Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: XP9p3lcnhLQb3940FNS5pZX6UpGLlM8P+HGzPF3qEls=
Subject key identifier: 41:82:BF:7E:59:FD:09:DC:9A:B6:82:B3:70:37:75:E9:B6:CB:50:87
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019FAA195CB3570B96B1307422978839CB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 0653
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: psVItEqANUMW+S3mooII6lV9HPL1mjwSICxrjncu1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5c:b3:57:0b:96:b1:30:74:22:97:88:39:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=4182bf7e59fd09dc9ab682b3703775e9b6cb5087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:20:ab:c4:23:68:fd:6a:a6:35:aa:ea:57:
e2:20:e6:a4:8d:e3:4a:23:73:2c:a4:15:1b:b1:c8:
54:85:66:09:02:b8:66:1f:8a:74:90:28:a9:26:f5:
02:f3:e5:3a:a5:c9:3e:d7:d3:c3:ee:79:73:e4:d2:
2f:b6:ff:a7:3d:9a:ad:25:b6:ba:15:f4:1d:75:1c:
ff:e5:f9:fe:89:dd:93:01:76:f2:f9:4c:3e:8d:ed:
58:71:a7:67:f3:60:51:8f:d5:5e:8b:6a:3d:db:2b:
03:d9:2c:13:ea:1d:33:54:41:7d:82:c3:00:af:5e:
c3:a8:84:d5:f3:d2:cd:b9:d8:a1:dc:8b:79:f5:9b:
f9:0a:d6:35:cc:d1:80:02:09:97:15:32:f3:e1:5a:
87:d5:33:be:2e:fe:3a:88:52:94:19:c4:0a:5c:c3:
b1:8e:90:89:7e:3a:f7:bb:2c:c0:f8:e1:45:38:c9:
78:7c:c9:f5:bd:6f:e7:31:ea:af:82:cf:c3:c8:a6:
22:36:14:09:9f:f3:ce:4c:0d:b7:42:16:a1:a3:3f:
d7:c6:d8:8d:7d:ff:a8:85:56:6d:ba:c8:b7:ff:85:
58:ee:c4:c8:ed:8e:87:0b:ce:c2:99:be:4c:75:44:
f3:1a:20:22:8c:cb:73:14:eb:c5:82:69:4e:b3:73:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:BF:7E:59:FD:09:DC:9A:B6:82:B3:70:37:75:E9:B6:CB:50:87
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:2b:de:72:99:b3:c0:27:19:e6:df:7b:3e:4b:ac:04:88:
dc:7f:ae:93:10:33:2c:46:08:9b:13:a8:ec:a7:32:93:36:ab:
1c:1e:82:2f:59:2b:0a:ad:50:ae:70:66:1a:44:50:f0:8b:4a:
8d:e9:73:5d:c5:fa:a9:d1:06:74:0b:b5:f5:87:19:9b:54:16:
ea:31:e3:0a:e5:5a:2c:d9:ca:94:28:3c:0b:61:4e:fc:06:f3:
e2:c5:2c:8b:a1:53:72:37:a7:8d:e2:ea:f9:c9:50:5e:a9:21:
4e:1a:a8:f0:a3:b4:a3:f0:06:7c:54:f2:4e:63:44:72:1c:b1:
b0:14:75:83:86:49:e0:87:4e:81:b8:7b:06:94:0a:5b:95:a7:
8b:44:7c:96:39:70:70:b9:15:f7:20:db:e8:b9:a9:ba:fa:52:
df:b7:8a:27:f8:bf:bc:3c:dc:4e:5f:06:8b:db:62:50:4e:83:
0c:51:d6:88:b7:50:83:c8:07:ad:1b:f0:fb:b7:66:a0:38:e8:
6c:d8:5f:ad:a8:73:a4:09:a3:56:ef:38:c9:51:fc:21:35:24:
59:48:ee:54:f0:12:0c:a7:eb:85:f7:b4:d5:75:c4:a5:f3:99:
4e:c8:ce:35:40:d7:7b:25:9c:e4:3c:1e:e5:3c:37:81:63:ce:
53:c5:fb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGVyzVwuWsTB0IpeIOctkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5
ZGEzNjQwHhcNMjYwNzI4MTkwMDE2WhcNMjYwNzI5MTkwMDE2WjAzMTEwLwYDVQQD
Eyg0MTgyYmY3ZTU5ZmQwOWRjOWFiNjgyYjM3MDM3NzVlOWI2Y2I1MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdcgq8QjaP1qpjWq6lfiIOakjeNK
I3MspBUbschUhWYJArhmH4p0kCipJvUC8+U6pck+19PD7nlz5NIvtv+nPZqtJba6
FfQddRz/5fn+id2TAXby+Uw+je1Ycadn82BRj9Vei2o92ysD2SwT6h0zVEF9gsMA
r17DqITV89LNudih3It59Zv5CtY1zNGAAgmXFTLz4VqH1TO+Lv46iFKUGcQKXMOx
jpCJfjr3uyzA+OFFOMl4fMn1vW/nMeqvgs/DyKYiNhQJn/POTA23Qhahoz/XxtiN
ff+ohVZtusi3/4VY7sTI7Y6HC87Cmb5MdUTzGiAijMtzFOvFgmlOs3NhLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGCv35Z/QncmraCs3A3dem2y1CHMB8GA1UdIwQY
MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt
OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5
LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnMr3nKZ
s8AnGebfez5LrASI3H+ukxAzLEYImxOo7KcykzarHB6CL1krCq1QrnBmGkRQ8ItK
jelzXcX6qdEGdAu19YcZm1QW6jHjCuVaLNnKlCg8C2FO/Abz4sUsi6FTcjenjeLq
+clQXqkhThqo8KO0o/AGfFTyTmNEchyxsBR1g4ZJ4IdOgbh7BpQKW5Wni0R8ljlw
cLkV9yDb6LmpuvpS37eKJ/i/vDzcTl8Gi9tiUE6DDFHWiLdQg8gHrRvw+7dmoDjo
bNhfrahzpAmjVu84yVH8ITUkWUjuVPASDKfrhfe01XXEpfOZTsjONUDXeyWc5Dwe
5Tw3gWPOU8X78Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:52 2026 by rpki-client