Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: aOHMyfMxsUlsoaCGELS+Fe7WZVchbos55pAHboDk9dQ=
Subject key identifier: 27:7C:AB:42:9B:26:2C:86:19:8B:45:81:47:12:AA:F7:BC:42:FE:4E
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019EBF91A1B8E6327CBE5640A90650DAF2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 0182
Signing time: Sat 13 Jun 2026 06:00:52 +0000
Manifest this update: Sat 13 Jun 2026 06:00:52 +0000
Manifest next update: Sun 14 Jun 2026 06:00:52 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: Tf7imk79g8Mh9Fxv6Yxr5I48Ew8gLueFJotInxespxg=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a1:b8:e6:32:7c:be:56:40:a9:06:50:da:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Jun 13 06:00:52 2026 GMT
Not After : Jun 14 06:00:52 2026 GMT
Subject: CN=277cab429b262c86198b45814712aaf7bc42fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:6b:76:fa:e7:c9:2b:58:72:cf:8d:3f:92:
75:68:d5:83:b1:b6:09:b8:4b:7b:e5:13:82:e4:a9:
a1:db:89:85:cc:0c:33:06:75:68:dc:54:04:55:49:
c4:29:79:0d:db:6f:57:73:1c:9c:bb:ae:3a:c7:d6:
11:3f:bd:d3:54:59:eb:3d:e4:4a:11:44:da:bb:ae:
15:00:e3:50:fa:95:eb:d7:90:fb:46:af:ab:82:11:
8b:26:c6:23:b1:93:b1:04:14:10:26:cd:9c:a0:96:
28:de:ee:a6:f8:93:9f:b0:36:b9:a2:b1:45:97:06:
d7:63:74:83:19:f6:0b:85:ce:13:0f:19:29:0d:db:
52:22:7c:80:57:08:86:5d:99:83:37:48:0d:57:b7:
d8:50:29:9a:ee:d6:26:cf:82:db:58:20:0a:1f:28:
fb:e5:fa:f8:2b:71:c8:95:c4:51:f0:3d:5f:43:89:
6b:1d:68:6d:b8:53:04:42:23:85:ac:f4:b1:37:8f:
00:79:95:b2:3f:d6:e5:64:3e:b5:e1:4e:80:78:9e:
d5:43:93:3a:78:e4:c2:16:9a:74:fa:cb:3d:7d:6f:
1d:23:ce:5f:3d:dc:e1:0e:46:fa:b8:48:54:f5:9d:
1a:83:e3:82:2f:b1:db:80:40:7b:b1:e5:ef:bb:a8:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:AB:42:9B:26:2C:86:19:8B:45:81:47:12:AA:F7:BC:42:FE:4E
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:13:4e:6e:e7:93:dd:da:02:8a:24:24:2d:fe:47:8e:82:
53:6a:de:72:c2:89:16:b6:c9:9d:d4:d4:5e:b4:8d:5c:a2:e2:
71:12:ab:1e:45:17:6f:50:c1:c7:a9:bc:db:85:1b:de:5d:65:
06:6e:b2:5e:9c:18:18:7c:b7:89:ab:19:5f:4d:97:3c:d9:99:
e2:3b:44:e7:8e:5f:f8:55:5e:e7:52:d5:80:d1:c2:fb:0a:aa:
ef:ca:75:0f:19:4b:a5:ae:29:bb:82:a7:fd:67:88:ba:70:32:
39:cc:01:5b:4e:bf:12:85:92:7b:f6:0e:ff:c0:e0:6f:ad:38:
3d:5a:ec:7b:13:a5:1c:fe:97:09:1d:6c:d8:5f:09:56:6a:fc:
f1:8b:2f:1e:b4:87:19:68:5e:2f:b3:f5:30:5d:1a:f1:27:16:
e5:55:59:af:c2:fb:62:40:5e:e0:64:7b:60:97:74:0c:cc:7b:
43:de:1d:a2:1a:0a:b2:f9:76:e9:03:2d:94:bf:61:d2:f5:0d:
9b:89:28:ad:98:67:4b:4c:3c:75:5d:2a:da:4f:08:61:a3:a7:
2c:5a:15:91:39:65:c5:1a:15:b2:20:4f:72:1f:55:d4:3c:1d:
ff:33:af:d6:c6:33:1c:f9:77:71:25:6e:b2:c4:39:6d:04:02:
31:78:08:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kaG45jJ8vlZAqQZQ2vLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTg4ZTQ2NjAwOTUyMDU2MjA2MWJlZjY1YjdmNDgyOTgy
ODk4NjUwHhcNMjYwNjEzMDYwMDUyWhcNMjYwNjE0MDYwMDUyWjAzMTEwLwYDVQQD
EygyNzdjYWI0MjliMjYyYzg2MTk4YjQ1ODE0NzEyYWFmN2JjNDJmZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkprdvrnyStYcs+NP5J1aNWDsbYJ
uEt75ROC5Kmh24mFzAwzBnVo3FQEVUnEKXkN229Xcxycu646x9YRP73TVFnrPeRK
EUTau64VAONQ+pXr15D7Rq+rghGLJsYjsZOxBBQQJs2coJYo3u6m+JOfsDa5orFF
lwbXY3SDGfYLhc4TDxkpDdtSInyAVwiGXZmDN0gNV7fYUCma7tYmz4LbWCAKHyj7
5fr4K3HIlcRR8D1fQ4lrHWhtuFMEQiOFrPSxN48AeZWyP9blZD614U6AeJ7VQ5M6
eOTCFpp0+ss9fW8dI85fPdzhDkb6uEhU9Z0ag+OCL7HbgEB7seXvu6ipVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd8q0KbJiyGGYtFgUcSqve8Qv5OMB8GA1UdIwQY
MBaAFCtYjkZgCVIFYgYb72W39IKYKJhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2Zjgt
Y2NhZmI4MjQ3M2E1LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2ZjgtY2NhZmI4MjQ3M2E1
LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTQTTm7n
k93aAookJC3+R46CU2recsKJFrbJndTUXrSNXKLicRKrHkUXb1DBx6m824Ub3l1l
Bm6yXpwYGHy3iasZX02XPNmZ4jtE545f+FVe51LVgNHC+wqq78p1DxlLpa4pu4Kn
/WeIunAyOcwBW06/EoWSe/YO/8Dgb604PVrsexOlHP6XCR1s2F8JVmr88YsvHrSH
GWheL7P1MF0a8ScW5VVZr8L7YkBe4GR7YJd0DMx7Q94dohoKsvl26QMtlL9h0vUN
m4korZhnS0w8dV0q2k8IYaOnLFoVkTllxRoVsiBPch9V1Dwd/zOv1sYzHPl3cSVu
ssQ5bQQCMXgIlg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:40 2026 by rpki-client