Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: fcnyzo2dTmcjqf2wcrW+vTUMeaqasW8KxcKPUSBUhiA=
Subject key identifier: 5C:9A:8F:DF:99:99:03:CE:91:01:E6:AF:F3:69:8A:4D:8F:8E:18:72
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019FA9E285E523D463748FDEC59FE216E77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:22 +0000
Manifest this update: Tue 28 Jul 2026 18:00:22 +0000
Manifest next update: Wed 29 Jul 2026 18:00:22 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: J1QDy2cID1AJ1A52mcgNiBlTWO8e5LUu8XdfS9Rf8bQ=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:85:e5:23:d4:63:74:8f:de:c5:9f:e2:16:e7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Jul 28 18:00:22 2026 GMT
Not After : Jul 29 18:00:22 2026 GMT
Subject: CN=5c9a8fdf999903ce9101e6aff3698a4d8f8e1872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:53:1e:91:fb:e8:88:0a:5a:e4:43:9b:7d:
09:01:3f:e5:4c:0a:48:b8:43:d7:cc:67:62:ed:e7:
3b:50:b8:54:6f:e2:70:18:58:f1:5f:54:f3:01:a6:
c6:b1:4d:24:a4:43:71:f2:d8:08:7a:97:3d:4f:12:
84:55:48:b6:85:be:8a:5b:1d:86:86:64:74:fc:44:
04:e6:0b:e7:c9:94:4e:de:78:18:ca:bf:67:39:b4:
81:47:9e:b8:50:7e:7c:6b:19:ca:88:b6:eb:4d:2f:
2f:13:24:c9:1e:4f:e7:cf:f5:dc:5d:41:50:95:c2:
19:f5:96:78:cc:08:c9:a7:12:13:fc:ca:02:2a:6e:
fb:59:9d:f4:4f:45:e2:22:3c:06:e5:db:b6:25:27:
89:d5:76:ee:a4:b0:d6:a8:a1:65:da:60:12:01:70:
28:94:5a:d9:8e:43:10:60:1e:cb:c3:70:d6:8a:d1:
a1:fe:b4:2d:df:54:af:87:1c:56:2e:f9:ca:7c:f8:
cb:d4:e4:b4:aa:c0:e3:ec:b4:57:2c:03:24:86:88:
77:60:ea:fa:6d:48:77:26:0d:d0:55:36:56:8c:2a:
49:87:9b:b9:52:7e:48:29:dd:2e:56:37:55:c3:b4:
9c:4f:74:58:de:83:e3:1e:de:b8:fb:07:cd:73:ba:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:8F:DF:99:99:03:CE:91:01:E6:AF:F3:69:8A:4D:8F:8E:18:72
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:0e:6c:6a:03:4b:91:3d:64:e8:b4:5e:e2:1b:c1:1c:10:
12:15:22:bc:69:56:61:00:41:0d:82:6d:32:38:f7:7a:15:63:
b2:2e:56:f9:ea:25:dc:03:2f:29:e3:57:b2:ea:3c:05:66:f9:
12:60:36:e6:fc:e5:af:41:4a:ac:4a:bb:ee:45:50:f8:2a:aa:
67:f4:f5:af:3c:ea:34:2e:f7:58:36:2d:61:16:78:bb:35:f5:
3a:d9:23:3a:02:61:09:c8:6d:51:e6:bc:58:cc:39:90:1e:ab:
86:3f:20:80:91:d9:5c:d4:25:01:64:19:27:e6:8f:6d:b1:5a:
61:b6:35:64:b0:fa:04:e4:77:66:a9:c7:f9:79:76:9e:77:3a:
30:28:c0:78:24:6f:07:21:58:18:93:b5:56:e6:ee:79:b7:73:
b3:11:83:dc:32:21:6e:3c:86:78:a7:d4:b3:d6:03:26:b4:5f:
f6:44:34:ba:8d:bb:9a:79:f3:bb:83:58:ce:32:dc:38:ba:cf:
db:2f:b7:8e:19:46:a4:fe:48:b5:a0:6d:1b:82:0e:fc:a6:87:
bd:23:6f:5c:ef:2b:85:6d:0b:db:74:ff:79:d2:ab:66:39:16:
53:eb:57:96:0b:05:93:a0:fd:8c:9a:8d:bd:99:4f:e4:53:8d:
62:85:cd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4oXlI9RjdI/exZ/iFud9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjYwNzI4MTgwMDIyWhcNMjYwNzI5MTgwMDIyWjAzMTEwLwYDVQQD
Eyg1YzlhOGZkZjk5OTkwM2NlOTEwMWU2YWZmMzY5OGE0ZDhmOGUxODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmxTHpH76IgKWuRDm30JAT/lTApI
uEPXzGdi7ec7ULhUb+JwGFjxX1TzAabGsU0kpENx8tgIepc9TxKEVUi2hb6KWx2G
hmR0/EQE5gvnyZRO3ngYyr9nObSBR564UH58axnKiLbrTS8vEyTJHk/nz/XcXUFQ
lcIZ9ZZ4zAjJpxIT/MoCKm77WZ30T0XiIjwG5du2JSeJ1XbupLDWqKFl2mASAXAo
lFrZjkMQYB7Lw3DWitGh/rQt31SvhxxWLvnKfPjL1OS0qsDj7LRXLAMkhoh3YOr6
bUh3Jg3QVTZWjCpJh5u5Un5IKd0uVjdVw7ScT3RY3oPjHt64+wfNc7oohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyaj9+ZmQPOkQHmr/Npik2PjhhyMB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWsObGoD
S5E9ZOi0XuIbwRwQEhUivGlWYQBBDYJtMjj3ehVjsi5W+eol3AMvKeNXsuo8BWb5
EmA25vzlr0FKrEq77kVQ+CqqZ/T1rzzqNC73WDYtYRZ4uzX1OtkjOgJhCchtUea8
WMw5kB6rhj8ggJHZXNQlAWQZJ+aPbbFaYbY1ZLD6BOR3ZqnH+Xl2nnc6MCjAeCRv
ByFYGJO1VubuebdzsxGD3DIhbjyGeKfUs9YDJrRf9kQ0uo27mnnzu4NYzjLcOLrP
2y+3jhlGpP5ItaBtG4IO/KaHvSNvXO8rhW0L23T/edKrZjkWU+tXlgsFk6D9jJqN
vZlP5FONYoXNjw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:18 2026 by rpki-client