Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File: KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier: sQTfyWJ7E85918ENab44qTf+GdWvI6ILV527XwtvtWY=
Subject key identifier: 68:98:40:4A:31:32:9C:94:5C:EE:BF:F4:F0:BD:4E:64:E0:F2:CC:60
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 01A0CDB56D6B1EEAF7CE1749838469692863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number: 0819
Signing time: Wed 23 Sep 2026 10:00:14 +0000
Manifest this update: Wed 23 Sep 2026 10:00:14 +0000
Manifest next update: Thu 24 Sep 2026 10:00:14 +0000
Files and hashes: 1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: 5r2hMMFzzEwwaTasZrM20IyIOzwnBVlyGxj6EB0Vfm4=)
5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:6d:6b:1e:ea:f7:ce:17:49:83:84:69:69:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Sep 23 10:00:14 2026 GMT
Not After : Sep 24 10:00:14 2026 GMT
Subject: CN=6898404a31329c945ceebff4f0bd4e64e0f2cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:47:a4:59:17:4a:18:4a:60:1f:05:00:33:
e2:f4:42:a6:c1:8d:3e:b1:33:b3:98:6c:fb:0c:c8:
74:06:ef:bc:ea:2b:be:a3:02:c3:3c:d3:ad:13:74:
d6:80:46:cb:a4:3e:6e:ff:42:6e:fa:23:02:01:75:
8e:a3:c0:15:f2:87:7a:c0:25:1a:95:0f:37:d4:8f:
7c:e6:05:f7:f0:47:0f:66:e2:50:fc:1f:33:f0:0b:
f2:8c:92:1a:c7:71:4b:1e:16:e9:a7:90:fb:b4:58:
1a:43:38:91:7a:f7:74:2e:8d:56:dc:10:f0:94:58:
27:cb:1b:96:13:ae:10:03:92:4a:1b:18:3f:03:2f:
9d:71:e5:3b:97:d0:66:83:fc:65:8d:1c:d0:4a:1e:
58:f7:4d:4b:9d:86:50:bf:9f:3d:9d:c6:c5:bf:2f:
30:6c:79:68:5f:ec:a9:cd:42:27:73:69:48:55:c9:
48:78:e4:fa:58:df:fb:2c:b3:1b:ca:bd:19:32:0a:
d2:15:b5:19:d3:05:5b:3e:91:91:5d:26:08:b8:35:
28:83:e6:61:b5:94:cc:2e:d7:e2:f0:40:51:d6:cf:
15:30:15:2c:25:4a:4c:e2:e5:ac:9b:b6:7e:43:57:
65:d8:fa:0b:9e:24:c1:5d:ec:3c:8c:16:14:88:e5:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:40:4A:31:32:9C:94:5C:EE:BF:F4:F0:BD:4E:64:E0:F2:CC:60
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:aa:72:3d:70:51:5d:a8:31:8a:34:05:c9:fb:bd:b7:e1:
1c:5e:a6:6b:98:e9:7b:ce:89:c0:76:5d:2d:b2:8f:3f:a4:18:
2f:cf:d9:c9:6d:70:d2:aa:11:10:1b:f0:d2:14:94:bd:98:cd:
13:77:d9:f1:d8:5e:9e:0c:48:99:e1:92:86:c9:d9:a3:88:15:
86:03:f9:8b:1e:91:72:43:49:35:fa:2c:86:5b:02:95:d8:2e:
d7:10:8e:35:5a:24:da:3c:9f:92:77:93:c6:df:82:98:13:6d:
eb:a9:53:6e:75:86:7b:38:2b:0b:ab:7f:bf:45:65:3f:2e:6b:
87:e3:9e:85:06:6e:44:3a:d1:48:d2:4c:0e:8d:eb:01:fc:d9:
4f:3e:6f:e6:b4:38:82:ae:e0:99:de:f0:75:fb:f0:d2:64:27:
ca:8f:f7:16:f2:54:18:9f:e0:5f:28:c1:c9:fa:10:0a:db:8e:
89:b6:11:b1:cd:0c:28:f4:2e:e7:c1:53:64:83:47:f7:bb:61:
5b:f4:e6:21:86:41:a0:f0:e6:c8:44:7c:cd:63:de:d2:16:61:
08:a2:1e:f2:b2:b8:9e:23:5f:1d:d5:f7:7d:89:38:8e:d7:3f:
31:30:db:a9:16:7f:d9:af:e0:06:52:b6:ec:cf:44:11:0a:c8:
00:e0:42:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtW1rHur3zhdJg4RpaShjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh
NTI2ZDgwHhcNMjYwOTIzMTAwMDE0WhcNMjYwOTI0MTAwMDE0WjAzMTEwLwYDVQQD
Eyg2ODk4NDA0YTMxMzI5Yzk0NWNlZWJmZjRmMGJkNGU2NGUwZjJjYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvJHpFkXShhKYB8FADPi9EKmwY0+
sTOzmGz7DMh0Bu+86iu+owLDPNOtE3TWgEbLpD5u/0Ju+iMCAXWOo8AV8od6wCUa
lQ831I985gX38EcPZuJQ/B8z8AvyjJIax3FLHhbpp5D7tFgaQziRevd0Lo1W3BDw
lFgnyxuWE64QA5JKGxg/Ay+dceU7l9Bmg/xljRzQSh5Y901LnYZQv589ncbFvy8w
bHloX+ypzUInc2lIVclIeOT6WN/7LLMbyr0ZMgrSFbUZ0wVbPpGRXSYIuDUog+Zh
tZTMLtfi8EBR1s8VMBUsJUpM4uWsm7Z+Q1dl2PoLniTBXew8jBYUiOVCUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiYQEoxMpyUXO6/9PC9TmTg8sxgMB8GA1UdIwQY
MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt
MWU4MjlmZmExYzNhLzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh
LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFd+qcj1w
UV2oMYo0Bcn7vbfhHF6ma5jpe86JwHZdLbKPP6QYL8/ZyW1w0qoREBvw0hSUvZjN
E3fZ8dhengxImeGShsnZo4gVhgP5ix6RckNJNfoshlsCldgu1xCONVok2jyfkneT
xt+CmBNt66lTbnWGezgrC6t/v0VlPy5rh+OehQZuRDrRSNJMDo3rAfzZTz5v5rQ4
gq7gmd7wdfvw0mQnyo/3FvJUGJ/gXyjByfoQCtuOibYRsc0MKPQu58FTZINH97th
W/TmIYZBoPDmyER8zWPe0hZhCKIe8rK4niNfHdX3fYk4jtc/MTDbqRZ/2a/gBlK2
7M9EEQrIAOBCRg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:32:21 2026 by rpki-client