Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: xAEpLElbqt2LnnBzT/XG/YET5ZobQ8PDmwKEWwpFlhs=
Subject key identifier: 0A:40:56:F3:97:08:DC:EE:F5:07:99:F1:E6:C1:51:46:48:01:C0:09
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019EBDDA456622B9F2AAFF786DDFCD9A8651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 099E
Signing time: Fri 12 Jun 2026 22:00:58 +0000
Manifest this update: Fri 12 Jun 2026 22:00:58 +0000
Manifest next update: Sat 13 Jun 2026 22:00:58 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: YpFq+Yfe4s1k/HTRlTzxvYocCP5rmX4nhCGptGq2fRQ=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:45:66:22:b9:f2:aa:ff:78:6d:df:cd:9a:86:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jun 12 22:00:58 2026 GMT
Not After : Jun 13 22:00:58 2026 GMT
Subject: CN=0a4056f39708dceef50799f1e6c151464801c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4c:5f:68:9a:a9:ee:a8:61:26:fa:01:55:99:
56:5a:da:5d:73:6f:e7:65:2b:71:02:d6:ec:bc:df:
b1:a4:18:5c:64:81:58:1e:f9:44:29:51:e4:8c:83:
ca:52:41:83:9a:a1:97:ee:ab:a2:65:43:d0:67:3c:
3d:77:c3:f5:be:6e:46:6e:26:52:f3:f2:4d:76:3e:
6e:e6:9d:99:0b:c1:cf:27:3a:f1:b6:57:74:d9:b7:
42:2f:64:02:63:8d:bc:bf:9a:30:9f:e8:fe:b5:45:
91:8b:f4:e0:4d:14:15:88:7b:bc:3b:d0:fe:01:f5:
18:f0:a2:4f:4b:0d:72:32:39:78:e5:df:36:2f:76:
72:ff:8e:0c:ef:5f:8d:d8:14:6c:09:11:3e:6f:f3:
8c:40:99:50:35:1f:71:f0:c7:0e:82:35:42:9c:3f:
ff:c0:c3:09:48:5a:cd:aa:f0:71:42:50:d5:7f:ca:
46:ce:87:a8:21:ae:71:74:2b:e9:8a:b9:07:59:4c:
e6:44:74:5f:33:b4:06:f8:8e:8b:8f:75:36:0e:b7:
cc:02:b6:bc:59:d7:2b:c0:62:e8:bb:ca:ec:b4:85:
ef:70:47:27:13:b1:fb:d8:3c:0e:0b:01:84:51:f7:
b9:24:d4:3f:f6:b5:7e:fc:e4:a9:f2:1e:15:7f:7a:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:56:F3:97:08:DC:EE:F5:07:99:F1:E6:C1:51:46:48:01:C0:09
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:8b:77:89:ea:e6:35:05:54:c2:4b:ac:ec:cd:11:52:fc:
88:2d:c8:05:aa:af:9b:b9:ce:68:63:28:81:ac:64:64:8e:87:
62:95:a9:15:f4:a3:0e:fe:af:7c:c9:2f:1f:39:eb:85:25:10:
bd:fb:8d:a7:9a:e6:76:e2:8c:50:e1:bc:01:01:de:68:8c:d1:
9d:0d:19:f0:b7:85:02:f9:94:f6:e7:78:8f:1e:e5:1e:64:83:
c3:ae:e8:fa:ee:1c:be:4d:e7:46:74:ff:f2:e3:01:62:21:9d:
da:c6:96:11:f9:43:1f:0b:c5:3b:00:b4:8a:62:dd:30:71:10:
2f:8b:10:5e:8f:89:7c:fb:8c:1e:9f:ed:fe:7d:42:33:f0:ec:
4d:83:27:81:f7:a5:14:62:e9:8f:57:12:87:45:cd:e2:4c:4e:
a3:6d:35:8f:bc:65:18:3e:e0:a1:81:3f:45:a5:34:de:69:70:
14:a7:99:d9:44:ed:15:82:70:0d:70:c2:32:25:70:5c:8e:2e:
a2:a8:67:ba:29:b3:0f:7c:7a:2f:a4:c2:86:c5:9f:7d:02:f3:
98:22:6f:bb:c0:cf:a9:77:9c:80:d5:11:bb:a3:95:f5:16:5b:
ab:60:e6:1c:da:e8:cc:33:a7:43:b9:66:78:e0:ec:4b:7b:5b:
a3:e8:81:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692kVmIrnyqv94bd/NmoZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx
M2I5OWEwHhcNMjYwNjEyMjIwMDU4WhcNMjYwNjEzMjIwMDU4WjAzMTEwLwYDVQQD
EygwYTQwNTZmMzk3MDhkY2VlZjUwNzk5ZjFlNmMxNTE0NjQ4MDFjMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ExfaJqp7qhhJvoBVZlWWtpdc2/n
ZStxAtbsvN+xpBhcZIFYHvlEKVHkjIPKUkGDmqGX7quiZUPQZzw9d8P1vm5GbiZS
8/JNdj5u5p2ZC8HPJzrxtld02bdCL2QCY428v5own+j+tUWRi/TgTRQViHu8O9D+
AfUY8KJPSw1yMjl45d82L3Zy/44M71+N2BRsCRE+b/OMQJlQNR9x8McOgjVCnD//
wMMJSFrNqvBxQlDVf8pGzoeoIa5xdCvpirkHWUzmRHRfM7QG+I6Lj3U2DrfMAra8
WdcrwGLou8rstIXvcEcnE7H72DwOCwGEUfe5JNQ/9rV+/OSp8h4Vf3qdgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApAVvOXCNzu9QeZ8ebBUUZIAcAJMB8GA1UdIwQY
MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt
NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj
LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOomLd4nq
5jUFVMJLrOzNEVL8iC3IBaqvm7nOaGMogaxkZI6HYpWpFfSjDv6vfMkvHznrhSUQ
vfuNp5rmduKMUOG8AQHeaIzRnQ0Z8LeFAvmU9ud4jx7lHmSDw67o+u4cvk3nRnT/
8uMBYiGd2saWEflDHwvFOwC0imLdMHEQL4sQXo+JfPuMHp/t/n1CM/DsTYMngfel
FGLpj1cSh0XN4kxOo201j7xlGD7goYE/RaU03mlwFKeZ2UTtFYJwDXDCMiVwXI4u
oqhnuimzD3x6L6TChsWffQLzmCJvu8DPqXecgNURu6OV9RZbq2DmHNrozDOnQ7lm
eODsS3tbo+iBUg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:03 2026 by rpki-client