Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: VUhJ76tDcnWLCq3dyEOZSqLP3ZO5UGzWjZtF/hl4FnQ=
Subject key identifier: BA:E7:2F:40:37:C6:31:76:F3:F4:D2:C4:AF:F5:5C:E7:BB:29:A4:B2
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019EC0DB5BCAD7A5DC59C70E5B4346F2ECD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 12:01:01 +0000
Manifest this update: Sat 13 Jun 2026 12:01:01 +0000
Manifest next update: Sun 14 Jun 2026 12:01:01 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: q+Wvq1/tvHfbquSzAL4i9dDrxvZLo4VUbHS3kjOxZO0=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:5b:ca:d7:a5:dc:59:c7:0e:5b:43:46:f2:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jun 13 12:01:01 2026 GMT
Not After : Jun 14 12:01:01 2026 GMT
Subject: CN=bae72f4037c63176f3f4d2c4aff55ce7bb29a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:3d:8c:3b:45:03:c9:89:26:db:bb:5e:2b:
1f:7b:20:2e:d7:e9:ba:5d:0e:a8:2d:00:0f:2c:4d:
9a:27:fa:ca:e0:ff:84:6d:f8:da:f1:18:00:08:60:
dd:7b:48:0d:c8:61:d4:1c:73:07:2b:c5:d8:9b:9c:
ea:32:4d:23:51:42:fb:c5:93:93:de:bd:3d:0e:1a:
e2:56:ee:17:1f:36:69:47:50:22:a4:78:be:54:3f:
4f:d9:d5:31:6e:2c:8f:6c:12:c3:a9:61:f0:07:05:
68:0b:c7:71:a0:e3:b1:70:d8:5a:e3:6e:e4:c7:2b:
39:47:ef:90:42:59:e5:c8:ec:fd:1d:ee:90:4c:06:
55:93:da:c9:a1:cb:38:4f:70:8d:f9:05:4c:f9:c5:
2b:91:b1:bf:a9:56:c3:e1:55:07:27:b7:6c:60:c5:
90:be:ad:58:0c:32:98:7b:f0:d9:91:05:fe:a2:49:
ab:bf:bc:8a:1e:3c:96:fc:3e:70:54:f5:6a:d2:a9:
de:22:8f:3c:20:5c:79:6c:30:9e:94:d4:2b:e0:54:
6d:a5:81:3b:ed:0a:e6:61:d3:29:0f:cb:1c:00:4c:
8a:86:9b:5d:dd:dd:dd:ff:2e:72:d1:4c:f5:a7:71:
91:e2:04:90:f1:ec:c5:c7:05:a0:f4:2e:3f:5e:cc:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:2F:40:37:C6:31:76:F3:F4:D2:C4:AF:F5:5C:E7:BB:29:A4:B2
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ab:49:a8:c6:84:39:f8:ca:6b:4d:7f:3b:d8:8e:80:32:ec:
41:f4:16:82:98:50:b6:6e:6d:77:10:01:3e:ef:9c:80:cb:b2:
0e:0b:d6:82:1a:d4:3d:aa:70:16:63:c2:b8:53:ba:7e:dd:79:
7c:c9:62:ee:74:7a:4e:98:14:c4:10:d5:81:8c:bb:86:64:21:
dd:7e:2c:3d:68:71:c9:70:f6:d9:7f:fa:65:5a:9e:9d:02:af:
e2:5b:ef:88:98:64:ec:7b:12:ae:12:3d:28:1e:3e:50:33:c1:
5c:58:73:32:da:49:a5:c6:b1:a3:e1:2b:a3:75:0e:df:16:9e:
0a:19:f6:9d:e8:d2:ba:51:d3:35:01:e0:85:20:2c:63:18:53:
67:b6:a2:39:27:ec:0d:b3:a7:6d:8b:6e:83:1a:cd:dc:47:f7:
ab:19:bf:8a:19:3a:8a:08:17:9f:ad:10:5a:5a:86:c3:5b:d2:
0c:8c:a0:ad:af:f8:ca:8c:18:84:18:25:5c:5c:a4:5e:f4:00:
bb:ba:36:17:dc:bf:94:98:a6:ea:28:a5:2d:ae:e2:ff:df:6f:
c2:89:23:0b:aa:3f:53:02:a0:75:fc:db:df:ca:d7:01:32:f5:
22:2f:3d:40:f1:95:ab:ec:46:0d:15:5f:28:32:ab:21:70:36:
bd:e6:63:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7A21vK16XcWccOW0NG8uzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjYwNjEzMTIwMTAxWhcNMjYwNjE0MTIwMTAxWjAzMTEwLwYDVQQD
EyhiYWU3MmY0MDM3YzYzMTc2ZjNmNGQyYzRhZmY1NWNlN2JiMjlhNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b09jDtFA8mJJtu7XisfeyAu1+m6
XQ6oLQAPLE2aJ/rK4P+Ebfja8RgACGDde0gNyGHUHHMHK8XYm5zqMk0jUUL7xZOT
3r09DhriVu4XHzZpR1AipHi+VD9P2dUxbiyPbBLDqWHwBwVoC8dxoOOxcNha427k
xys5R++QQlnlyOz9He6QTAZVk9rJocs4T3CN+QVM+cUrkbG/qVbD4VUHJ7dsYMWQ
vq1YDDKYe/DZkQX+okmrv7yKHjyW/D5wVPVq0qneIo88IFx5bDCelNQr4FRtpYE7
7QrmYdMpD8scAEyKhptd3d3d/y5y0Uz1p3GR4gSQ8ezFxwWg9C4/XszgswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLrnL0A3xjF28/TSxK/1XOe7KaSyMB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqtJ
qMaEOfjKa01/O9iOgDLsQfQWgphQtm5tdxABPu+cgMuyDgvWghrUPapwFmPCuFO6
ft15fMli7nR6TpgUxBDVgYy7hmQh3X4sPWhxyXD22X/6ZVqenQKv4lvviJhk7HsS
rhI9KB4+UDPBXFhzMtpJpcaxo+Ero3UO3xaeChn2nejSulHTNQHghSAsYxhTZ7ai
OSfsDbOnbYtugxrN3Ef3qxm/ihk6iggXn60QWlqGw1vSDIygra/4yowYhBglXFyk
XvQAu7o2F9y/lJim6iilLa7i/99vwokjC6o/UwKgdfzb38rXATL1Ii89QPGVq+xG
DRVfKDKrIXA2veZjxw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:50 2026 by rpki-client