Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: h4T0jwc5HlGJ7yXhySxT/CkHI1O/m5UtsY7z9I1LnlE=
Subject key identifier: ED:B8:F6:EA:73:D9:92:B0:5E:73:57:9B:BD:79:B6:CE:AD:5D:D0:6F
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 019FAABEDCD5F571E310F41FF8D081C58552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 19E0
Signing time: Tue 28 Jul 2026 22:01:02 +0000
Manifest this update: Tue 28 Jul 2026 22:01:02 +0000
Manifest next update: Wed 29 Jul 2026 22:01:02 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: wFaRwy+j75Pea4EQBbc0f2KpO8OXGQUb4mxxlRcO1Jk=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:dc:d5:f5:71:e3:10:f4:1f:f8:d0:81:c5:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jul 28 22:01:02 2026 GMT
Not After : Jul 29 22:01:02 2026 GMT
Subject: CN=edb8f6ea73d992b05e73579bbd79b6cead5dd06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:9e:b9:b8:1d:97:c0:96:ad:b8:1b:ea:ff:
bb:62:3c:9f:40:d4:9f:04:8f:4e:9e:45:8d:06:98:
d4:13:ba:0d:1e:a8:29:1a:03:3c:b3:d0:93:99:d2:
49:1d:d5:7d:f0:96:42:61:40:ad:e7:0d:6b:d8:b7:
ae:9c:08:c9:e3:b0:f5:5c:14:4c:54:07:91:ae:0f:
b0:d2:4f:0a:b5:30:60:0b:12:a8:23:f2:ee:70:2e:
3c:f1:7b:4e:a5:bb:09:20:3d:14:a8:52:d6:2e:bb:
bd:04:40:09:f0:cd:cc:05:59:f1:b6:e6:e3:df:76:
62:5b:3a:64:fd:6b:f1:f3:fd:c8:b9:35:9c:78:30:
b7:97:bd:7c:27:8d:f2:c9:b1:0d:60:99:ac:b8:47:
f3:a4:79:b7:a7:9d:f2:90:fe:93:e5:f9:57:41:d3:
27:ed:b9:45:d1:fb:c5:58:90:99:ce:e6:ca:1a:d2:
0c:e7:54:f1:8d:58:ed:15:9a:c2:54:b5:81:e4:b9:
8d:86:02:f2:24:ce:ae:30:b6:40:ce:ab:e1:42:36:
3e:7d:9a:74:83:7b:42:cd:61:e4:fc:ab:8c:61:e2:
95:bc:43:ab:de:d5:d5:c8:0e:7c:b5:e0:2b:36:1a:
d9:7f:ce:9c:37:82:7a:dd:57:3f:a0:5e:d0:b9:ca:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:F6:EA:73:D9:92:B0:5E:73:57:9B:BD:79:B6:CE:AD:5D:D0:6F
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f9:f3:b7:01:c2:73:a9:40:3e:49:a7:a5:cc:3f:dc:7c:cc:
18:f5:26:62:a2:f3:20:33:89:49:2f:ca:1b:0f:48:84:74:af:
66:de:90:ef:cc:7a:03:46:6d:2b:60:e4:6a:a7:dc:d1:49:8d:
70:f7:6c:76:c0:97:dc:3d:67:31:2d:bb:e4:ae:08:b7:e5:41:
c4:32:de:f9:10:69:e9:d9:56:33:fc:68:d2:1d:21:f3:31:26:
44:6a:56:61:1c:5b:d6:78:e9:5a:45:bf:b0:f9:22:23:86:68:
35:ea:df:1f:4a:31:a9:11:bf:18:cc:40:6e:7c:85:2c:72:34:
78:f9:35:15:e7:0b:7e:f6:91:1a:3a:29:a5:79:da:2d:ef:74:
35:4f:e2:04:53:2c:08:e9:b4:38:57:74:69:d6:f3:28:bb:34:
70:ff:89:cb:b3:81:9b:b8:0b:7b:1b:fe:36:0c:a3:7f:74:af:
e8:3f:00:6e:a0:5c:da:8a:d3:94:b3:c8:3b:bf:ef:a0:d4:a8:
d1:c8:63:a5:28:ad:8e:0f:10:03:95:f4:28:72:bc:44:00:39:
c6:70:31:b9:4c:4b:07:d8:7c:8d:a7:62:49:2b:74:f6:14:66:
58:91:68:4e:8a:47:61:ad:e4:7d:26:fa:13:9d:f8:72:2d:7e:
ee:43:15:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvtzV9XHjEPQf+NCBxYVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzFjODViZjVjNTM0NzFhOTk3ZWY5ZmE5OTlkMGMxNmJl
ODU0NDQwHhcNMjYwNzI4MjIwMTAyWhcNMjYwNzI5MjIwMTAyWjAzMTEwLwYDVQQD
EyhlZGI4ZjZlYTczZDk5MmIwNWU3MzU3OWJiZDc5YjZjZWFkNWRkMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgKeubgdl8CWrbgb6v+7YjyfQNSf
BI9OnkWNBpjUE7oNHqgpGgM8s9CTmdJJHdV98JZCYUCt5w1r2LeunAjJ47D1XBRM
VAeRrg+w0k8KtTBgCxKoI/LucC488XtOpbsJID0UqFLWLru9BEAJ8M3MBVnxtubj
33ZiWzpk/Wvx8/3IuTWceDC3l718J43yybENYJmsuEfzpHm3p53ykP6T5flXQdMn
7blF0fvFWJCZzubKGtIM51TxjVjtFZrCVLWB5LmNhgLyJM6uMLZAzqvhQjY+fZp0
g3tCzWHk/KuMYeKVvEOr3tXVyA58teArNhrZf86cN4J63Vc/oF7Qucr2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO249upz2ZKwXnNXm715ts6tXdBvMB8GA1UdIwQY
MBaAFJHByFv1xTRxqZfvn6mZ0MFr6FREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2Et
NDUxNDM3NGU2ZmZhLzEva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2EtNDUxNDM3NGU2ZmZh
LzEva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPnztwHC
c6lAPkmnpcw/3HzMGPUmYqLzIDOJSS/KGw9IhHSvZt6Q78x6A0ZtK2Dkaqfc0UmN
cPdsdsCX3D1nMS275K4It+VBxDLe+RBp6dlWM/xo0h0h8zEmRGpWYRxb1njpWkW/
sPkiI4ZoNerfH0oxqRG/GMxAbnyFLHI0ePk1FecLfvaRGjoppXnaLe90NU/iBFMs
COm0OFd0adbzKLs0cP+Jy7OBm7gLexv+Ngyjf3Sv6D8AbqBc2orTlLPIO7/voNSo
0chjpSitjg8QA5X0KHK8RAA5xnAxuUxLB9h8jadiSSt09hRmWJFoTopHYa3kfSb6
E534ci1+7kMV1A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:14 2026 by rpki-client