Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: a6kZF4ZbVnQGvUddFtwor5lHo5qS/rfzkr5biLERRv8=
Subject key identifier: 22:C3:54:5B:9D:3A:B8:31:54:B7:8E:2A:41:A1:FF:31:7B:D0:3A:6B
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019FA90713C7E22BEB5A387F3C194CB6BCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1696
Signing time: Tue 28 Jul 2026 14:00:40 +0000
Manifest this update: Tue 28 Jul 2026 14:00:40 +0000
Manifest next update: Wed 29 Jul 2026 14:00:40 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: WsurdLFu+WO6kynxlPel5cY2+vORq2MSHs7OlR1h6hA=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:13:c7:e2:2b:eb:5a:38:7f:3c:19:4c:b6:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jul 28 14:00:40 2026 GMT
Not After : Jul 29 14:00:40 2026 GMT
Subject: CN=22c3545b9d3ab83154b78e2a41a1ff317bd03a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:2f:a8:a0:eb:af:4c:c4:6d:63:1e:c3:0e:
a2:c0:88:17:fb:24:ac:dc:6e:0b:13:6f:36:4c:ef:
ce:4c:cb:e9:a7:f4:31:73:31:1c:d8:bd:4b:b4:25:
33:6a:f5:ee:d2:a0:ff:b6:18:7f:c3:d7:68:85:c0:
89:68:cb:d9:bb:fa:e9:7e:72:3d:10:7f:5e:4d:3e:
51:ad:8b:f1:32:3c:be:cc:12:7d:4d:52:04:58:f0:
62:5c:c8:08:39:92:d1:30:ef:dc:dd:1d:3e:a3:4b:
34:0c:86:96:1d:3d:e4:2f:75:9b:91:38:0e:81:ae:
09:d4:03:96:7a:3f:2c:4f:13:3b:5d:98:f8:99:e1:
fc:d5:18:d5:3c:62:cf:f6:9f:82:56:6c:3b:91:1f:
84:b1:ba:65:76:05:57:9b:93:11:18:4b:4c:85:52:
ef:1d:aa:56:f8:07:e3:d3:f8:6c:b8:fd:68:36:ac:
00:1c:08:4c:48:7f:25:b4:2b:ab:fc:70:c9:7d:6f:
80:45:bd:62:49:bd:32:10:54:0c:7c:fb:7a:3d:3f:
12:26:f0:0e:7a:aa:6c:f7:4d:57:04:cc:27:19:ef:
e1:32:61:21:5e:8b:e5:c0:45:c8:48:56:fa:65:48:
75:1e:5d:54:97:20:ba:54:8b:1d:7d:b5:4d:73:a5:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:54:5B:9D:3A:B8:31:54:B7:8E:2A:41:A1:FF:31:7B:D0:3A:6B
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:e0:3f:1c:cb:2b:78:29:8f:69:2b:33:12:77:60:4b:4e:
80:5e:d6:6f:80:89:f3:29:1b:a6:f5:32:75:cb:37:c2:72:43:
71:16:59:57:2f:9c:b8:c6:24:61:e4:e5:03:88:36:a8:64:1f:
25:f5:3c:2b:69:75:a3:b5:79:4c:d9:cb:2f:ce:cf:29:e9:3d:
f8:d3:ab:fc:ba:87:72:70:da:a8:fd:c9:be:41:8b:7a:18:72:
0d:02:4d:6a:ef:57:b7:bb:45:f2:6b:dd:e8:f7:bf:cf:9b:85:
19:63:14:c3:d2:d8:c0:b3:e8:b7:30:2f:2a:c0:44:db:83:4e:
57:73:f4:0d:21:a0:b2:71:07:89:60:ea:d2:4a:13:bf:ed:a9:
9f:74:47:05:ff:61:cf:e7:85:6a:84:1a:56:fd:b6:2b:82:29:
e6:d1:c1:db:c5:11:e7:15:b8:93:f5:64:6c:68:61:d4:46:ea:
a2:d3:68:c3:98:fc:4f:58:d0:c4:69:2d:03:fe:e0:63:bd:0c:
1e:5a:22:ec:f8:d4:ce:52:73:e1:fe:9b:3f:76:24:3b:74:7c:
ed:81:f6:94:d2:34:78:32:0f:90:24:5b:0f:60:da:91:f9:07:
7b:9c:7e:c3:c4:0e:a0:3e:83:d0:2c:d5:e6:99:78:da:64:f3:
e5:97:c7:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBxPH4ivrWjh/PBlMtrylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjYwNzI4MTQwMDQwWhcNMjYwNzI5MTQwMDQwWjAzMTEwLwYDVQQD
EygyMmMzNTQ1YjlkM2FiODMxNTRiNzhlMmE0MWExZmYzMTdiZDAzYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6svqKDrr0zEbWMeww6iwIgX+ySs
3G4LE282TO/OTMvpp/QxczEc2L1LtCUzavXu0qD/thh/w9dohcCJaMvZu/rpfnI9
EH9eTT5RrYvxMjy+zBJ9TVIEWPBiXMgIOZLRMO/c3R0+o0s0DIaWHT3kL3WbkTgO
ga4J1AOWej8sTxM7XZj4meH81RjVPGLP9p+CVmw7kR+EsbpldgVXm5MRGEtMhVLv
HapW+Afj0/hsuP1oNqwAHAhMSH8ltCur/HDJfW+ARb1iSb0yEFQMfPt6PT8SJvAO
eqps901XBMwnGe/hMmEhXovlwEXISFb6ZUh1Hl1UlyC6VIsdfbVNc6X8uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLDVFudOrgxVLeOKkGh/zF70DprMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJTgPxzL
K3gpj2krMxJ3YEtOgF7Wb4CJ8ykbpvUydcs3wnJDcRZZVy+cuMYkYeTlA4g2qGQf
JfU8K2l1o7V5TNnLL87PKek9+NOr/LqHcnDaqP3JvkGLehhyDQJNau9Xt7tF8mvd
6Pe/z5uFGWMUw9LYwLPotzAvKsBE24NOV3P0DSGgsnEHiWDq0koTv+2pn3RHBf9h
z+eFaoQaVv22K4Ip5tHB28UR5xW4k/VkbGhh1EbqotNow5j8T1jQxGktA/7gY70M
Hloi7PjUzlJz4f6bP3YkO3R87YH2lNI0eDIPkCRbD2DakfkHe5x+w8QOoD6D0CzV
5pl42mTz5ZfH1w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:18 2026 by rpki-client