Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: PnjgCc8UMNG3ZaLemk44TE9XGYO0QSL6dmVy3V8w6DE=
Subject key identifier: 13:2B:60:1F:8F:6A:11:14:1E:72:C9:25:4D:37:44:2B:6D:3C:27:C0
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01A0C2C3DE78D117450E7B72F6BE17D6DE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 16FA
Signing time: Mon 21 Sep 2026 07:00:11 +0000
Manifest this update: Mon 21 Sep 2026 07:00:11 +0000
Manifest next update: Tue 22 Sep 2026 07:00:11 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: bgYhj/nIx1TuotGcoLfI8vWxWjOuLrqDm2uxLurvKXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:de:78:d1:17:45:0e:7b:72:f6:be:17:d6:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Sep 21 07:00:11 2026 GMT
Not After : Sep 22 07:00:11 2026 GMT
Subject: CN=132b601f8f6a11141e72c9254d37442b6d3c27c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:10:8a:51:3f:b7:58:0b:1d:fc:25:be:bf:
9c:6d:77:68:a2:cc:36:42:57:53:71:29:76:36:df:
b1:e7:f4:4a:b3:f6:3b:3e:81:f7:ec:93:ca:d9:dc:
0d:ba:b8:06:0b:c4:77:30:56:3b:ff:73:07:96:17:
2e:6e:f8:c9:3c:88:e4:16:21:d6:63:8e:41:ff:ce:
0b:4d:5f:c8:56:3f:ca:dc:60:13:70:d3:5d:e1:8d:
7e:08:09:51:6a:14:3d:2c:5b:2a:97:0e:1b:46:00:
34:fb:c5:9b:0c:ac:cf:31:ee:18:19:bc:e6:48:ac:
b5:8b:29:ca:f3:b8:81:41:c4:98:64:5f:99:21:10:
f1:c7:8a:76:68:97:78:d8:54:42:85:c0:c7:cc:a5:
d4:ae:eb:e8:f0:09:1c:0b:d1:87:88:04:8a:ad:62:
ae:ea:9a:83:87:45:f8:62:08:7f:96:06:08:e5:08:
96:a9:89:d4:d0:0c:48:2f:58:3a:3d:6f:ae:47:67:
cd:cf:49:71:a7:b3:9f:05:1e:22:33:94:c6:df:d9:
ed:5e:b5:bf:cd:ed:74:09:8f:2f:96:d0:3b:13:df:
ee:cd:11:3b:b2:e1:8f:49:3d:5d:8d:c0:bd:e6:02:
5a:2a:57:8f:a6:83:0b:66:f6:ca:10:cc:d0:bc:f0:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2B:60:1F:8F:6A:11:14:1E:72:C9:25:4D:37:44:2B:6D:3C:27:C0
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:c1:54:46:a6:44:48:99:31:45:d2:ef:f2:69:a8:76:39:
04:ed:06:d7:5d:b3:bc:03:92:cd:24:00:3f:c5:eb:2d:c6:55:
2d:bc:f2:a4:3f:b8:24:07:f1:dd:63:65:3b:cd:28:86:e0:a1:
6c:a1:b8:87:bd:4f:ce:8a:64:a1:13:3f:54:42:6a:51:08:35:
ae:fc:31:5f:22:70:3f:4c:fd:a7:a9:b8:c7:b7:f3:70:66:2b:
49:bc:60:b4:72:4b:d6:68:26:af:fc:ab:9c:88:44:57:23:03:
96:de:1a:eb:04:93:23:84:bd:4a:23:8f:52:c1:82:9a:ea:c7:
4e:df:00:42:dc:14:c9:f9:04:8a:8a:7e:87:9a:57:11:14:38:
5f:87:c7:81:34:a2:66:55:74:19:d7:b0:85:d7:ba:de:4d:12:
8c:0b:e1:b9:8b:b1:0f:f9:8d:9a:73:0e:b7:c3:ca:96:2f:46:
5e:78:dd:54:8b:c1:f2:bf:aa:e8:54:31:fb:3d:0e:d8:8a:02:
a4:aa:9b:94:09:ca:16:c3:ee:df:b1:4a:26:dc:7c:3a:0c:c5:
5e:ef:77:16:b7:da:2c:45:e3:5e:cd:cb:55:52:7b:b9:87:15:
59:26:d2:f8:81:ee:46:3c:29:53:d2:bc:55:c1:be:36:8a:3e:
a6:c3:c4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw9540RdFDnty9r4X1t4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3
NzUxMDkwHhcNMjYwOTIxMDcwMDExWhcNMjYwOTIyMDcwMDExWjAzMTEwLwYDVQQD
EygxMzJiNjAxZjhmNmExMTE0MWU3MmM5MjU0ZDM3NDQyYjZkM2MyN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX8QilE/t1gLHfwlvr+cbXdoosw2
QldTcSl2Nt+x5/RKs/Y7PoH37JPK2dwNurgGC8R3MFY7/3MHlhcubvjJPIjkFiHW
Y45B/84LTV/IVj/K3GATcNNd4Y1+CAlRahQ9LFsqlw4bRgA0+8WbDKzPMe4YGbzm
SKy1iynK87iBQcSYZF+ZIRDxx4p2aJd42FRChcDHzKXUruvo8AkcC9GHiASKrWKu
6pqDh0X4Ygh/lgYI5QiWqYnU0AxIL1g6PW+uR2fNz0lxp7OfBR4iM5TG39ntXrW/
ze10CY8vltA7E9/uzRE7suGPST1djcC95gJaKlePpoMLZvbKEMzQvPBJAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMrYB+PahEUHnLJJU03RCttPCfAMB8GA1UdIwQY
MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt
NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5
LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHDBVEam
REiZMUXS7/JpqHY5BO0G112zvAOSzSQAP8XrLcZVLbzypD+4JAfx3WNlO80ohuCh
bKG4h71PzopkoRM/VEJqUQg1rvwxXyJwP0z9p6m4x7fzcGYrSbxgtHJL1mgmr/yr
nIhEVyMDlt4a6wSTI4S9SiOPUsGCmurHTt8AQtwUyfkEiop+h5pXERQ4X4fHgTSi
ZlV0Gdewhde63k0SjAvhuYuxD/mNmnMOt8PKli9GXnjdVIvB8r+q6FQx+z0O2IoC
pKqblAnKFsPu37FKJtx8OgzFXu93FrfaLEXjXs3LVVJ7uYcVWSbS+IHuRjwpU9K8
VcG+Noo+psPEiw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:05:08 2026 by rpki-client