
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: Zi2I2hRezPGdLx4L4WMxOkI6F5lhm46nC5czuno50Ko=
Subject key identifier: 97:0F:1C:C2:9C:F4:C9:7D:68:E5:ED:DF:BB:9D:1C:7B:8E:35:0F:5C
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019EC06DB46B0B17546E2F37199F02DE02BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1562
Signing time: Sat 13 Jun 2026 10:01:15 +0000
Manifest this update: Sat 13 Jun 2026 10:01:15 +0000
Manifest next update: Sun 14 Jun 2026 10:01:15 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: HItioqnXfNBppiDQbsf4Zth6Llv2trleP44X/ymVWmo=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:b4:6b:0b:17:54:6e:2f:37:19:9f:02:de:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Jun 13 10:01:15 2026 GMT
Not After : Jun 14 10:01:15 2026 GMT
Subject: CN=970f1cc29cf4c97d68e5eddfbb9d1c7b8e350f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:81:6f:41:c3:e3:77:14:7c:d6:ae:f8:a1:
55:e1:62:56:b5:9c:a9:92:08:44:61:3b:73:f0:a1:
a3:d0:c5:84:d8:03:a2:e2:59:48:e5:b0:a7:53:6b:
92:cc:cf:a8:6d:97:d5:04:57:8f:64:83:25:37:81:
8c:b1:ae:b6:9e:02:49:92:43:f8:55:7a:50:94:d6:
92:6c:1e:33:90:78:5d:a3:b3:78:a3:80:53:10:ad:
46:54:3d:46:2d:bd:56:a2:61:0a:a1:37:05:61:c0:
04:aa:bd:8f:c1:e1:83:8a:58:23:cb:4c:bb:a9:6d:
d9:ec:e4:8e:44:b6:90:6b:c9:2f:37:22:f7:9b:48:
5f:cf:28:b2:9b:e8:79:71:26:21:07:50:81:45:04:
f2:3c:7e:af:11:e7:ea:4a:67:9e:cf:ca:77:e0:10:
1f:18:c6:74:62:36:a1:18:cc:23:3b:f9:db:3c:78:
ff:10:70:4c:6f:50:f9:c9:da:f4:f2:90:d5:b6:19:
01:51:34:32:ac:75:73:62:d9:a3:69:75:19:43:bf:
ef:3c:d0:2c:ae:b7:ed:13:80:88:06:b1:87:f4:df:
b4:d4:52:26:85:da:94:c3:64:12:cd:b8:b0:6d:24:
ba:ed:75:fe:3f:4d:df:a3:1e:2b:b7:2f:f3:6c:f0:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:1C:C2:9C:F4:C9:7D:68:E5:ED:DF:BB:9D:1C:7B:8E:35:0F:5C
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:73:8f:11:bd:ee:5b:7e:ae:ce:2c:d8:b0:3b:e5:55:40:3c:
2f:fe:6f:a8:dd:79:94:b1:70:4a:f2:21:a9:48:a1:d6:52:d9:
b4:e6:0f:39:ca:95:fe:89:30:01:70:09:e1:cc:f4:b0:ff:3e:
e3:83:9f:de:c9:cc:bf:09:22:eb:ec:fe:7f:e5:94:93:aa:72:
3a:c3:ef:a0:3a:62:cc:23:fa:5a:dc:ad:4e:ea:f1:1f:51:5e:
51:8e:fc:66:e2:d5:42:c2:fb:92:3f:d9:5c:e2:1a:78:ae:ea:
39:af:ac:0e:c5:b5:63:a1:34:e3:64:12:3c:cb:bf:9e:26:1b:
90:f7:a5:a4:36:57:48:a0:33:ef:19:30:19:99:b1:3d:6d:9b:
57:4f:34:4e:e6:22:f5:1c:d8:0a:eb:9c:d2:4a:f8:44:2c:69:
a5:f9:8a:8c:3a:c0:9c:23:5c:62:da:ea:0a:06:41:49:a0:eb:
1d:f0:f9:74:f7:c0:e1:b2:25:50:7b:18:0e:e0:e6:a5:53:b9:
6d:54:c9:1f:10:f0:8d:7f:7d:73:40:fb:50:ed:0d:89:8a:6f:
79:a6:d8:a4:e3:02:10:0a:0d:bc:96:7d:b9:3f:ff:5c:45:af:
59:ec:aa:0e:a3:02:d0:a2:44:86:52:9f:e9:63:3c:e7:2e:b3:
46:7f:7d:c2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7AbbRrCxdUbi83GZ8C3gK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjkyZmRhMDE5Njg3ZDU4ZDcxYmYzMmMwOTA4ZDEyZTQ2
YjRjYTUwHhcNMjYwNjEzMTAwMTE1WhcNMjYwNjE0MTAwMTE1WjAzMTEwLwYDVQQD
Eyg5NzBmMWNjMjljZjRjOTdkNjhlNWVkZGZiYjlkMWM3YjhlMzUwZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8t+Bb0HD43cUfNau+KFV4WJWtZyp
kghEYTtz8KGj0MWE2AOi4llI5bCnU2uSzM+obZfVBFePZIMlN4GMsa62ngJJkkP4
VXpQlNaSbB4zkHhdo7N4o4BTEK1GVD1GLb1WomEKoTcFYcAEqr2PweGDilgjy0y7
qW3Z7OSORLaQa8kvNyL3m0hfzyiym+h5cSYhB1CBRQTyPH6vEefqSmeez8p34BAf
GMZ0YjahGMwjO/nbPHj/EHBMb1D5ydr08pDVthkBUTQyrHVzYtmjaXUZQ7/vPNAs
rrftE4CIBrGH9N+01FImhdqUw2QSzbiwbSS67XX+P03fox4rty/zbPBqOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJcPHMKc9Ml9aOXt37udHHuONQ9cMB8GA1UdIwQY
MBaAFPppL9oBlofVjXG/MsCQjRLka0ylMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ta3YyZ0dXaDlXTmNiOHl3SkNORXVSclRLVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4
LWFkMWMzMGMxMWU1YS8xLzEtbWt2MmdHV2g5V05jYjh5d0pDTkV1UnJUS1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzExLzhiZmVjNC1iZDZmLTQ2NTAtYTRkOC1hZDFjMzBjMTFl
NWEvMS8xLW1rdjJnR1doOVdOY2I4eXdKQ05FdVJyVEtVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHOP
Eb3uW36uzizYsDvlVUA8L/5vqN15lLFwSvIhqUih1lLZtOYPOcqV/okwAXAJ4cz0
sP8+44Of3snMvwki6+z+f+WUk6pyOsPvoDpizCP6WtytTurxH1FeUY78ZuLVQsL7
kj/ZXOIaeK7qOa+sDsW1Y6E042QSPMu/niYbkPelpDZXSKAz7xkwGZmxPW2bV080
TuYi9RzYCuuc0kr4RCxppfmKjDrAnCNcYtrqCgZBSaDrHfD5dPfA4bIlUHsYDuDm
pVO5bVTJHxDwjX99c0D7UO0NiYpveabYpOMCEAoNvJZ9uT//XEWvWeyqDqMC0KJE
hlKf6WM85y6zRn99wg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:37 2026 by rpki-client