Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: YlwEBsOoSMp003qV6tq5kEslH0FcGXumooNrX9NDYy8=
Subject key identifier: F1:9B:DD:08:0D:95:46:B8:B9:59:8E:6D:5A:24:9C:36:24:57:64:A5
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 019FA9E311EED0100CC4E88B1D3515C5741B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: F3
Signing time: Tue 28 Jul 2026 18:00:58 +0000
Manifest this update: Tue 28 Jul 2026 18:00:58 +0000
Manifest next update: Wed 29 Jul 2026 18:00:58 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: aDCVvO8EK+W1XyiLDmQSKAZsFmCfi1soLugsDi1lco4=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:11:ee:d0:10:0c:c4:e8:8b:1d:35:15:c5:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Jul 28 18:00:58 2026 GMT
Not After : Jul 29 18:00:58 2026 GMT
Subject: CN=f19bdd080d9546b8b9598e6d5a249c36245764a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:6d:c5:1a:3e:95:d5:6b:ef:fd:66:e9:46:
77:c9:06:43:af:46:ca:38:4c:ed:aa:a7:bf:01:99:
ec:19:69:03:29:af:b0:37:26:c2:32:de:b9:4d:75:
f1:5b:cf:21:e4:c7:02:ba:20:fd:75:c0:d5:ec:70:
20:f3:e4:87:b7:d2:71:4a:18:72:f3:e5:d3:3b:11:
a5:a6:3f:10:4b:3a:63:1c:bb:39:28:63:13:50:3b:
07:88:0b:a2:f1:d8:5c:5a:c9:2f:06:bd:77:56:7b:
b8:8e:ac:d9:e5:63:b9:9e:1c:a4:9f:82:88:37:b8:
85:43:43:98:d8:53:26:e2:18:f3:22:36:06:cb:7e:
2e:c3:b7:57:f7:b8:75:2b:e5:49:d9:ee:ff:56:38:
94:1e:37:8a:37:f4:30:ee:c0:1b:8f:cd:70:45:09:
17:8c:e3:87:dd:cb:5f:d9:5d:de:e0:54:97:52:ab:
51:96:6e:56:06:e1:2e:ae:04:e5:7d:94:eb:8a:31:
7a:44:4b:4c:e4:f6:bf:80:b9:4c:a9:0a:e2:cb:54:
1b:c8:72:1f:24:65:99:59:4d:13:1f:83:bf:ab:b8:
5b:87:17:06:a5:eb:42:62:16:c2:20:24:1e:a0:84:
04:d5:a2:d9:61:1f:d3:28:8e:19:d7:54:23:0e:97:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:DD:08:0D:95:46:B8:B9:59:8E:6D:5A:24:9C:36:24:57:64:A5
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ef:89:20:7f:3c:98:11:8f:a4:40:44:65:e2:ab:64:dc:73:
b6:16:00:2f:35:59:81:c4:f5:34:df:62:ef:b8:8f:25:c5:6d:
3f:ac:7e:5e:7a:cb:a8:6e:f3:8e:ec:83:83:8e:0a:18:92:db:
c6:e7:d1:9e:52:f2:09:af:68:db:22:86:93:c7:eb:d9:98:6b:
d3:0a:20:f9:1d:28:5e:b4:e3:08:41:19:53:0f:cd:53:03:df:
ea:9f:eb:56:7b:c6:32:3e:11:b6:70:4b:9c:5d:de:3c:a8:9c:
45:a4:d2:a2:f4:f2:e2:b6:40:b3:ab:6a:00:00:19:59:03:ad:
71:7e:63:cd:79:cd:05:13:02:75:48:a5:f7:a3:20:e0:2f:c0:
c4:0a:c8:71:a3:4d:04:d4:c4:1a:8b:d4:48:bd:f3:2d:db:be:
e7:ad:01:b9:de:eb:0b:09:5a:19:9b:83:74:d8:6a:d5:e4:46:
86:3a:70:f5:6c:ef:6f:6a:6f:fd:c2:c4:71:21:1b:18:b6:1a:
78:e6:37:47:53:0d:57:5a:36:d0:05:55:af:bf:5f:bc:d8:76:
f3:ad:7c:00:0f:62:ae:11:12:06:58:b1:2e:7a:ed:a0:0a:ed:
53:41:bc:35:ec:76:cb:d6:da:39:b8:90:aa:27:d6:f2:94:d3:
10:d6:0c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4xHu0BAMxOiLHTUVxXQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2I1N2Q3ZTFlNzY3YjUzZWZkZTRlNmNhMzVlNmVhZDYz
ZWEwZjIwHhcNMjYwNzI4MTgwMDU4WhcNMjYwNzI5MTgwMDU4WjAzMTEwLwYDVQQD
EyhmMTliZGQwODBkOTU0NmI4Yjk1OThlNmQ1YTI0OWMzNjI0NTc2NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPttxRo+ldVr7/1m6UZ3yQZDr0bK
OEztqqe/AZnsGWkDKa+wNybCMt65TXXxW88h5McCuiD9dcDV7HAg8+SHt9JxShhy
8+XTOxGlpj8QSzpjHLs5KGMTUDsHiAui8dhcWskvBr13Vnu4jqzZ5WO5nhykn4KI
N7iFQ0OY2FMm4hjzIjYGy34uw7dX97h1K+VJ2e7/VjiUHjeKN/Qw7sAbj81wRQkX
jOOH3ctf2V3e4FSXUqtRlm5WBuEurgTlfZTrijF6REtM5Pa/gLlMqQriy1QbyHIf
JGWZWU0TH4O/q7hbhxcGpetCYhbCICQeoIQE1aLZYR/TKI4Z11QjDpcbKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGb3QgNlUa4uVmObVoknDYkV2SlMB8GA1UdIwQY
MBaAFJHLV9fh52e1Pv3k5so15urWPqDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMt
ZTk2MThjM2I1YTk1LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMtZTk2MThjM2I1YTk1
LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIO+JIH88
mBGPpEBEZeKrZNxzthYALzVZgcT1NN9i77iPJcVtP6x+XnrLqG7zjuyDg44KGJLb
xufRnlLyCa9o2yKGk8fr2Zhr0wog+R0oXrTjCEEZUw/NUwPf6p/rVnvGMj4RtnBL
nF3ePKicRaTSovTy4rZAs6tqAAAZWQOtcX5jzXnNBRMCdUil96Mg4C/AxArIcaNN
BNTEGovUSL3zLdu+560Bud7rCwlaGZuDdNhq1eRGhjpw9Wzvb2pv/cLEcSEbGLYa
eOY3R1MNV1o20AVVr79fvNh28618AA9irhESBlixLnrtoArtU0G8Nex2y9baObiQ
qifW8pTTENYMVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:47 2026 by rpki-client