:fa:e4:d9:1f:
c1:86:32:77:cc:ec:ed:9a:07:40:af:5e:5d:75:dd:
95:86:b3:90:10:39:ec:f4:c8:e3:84:6f:df:35:20:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:E1:21:67:E4:8B:F0:E4:F9:2C:FD:04:85:C2:36:F1:46:57:69
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:b3:e2:b1:c5:75:67:55:4b:d8:2f:9e:05:3b:d1:ac:68:
2a:3e:c7:03:8c:16:16:aa:13:73:0a:b7:4d:8f:f4:51:e0:9b:
59:43:69:bd:7f:bf:0e:ae:e7:90:bf:b3:de:ed:0d:13:28:ad:
ac:b1:37:d1:b5:ca:d4:19:4a:e9:5a:2c:69:82:2b:f1:27:40:
13:27:86:ad:ab:18:81:99:bc:d8:2c:5b:f1:ab:bb:2f:da:35:
6b:bd:5d:52:9f:55:b6:39:02:4f:4b:0e:6b:d3:ae:78:07:ac:
f0:6c:c1:c7:4f:45:d3:e4:30:15:af:93:56:18:fd:42:1a:63:
c0:65:17:12:d4:0c:33:a1:cf:3f:1d:98:10:94:83:4b:ba:e5:
b2:e8:e2:fd:1a:6a:c6:3f:4c:87:7a:f4:35:5c:05:a1:d3:48:
a6:83:7b:38:dc:aa:4f:a2:16:14:b3:54:36:10:04:47:ee:ad:
61:0a:b2:9d:46:13:c6:70:11:4d:4d:a7:45:bb:fb:53:0e:d7:
bf:72:95:97:b8:98:3b:29:c4:3e:82:67:fe:b8:07:c7:c6:45:
ef:9c:fd:4e:e8:e5:30:99:60:89:bb:09:36:7c:23:9e:a5:b2:
98:f8:3f:b3:f1:6a:a7:49:24:10:42:0a:3c:de:f8:ef:db:e9:
3e:00:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:35 2026 by rpki-client