Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: WFhx+TFHPK2GKr2Kdk8wwhJZ6KlTV3wORZXFJrR6T9Y=
Subject key identifier: E1:E5:64:A7:27:C0:1C:56:B0:49:AF:D5:FB:59:46:5C:4B:11:77:E0
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019FAC75B432D921C126971A9830F39F28F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1598
Signing time: Wed 29 Jul 2026 06:00:22 +0000
Manifest this update: Wed 29 Jul 2026 06:00:22 +0000
Manifest next update: Thu 30 Jul 2026 06:00:22 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: cnJVjfbLKVppvT3Wee9Ne41ZVL3xD6Tvp6zzlW/0CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:b4:32:d9:21:c1:26:97:1a:98:30:f3:9f:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jul 29 06:00:22 2026 GMT
Not After : Jul 30 06:00:22 2026 GMT
Subject: CN=e1e564a727c01c56b049afd5fb59465c4b1177e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:e7:5b:45:c1:dc:7a:c4:fa:f6:db:53:63:
f1:41:92:23:f7:0f:36:b0:83:b9:97:27:b5:33:b6:
9a:03:af:58:d2:cc:da:74:a9:58:23:0a:ed:32:67:
fd:3b:dd:0d:48:52:0f:e5:97:bf:8e:de:4d:25:b0:
52:88:74:6a:55:26:31:de:88:50:88:09:ce:fa:2e:
1e:80:82:41:4d:c2:a1:2b:7d:c5:51:34:c1:d8:4d:
d7:72:ce:d0:36:cb:18:ab:f6:e1:4e:ac:cc:c0:5d:
33:fe:bf:f3:18:4c:2f:2e:3e:15:39:dd:e6:0b:03:
e7:34:fb:f7:9e:f0:83:d7:f3:2f:58:11:2c:16:a6:
7d:41:25:4b:c9:ab:c8:2a:e5:9d:c0:c3:00:6f:a9:
fe:62:cf:87:29:e1:ae:dc:1f:f3:16:40:6b:62:62:
e9:12:b3:19:38:38:ce:f1:4e:45:93:cd:d5:db:c3:
0b:a9:bb:20:e6:23:66:81:ca:9f:2d:74:dd:bf:9e:
5e:8e:f4:46:9b:90:d3:fc:c8:e5:71:47:ae:cc:93:
01:d9:1f:6f:c2:25:ec:a8:47:80:1b:af:60:56:37:
4f:8c:fd:26:bb:6a:c1:21:59:03:df:eb:0f:ee:fd:
0f:41:db:70:1a:78:92:fe:d0:a2:4d:ff:f9:8c:7b:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:64:A7:27:C0:1C:56:B0:49:AF:D5:FB:59:46:5C:4B:11:77:E0
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:82:3c:91:be:db:c7:0f:ef:61:7c:35:e7:62:18:a4:f0:
46:90:c1:b7:0d:83:a8:a4:72:ab:64:f4:06:a3:31:18:39:21:
bb:bf:8e:66:8f:e6:f6:bd:fd:3a:37:4a:2d:d4:50:93:f9:3b:
08:40:82:b2:2c:d7:e8:ca:cd:c3:0e:bf:a2:85:68:03:45:8b:
d6:91:18:38:6e:ce:73:c7:70:00:e0:6f:41:c1:fc:5c:36:2f:
40:ba:b0:23:42:1d:4e:f0:47:e8:27:89:88:45:2d:da:3f:16:
0b:ff:b5:07:08:76:ac:d5:27:df:01:ba:8f:82:49:db:64:2a:
51:9c:45:8d:27:a0:ca:25:97:85:5a:0a:46:a5:c1:95:0d:b2:
58:a0:dd:ef:8c:d4:65:d4:2f:b0:e1:fc:55:7c:ab:10:46:4e:
59:eb:9e:aa:37:29:1d:7c:36:71:2d:e6:0e:31:c8:58:f9:2e:
88:b8:34:24:d1:74:f4:af:95:e5:5b:36:d3:42:65:ef:84:c3:
bf:1e:bf:84:a5:29:14:1c:f8:17:5b:ee:38:96:3d:e4:51:a1:
97:51:dd:26:38:b6:21:e9:cc:2b:72:3e:b3:f6:e7:66:e9:53:
9c:b9:83:70:ca:fe:cc:84:0f:b2:72:b2:6e:65:f8:ac:4c:cc:
0f:f0:58:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdbQy2SHBJpcamDDznyj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh
YWJkOGQwHhcNMjYwNzI5MDYwMDIyWhcNMjYwNzMwMDYwMDIyWjAzMTEwLwYDVQQD
EyhlMWU1NjRhNzI3YzAxYzU2YjA0OWFmZDVmYjU5NDY1YzRiMTE3N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PXnW0XB3HrE+vbbU2PxQZIj9w82
sIO5lye1M7aaA69Y0szadKlYIwrtMmf9O90NSFIP5Ze/jt5NJbBSiHRqVSYx3ohQ
iAnO+i4egIJBTcKhK33FUTTB2E3Xcs7QNssYq/bhTqzMwF0z/r/zGEwvLj4VOd3m
CwPnNPv3nvCD1/MvWBEsFqZ9QSVLyavIKuWdwMMAb6n+Ys+HKeGu3B/zFkBrYmLp
ErMZODjO8U5Fk83V28MLqbsg5iNmgcqfLXTdv55ejvRGm5DT/MjlcUeuzJMB2R9v
wiXsqEeAG69gVjdPjP0mu2rBIVkD3+sP7v0PQdtwGniS/tCiTf/5jHsA7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHlZKcnwBxWsEmv1ftZRlxLEXfgMB8GA1UdIwQY
MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt
MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx
LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgyCPJG+
28cP72F8NediGKTwRpDBtw2DqKRyq2T0BqMxGDkhu7+OZo/m9r39OjdKLdRQk/k7
CECCsizX6MrNww6/ooVoA0WL1pEYOG7Oc8dwAOBvQcH8XDYvQLqwI0IdTvBH6CeJ
iEUt2j8WC/+1Bwh2rNUn3wG6j4JJ22QqUZxFjSegyiWXhVoKRqXBlQ2yWKDd74zU
ZdQvsOH8VXyrEEZOWeueqjcpHXw2cS3mDjHIWPkuiLg0JNF09K+V5Vs200Jl74TD
vx6/hKUpFBz4F1vuOJY95FGhl1HdJji2IenMK3I+s/bnZulTnLmDcMr+zIQPsnKy
bmX4rEzMD/BY0w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:26 2026 by rpki-client