Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
File: kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft (raw, json)
Hash identifier: TZpsY8aEXjWXwwJDpR1EFTNWfL0Qq8QvydS6CBvZANI=
Subject key identifier: 16:EB:B0:D2:69:2A:40:08:42:2A:97:59:7A:65:D9:39:BE:11:83:E0
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 019FAC7598F215CE25E79C0C0C8BA1CFC8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:15 +0000
Manifest this update: Wed 29 Jul 2026 06:00:15 +0000
Manifest next update: Thu 30 Jul 2026 06:00:15 +0000
Files and hashes: 1: JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa (hash: qBCZAB7xvXxou+T2GdjhZxyRoHv6x5IT+u6DzlaMiOg=)
2: cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa (hash: 0shjjAec7Cb9aPFwygq8U/0Lwh0QCfxBtCpb+tdZIdk=)
3: kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl (hash: 0QwbABmo0e+6n4+hh2Vk4tPoXtkGaP3KqZEaZyM5ELw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:98:f2:15:ce:25:e7:9c:0c:0c:8b:a1:cf:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Jul 29 06:00:15 2026 GMT
Not After : Jul 30 06:00:15 2026 GMT
Subject: CN=16ebb0d2692a4008422a97597a65d939be1183e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:ef:e8:23:a4:96:1e:cf:26:c7:c5:16:3f:
f5:cb:79:cf:9e:c8:11:c3:15:05:e4:56:55:48:49:
13:bb:38:e4:ae:74:a3:cd:31:0c:21:3d:d7:dd:27:
5a:c1:f7:dd:4f:17:dd:40:c0:37:f6:dd:39:99:fd:
8b:af:0f:90:02:9e:58:ee:e2:85:ad:92:12:e7:f1:
1f:29:21:77:00:30:6c:41:87:69:01:bb:34:1a:64:
1c:c7:c3:a6:03:63:14:c5:dd:87:42:42:2f:94:f6:
62:eb:53:86:c0:33:07:36:a0:f9:c6:30:e9:1e:e5:
a1:ea:4c:0a:c9:6c:1f:f3:3e:b4:40:07:e5:d8:30:
cd:11:86:73:1e:b0:df:7d:59:1e:9c:cb:20:d7:92:
b9:b4:00:f3:ac:fc:96:56:ec:fb:34:b0:6f:36:0c:
f7:cb:7c:3b:69:77:62:bc:c0:e2:c8:c6:d9:76:4c:
e7:b9:dc:f8:2a:0a:fb:85:2e:de:0d:ba:b3:71:35:
74:00:8f:88:fa:08:06:8d:18:8c:a0:f5:90:88:24:
bb:c2:8d:ca:e5:33:03:bb:23:97:fe:f5:81:49:44:
a6:e8:0f:d7:df:12:2a:d8:2b:fe:36:26:31:ed:57:
5f:93:d4:cd:80:f5:5b:52:cd:0d:9a:c3:02:4a:a6:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:B0:D2:69:2A:40:08:42:2A:97:59:7A:65:D9:39:BE:11:83:E0
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:32:e9:c5:09:1c:a2:2e:c5:e6:c2:43:c4:76:b9:bd:aa:63:
ab:83:e8:d6:3e:ac:f5:1a:a5:e2:af:49:1f:16:57:f5:58:cb:
85:a3:e7:d5:a5:2c:f3:19:8d:20:b7:05:c4:94:64:f7:5f:d3:
20:7a:da:70:f8:94:b9:60:38:5f:f0:f8:bb:cf:49:91:a3:b5:
db:b4:61:9c:95:5f:b7:d5:e1:38:88:3e:a8:15:a4:e3:d3:65:
4e:cb:27:a2:55:bd:21:f5:05:d8:22:cd:32:5b:af:93:e0:8c:
67:f8:39:fd:9c:36:e4:c0:00:2b:ca:f1:a7:37:35:51:f6:b7:
f8:91:11:89:91:62:3f:3c:3f:2b:93:d6:ef:97:6d:8b:18:da:
9f:e5:da:3f:d9:8f:dd:09:e0:60:e7:35:14:88:05:ee:e6:b1:
6a:44:fe:03:db:33:28:3f:7f:ea:b0:ec:4c:1f:71:00:e7:5b:
1a:09:03:04:e7:d4:57:6b:ff:b4:5a:4b:68:8a:d4:4b:f7:a5:
2b:e8:17:bf:64:23:bf:08:74:0b:db:f4:45:c7:6c:e2:7b:77:
cf:01:80:be:d1:a2:77:8c:17:d4:99:83:a0:4f:07:a4:92:3e:
35:60:6f:cd:4d:91:4d:02:86:99:99:df:64:98:4f:dc:2c:05:
2c:2c:0c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZjyFc4l55wMDIuhz8jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZWNjNTg0MDdkYzI2ZDBiODA5ZGRkYjRjNjdkNjc1NWRm
Zjg2ZmQwHhcNMjYwNzI5MDYwMDE1WhcNMjYwNzMwMDYwMDE1WjAzMTEwLwYDVQQD
EygxNmViYjBkMjY5MmE0MDA4NDIyYTk3NTk3YTY1ZDkzOWJlMTE4M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34rv6COklh7PJsfFFj/1y3nPnsgR
wxUF5FZVSEkTuzjkrnSjzTEMIT3X3SdawffdTxfdQMA39t05mf2Lrw+QAp5Y7uKF
rZIS5/EfKSF3ADBsQYdpAbs0GmQcx8OmA2MUxd2HQkIvlPZi61OGwDMHNqD5xjDp
HuWh6kwKyWwf8z60QAfl2DDNEYZzHrDffVkenMsg15K5tADzrPyWVuz7NLBvNgz3
y3w7aXdivMDiyMbZdkznudz4Kgr7hS7eDbqzcTV0AI+I+ggGjRiMoPWQiCS7wo3K
5TMDuyOX/vWBSUSm6A/X3xIq2Cv+NiYx7Vdfk9TNgPVbUs0NmsMCSqbweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbrsNJpKkAIQiqXWXpl2Tm+EYPgMB8GA1UdIwQY
MBaAFJHsxYQH3CbQuAnd20xn1nVd/4b9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2V6RmhBZmNKdEM0Q2QzYlRHZldkVjNfaHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zOTFmZDEtNjNlZi00NGYzLTk4Yjct
NDcxMDlmMDM1MjA3LzEva2V6RmhBZmNKdEM0Q2QzYlRHZldkVjNfaHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zOTFmZDEtNjNlZi00NGYzLTk4YjctNDcxMDlmMDM1MjA3
LzEva2V6RmhBZmNKdEM0Q2QzYlRHZldkVjNfaHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzLpxQkc
oi7F5sJDxHa5vapjq4Po1j6s9Rql4q9JHxZX9VjLhaPn1aUs8xmNILcFxJRk91/T
IHracPiUuWA4X/D4u89JkaO127RhnJVft9XhOIg+qBWk49NlTssnolW9IfUF2CLN
Mluvk+CMZ/g5/Zw25MAAK8rxpzc1Ufa3+JERiZFiPzw/K5PW75dtixjan+XaP9mP
3QngYOc1FIgF7uaxakT+A9szKD9/6rDsTB9xAOdbGgkDBOfUV2v/tFpLaIrUS/el
K+gXv2Qjvwh0C9v0Rcds4nt3zwGAvtGid4wX1JmDoE8HpJI+NWBvzU2RTQKGmZnf
ZJhP3CwFLCwMYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:24 2026 by rpki-client