Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: 0XL8tE24DZqjNWJJi0PMa3fxo34VUs7fR89jLZdjjkI=
Subject key identifier: FB:46:5D:F8:80:7F:39:09:C4:64:7A:41:5B:BD:91:7F:45:79:27:C5
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019EC111A976FA4305282B547C6D84C7FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 19E9
Signing time: Sat 13 Jun 2026 13:00:20 +0000
Manifest this update: Sat 13 Jun 2026 13:00:20 +0000
Manifest next update: Sun 14 Jun 2026 13:00:20 +0000
Files and hashes: 1: Eh-HNGGXEe5JmRXtJIy3xc_hKPs.roa (hash: y7bjoJh1t/mDyFCgedNLkijKTCJgq6H0CRwmHmKFmII=)
2: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
3: Hw8g7GpMMX_GFQsnWUYf0SENblg.roa (hash: 0/FhCnnAOuOR3mNc7TMzjQIJWh1C1iyrgudcdDaAykw=)
4: Qmk1sqoAJ6TnpaxS76DgjzFHIuA.roa (hash: cnJK48w/RvUMZ9ainnlPYqW0OyflF6p0zrMHLqEd6vo=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: cXLvsHvbg46dXys6tsFGlStaivg.roa (hash: xZAflEOGoHPXdRw1KqKL76cGPns+HOuukJvybKU+IFM=)
7: n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa (hash: FSpOuQ2nrISxfoUe3fSxdbkQG7z+i/gLxzEWx9TRdDM=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: vvGqNBt2dg9XWaVah5NTpQTosWtEmyAAbJ6Er5dHGxE=)
9: whZDnVbA7DTq6XCQtpnwVv571yY.roa (hash: jaXDYTJdd7AC0EYJLuwjwpmbHTLmmIjlV4gnm9WnvPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:a9:76:fa:43:05:28:2b:54:7c:6d:84:c7:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jun 13 13:00:20 2026 GMT
Not After : Jun 14 13:00:20 2026 GMT
Subject: CN=fb465df8807f3909c4647a415bbd917f457927c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:bf:b1:31:1e:6c:f5:ac:d4:86:d3:ce:e9:
06:c5:8e:a0:7d:0c:44:34:95:e3:37:32:e1:2d:22:
58:92:59:70:3d:7f:e5:66:54:ed:79:44:52:75:26:
84:2d:cf:0a:bf:24:14:45:ae:a6:bb:fa:32:37:16:
70:9a:6d:46:79:e9:58:9f:4d:d0:76:3a:1c:c7:37:
36:14:73:ae:45:d0:10:50:9c:e3:09:89:71:03:95:
2f:17:9b:ef:82:12:fe:73:f8:97:b5:e7:d2:05:e2:
d5:f5:78:06:d2:64:01:9e:24:c1:a5:ff:02:ce:f7:
79:1f:15:15:ca:80:4b:83:ef:12:2d:b1:98:21:c6:
ff:cd:42:0c:d0:b0:80:a3:a4:e3:4e:51:b4:6e:c2:
78:a0:2d:ec:29:07:50:88:1f:1d:b5:67:83:34:aa:
ae:c1:74:81:e8:3d:e9:3d:aa:0a:5b:ae:1a:06:b2:
82:67:e2:ba:5a:c0:b7:39:5c:22:01:20:8e:39:99:
64:7a:c0:2c:6e:d1:2a:f5:4f:42:95:c9:b5:de:b4:
6d:a1:b3:d5:a9:86:83:12:2b:ce:60:4f:71:d2:ed:
88:5f:c2:c2:59:6d:48:f9:97:14:69:eb:c7:a3:5c:
90:06:d9:72:9b:59:fa:ac:6d:23:a8:38:fa:99:c5:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:46:5D:F8:80:7F:39:09:C4:64:7A:41:5B:BD:91:7F:45:79:27:C5
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:48:39:16:54:01:7e:0b:b5:ed:cb:36:87:49:ab:79:70:eb:
c5:d5:c9:e1:c3:d4:12:a9:af:40:31:bd:0c:dc:5a:56:78:ca:
bc:a9:10:0e:12:bd:5a:f9:8a:fb:c0:d8:ea:22:9f:2f:84:14:
71:0e:3e:99:36:dc:e2:7f:c5:c4:6b:12:93:43:36:de:7d:a0:
e9:7a:32:53:3f:95:35:81:9a:a2:77:3a:bb:70:b3:b6:95:c7:
ba:17:ed:5d:c6:24:2d:48:fa:30:95:6c:1d:56:4e:c0:3f:46:
da:ce:f3:12:27:cc:56:37:5e:f3:7e:f1:06:b1:4b:91:59:ac:
f7:07:53:da:b6:be:4e:86:40:41:96:d0:2a:3a:1f:f4:39:f6:
da:80:87:f3:95:ca:53:da:cb:47:e9:62:8b:20:c0:f0:f0:c7:
8b:c5:16:30:cf:cb:fa:02:4e:1f:4e:69:f6:a8:2b:d6:2a:03:
c0:3d:7b:66:d2:13:cf:31:c4:52:ea:74:e3:eb:c5:da:28:cc:
36:96:9a:b3:a4:6d:7f:9a:ea:78:26:0e:d3:93:61:1d:29:cb:
a7:43:b5:fc:c9:4d:c3:b1:90:c1:4e:af:a6:03:8a:de:15:aa:
c8:a4:78:80:db:b1:90:e2:04:c0:5a:67:83:d6:f5:7f:2d:ff:
2e:ee:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:28 2026 by rpki-client