
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: blbCOqxNKzx1IzrQLL66uNs0wga0+qc+yy1W0jeYzt8=
Subject key identifier: 47:D6:B7:91:15:AB:BE:26:33:1A:EA:1A:32:E6:FA:53:A0:79:C2:BA
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 019EBE47B25551C650F30B62A83BECD86B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: 79
Signing time: Sat 13 Jun 2026 00:00:30 +0000
Manifest this update: Sat 13 Jun 2026 00:00:30 +0000
Manifest next update: Sun 14 Jun 2026 00:00:30 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: NA+w6AtKyzK8Lypalr8UQEr9CFzmZnIUmvJrmJzGoSo=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:b2:55:51:c6:50:f3:0b:62:a8:3b:ec:d8:6b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Jun 13 00:00:30 2026 GMT
Not After : Jun 14 00:00:30 2026 GMT
Subject: CN=47d6b79115abbe26331aea1a32e6fa53a079c2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:15:04:b6:b3:a1:b6:a7:de:ca:90:5e:06:
0b:0d:51:48:40:ae:79:df:f0:2a:e7:f3:c4:ca:72:
a9:d9:97:78:98:2f:83:75:0d:f7:75:b0:cd:0c:ad:
9c:83:cd:c2:2d:df:07:e8:54:0c:c7:01:d6:01:c4:
be:cf:d9:a8:6a:92:60:75:5f:09:1f:0b:ea:31:76:
cf:78:ef:a8:d9:0b:83:0a:f0:91:be:0d:ba:0f:69:
d4:6c:00:d2:ac:30:a4:2b:63:ba:e3:9b:56:1a:f1:
47:56:e0:4f:6c:92:d2:fc:16:84:08:6b:94:00:6d:
3e:19:5a:73:84:c8:34:9b:a2:81:a1:14:8a:c3:70:
c3:78:76:ec:4e:56:76:6e:1a:7f:87:a8:4d:69:a9:
5c:6a:41:8b:90:f6:f3:64:77:b7:be:0d:5c:2c:75:
7d:5e:d0:53:c0:ee:58:96:1d:fb:33:eb:f1:32:9d:
c5:44:9e:3a:75:57:dd:ec:2a:39:4b:8d:8e:27:d3:
d5:69:b5:64:47:8a:6b:d9:1f:ff:f4:6b:2e:96:cc:
89:f0:69:92:c3:d1:4c:c6:71:ff:17:e2:db:10:72:
ac:ad:f1:c2:be:8d:c3:33:c6:fe:a2:5f:4e:55:b5:
42:78:17:42:b2:74:ec:d5:66:d9:e2:71:d3:d4:9b:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:B7:91:15:AB:BE:26:33:1A:EA:1A:32:E6:FA:53:A0:79:C2:BA
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ab:13:90:86:87:d8:5a:de:cb:42:9d:d9:bd:0b:c4:1a:6c:
96:58:59:88:9c:70:1d:af:b2:80:2f:05:9e:85:91:2e:b1:f5:
be:66:75:51:c8:1c:3c:1d:d9:e1:ae:db:c6:84:e3:dd:36:8d:
ff:71:66:e6:a8:a2:d4:ac:9b:7c:88:d0:db:3c:e8:ac:e1:66:
19:3d:63:56:c2:d7:0e:f3:c1:aa:aa:4f:51:dd:0d:46:98:b9:
1b:04:68:a8:93:cf:f2:58:bc:8c:56:4f:ff:e7:24:e4:97:b2:
8c:4a:e2:80:1b:af:06:d0:22:aa:d8:bb:d6:5c:8b:fb:59:18:
41:4c:fb:06:06:cc:44:a9:72:fa:65:7f:7f:65:a1:06:bd:64:
20:ab:51:9b:6b:0e:0f:17:98:89:0b:e8:57:06:5a:05:c6:ff:
76:7f:b0:fd:e9:60:43:63:92:de:49:af:d9:8b:cc:8e:0c:9c:
45:a5:eb:e4:1b:2b:66:d4:99:08:ff:72:bc:a3:ec:1d:df:a8:
f2:96:f2:89:cc:8d:1f:8e:f8:aa:58:ca:94:bb:71:3c:a7:63:
11:22:aa:a3:81:91:66:3e:94:12:77:17:a2:24:bd:db:99:2f:
d8:cc:ae:f1:61:09:af:69:15:8b:d7:a6:2b:c6:5f:9e:33:42:
7f:e6:e3:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R7JVUcZQ8wtiqDvs2GuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2I1N2Q3ZTFlNzY3YjUzZWZkZTRlNmNhMzVlNmVhZDYz
ZWEwZjIwHhcNMjYwNjEzMDAwMDMwWhcNMjYwNjE0MDAwMDMwWjAzMTEwLwYDVQQD
Eyg0N2Q2Yjc5MTE1YWJiZTI2MzMxYWVhMWEzMmU2ZmE1M2EwNzljMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswQVBLazoban3sqQXgYLDVFIQK55
3/Aq5/PEynKp2Zd4mC+DdQ33dbDNDK2cg83CLd8H6FQMxwHWAcS+z9moapJgdV8J
HwvqMXbPeO+o2QuDCvCRvg26D2nUbADSrDCkK2O645tWGvFHVuBPbJLS/BaECGuU
AG0+GVpzhMg0m6KBoRSKw3DDeHbsTlZ2bhp/h6hNaalcakGLkPbzZHe3vg1cLHV9
XtBTwO5Ylh37M+vxMp3FRJ46dVfd7Co5S42OJ9PVabVkR4pr2R//9GsulsyJ8GmS
w9FMxnH/F+LbEHKsrfHCvo3DM8b+ol9OVbVCeBdCsnTs1WbZ4nHT1JtITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfWt5EVq74mMxrqGjLm+lOgecK6MB8GA1UdIwQY
MBaAFJHLV9fh52e1Pv3k5so15urWPqDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMt
ZTk2MThjM2I1YTk1LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMtZTk2MThjM2I1YTk1
LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqsTkIaH
2Frey0Kd2b0LxBpsllhZiJxwHa+ygC8FnoWRLrH1vmZ1UcgcPB3Z4a7bxoTj3TaN
/3Fm5qii1KybfIjQ2zzorOFmGT1jVsLXDvPBqqpPUd0NRpi5GwRoqJPP8li8jFZP
/+ck5JeyjErigBuvBtAiqti71lyL+1kYQUz7BgbMRKly+mV/f2WhBr1kIKtRm2sO
DxeYiQvoVwZaBcb/dn+w/elgQ2OS3kmv2YvMjgycRaXr5BsrZtSZCP9yvKPsHd+o
8pbyicyNH474qljKlLtxPKdjESKqo4GRZj6UEncXoiS925kv2Myu8WEJr2kVi9em
K8ZfnjNCf+bjeA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:14 2026 by rpki-client