Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: rkm8RqyTntW0/bab5F2mTYbmf6WWMeU7S7AjFybxEgs=
Subject key identifier: 28:BB:85:AA:84:5A:DC:10:D7:A3:05:E6:5C:E2:6C:CE:03:80:A7:9E
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019ED574DC36E332675642856CF90973641E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 196B
Signing time: Wed 17 Jun 2026 12:01:05 +0000
Manifest this update: Wed 17 Jun 2026 12:01:05 +0000
Manifest next update: Thu 18 Jun 2026 12:01:05 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: 1TKkbbqWGeSCTowVsQYWdsimEZ85egSNzmBG4KXXl/Y=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:dc:36:e3:32:67:56:42:85:6c:f9:09:73:64:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jun 17 12:01:05 2026 GMT
Not After : Jun 18 12:01:05 2026 GMT
Subject: CN=28bb85aa845adc10d7a305e65ce26cce0380a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:b7:0f:29:94:8f:75:c6:dc:e7:e0:88:e4:
12:45:22:25:b8:6a:5c:e3:7d:06:21:14:83:bf:83:
d5:bf:bd:90:6f:1b:0d:a3:25:26:09:b7:3d:95:75:
2e:6b:35:f4:3e:b6:b3:eb:bf:c4:f1:65:96:04:e6:
9c:ce:5c:01:1b:5b:b4:82:87:1d:1d:bb:7c:1c:64:
da:ae:d5:c1:81:92:69:c8:3f:75:1f:9d:71:4a:8a:
36:f5:20:45:fd:f6:b9:ef:7c:8e:53:b1:1d:30:79:
b0:fc:85:2b:b8:6b:92:26:2e:84:25:a0:30:3e:99:
f9:76:2e:a0:ba:8b:12:12:c2:04:59:59:8b:33:3d:
13:75:3f:78:f4:ea:b9:6f:0b:c2:56:0b:4a:38:83:
c9:bc:8f:22:f0:c2:82:ec:8b:7e:d4:af:92:f6:ba:
5d:21:f2:5d:9b:2b:6f:69:d2:d3:2f:89:0e:99:f5:
d2:28:23:54:54:c0:45:91:23:ed:5a:4b:b4:a2:4a:
89:27:21:d8:17:5c:32:c6:85:73:5c:3c:5d:e4:d1:
65:63:14:3a:01:b7:8b:43:9d:ed:aa:f2:c9:6f:36:
01:a6:53:c2:c6:2e:6a:ed:d5:f6:d0:97:d0:5c:d6:
71:e4:61:f6:69:88:cb:c1:b0:0d:90:0d:13:06:af:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:85:AA:84:5A:DC:10:D7:A3:05:E6:5C:E2:6C:CE:03:80:A7:9E
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:a2:0c:5a:90:43:be:c6:d9:be:ce:cf:a4:de:41:99:b2:
51:19:84:cc:c9:9c:b2:4a:74:95:43:6f:e1:36:38:f9:3d:28:
37:ab:85:f4:4e:2b:7c:13:9e:9c:37:c8:f3:ae:f1:07:9b:b7:
db:41:3a:62:ed:ad:84:18:4d:a3:53:87:fa:da:11:d8:80:e5:
c7:71:ad:93:e1:f4:85:8c:6b:76:60:cd:4a:a0:e2:5e:6b:8f:
b9:aa:26:ea:0f:af:74:7a:b0:80:8c:cb:ab:15:b1:b4:86:01:
34:2b:74:8e:02:bc:78:7d:d1:cc:07:cc:ab:68:d6:16:4e:55:
90:8f:3d:c1:b4:59:7e:7b:da:28:29:94:79:df:79:8c:2a:09:
1f:65:ed:01:d8:6f:eb:99:8d:ad:d9:8f:da:af:67:7f:58:d7:
7f:13:94:2c:18:4f:00:83:44:08:52:e3:58:17:82:24:5d:c5:
a4:10:27:1d:35:2f:b3:e0:2d:43:d9:01:59:ac:57:64:6d:69:
5e:59:f7:1b:e3:0b:46:8a:9b:86:df:8e:35:5e:98:e4:d7:d1:
39:90:fe:dd:3f:f3:4d:b7:56:72:dd:40:d2:89:2a:b1:bd:8b:
e9:8f:33:da:d9:59:a8:c5:1b:e8:ad:45:3b:d6:84:db:77:fa:
9a:01:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:37:01 2026 by rpki-client