Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: JL6NgGBYUO5pqaqEEkZAHY6e5kwfGHXqsnyMNpolMko=
Subject key identifier: 69:14:01:11:9A:BF:2A:86:35:C9:F4:1D:6B:97:08:24:B7:48:FF:37
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019EC0A3D15F675322B758D4EF31428954D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 11:00:21 +0000
Manifest this update: Sat 13 Jun 2026 11:00:21 +0000
Manifest next update: Sun 14 Jun 2026 11:00:21 +0000
Files and hashes: 1: D_KlB34E9TuYjqot3WH68IZh9Oo.asa (hash: g2ep34hP7XJuNaAzXn6kUfYddFEXLyHb6BpLTFIwPsE=)
2: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
3: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: U9U2TL4+u+IBq+4Ur7W6Q6UZafazZZTf2SO2pCCObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:d1:5f:67:53:22:b7:58:d4:ef:31:42:89:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jun 13 11:00:21 2026 GMT
Not After : Jun 14 11:00:21 2026 GMT
Subject: CN=691401119abf2a8635c9f41d6b970824b748ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:d1:bd:07:2f:7b:4c:c9:d5:d7:8a:38:ab:
a2:6d:a6:dd:cc:a8:db:05:09:18:90:f6:5d:4b:3b:
1f:1c:ba:9b:24:89:ae:ec:e0:e0:7d:81:ed:f8:a0:
64:58:c9:86:f8:43:77:78:cf:9a:97:4d:be:6e:ec:
29:d4:ef:53:3b:5a:bd:bc:50:d8:ca:47:a4:2d:59:
ca:82:1d:23:5d:58:46:21:65:29:0d:a1:58:b6:17:
7d:ad:32:01:fa:e5:8b:f1:2f:1b:a8:97:bd:a0:b0:
a4:ec:b1:20:1c:7e:e7:63:48:9e:67:d4:3e:8b:d6:
3a:f4:40:28:5b:6a:c7:9b:bd:6b:2f:fa:10:3d:7b:
66:04:32:c0:21:5e:58:91:8f:ab:00:7b:67:94:4a:
f3:bd:2e:97:b0:59:14:42:0a:ae:47:a3:af:92:96:
09:36:71:5e:27:5b:59:d4:cf:86:ae:09:5d:82:37:
b5:6a:a0:1f:62:c6:ac:a9:fd:0d:4e:a7:1c:ec:7c:
1e:17:01:0c:88:cd:94:93:54:a1:8a:18:7c:cf:90:
29:5b:a6:0f:70:c7:9e:03:41:74:49:17:ea:4c:45:
a3:55:f4:e9:48:29:11:2b:05:57:3c:5d:20:fb:99:
99:ff:5f:61:cc:7b:ec:b3:6c:e4:2c:80:6f:b5:8e:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:01:11:9A:BF:2A:86:35:C9:F4:1D:6B:97:08:24:B7:48:FF:37
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:6e:60:16:86:e6:11:4c:61:f1:d1:c9:f6:13:d3:5f:2a:
66:9a:1e:fe:47:cd:2c:40:df:60:38:d5:98:63:f8:0c:47:d6:
4a:c9:da:e8:b8:f6:6f:fd:a1:21:62:79:29:3c:1d:da:99:54:
25:37:2f:10:5a:4e:cf:bc:56:a8:e0:0e:37:4e:3b:f0:e9:ee:
2d:7a:65:5f:06:2e:c1:da:b7:e4:d9:76:b7:b3:30:ec:52:ec:
e9:a2:ad:20:43:9b:4b:00:0a:a3:e6:24:6a:16:0d:de:92:fd:
ad:63:1c:7d:32:f8:13:fb:2c:e2:b6:91:78:4d:4c:37:68:48:
d1:a6:09:06:3c:6f:8c:d1:8e:59:c2:b3:96:89:28:2a:ae:ef:
a1:15:75:6f:70:fa:f0:76:84:e3:26:81:86:de:d6:f3:17:9b:
f1:4b:25:21:b0:1c:ba:43:03:e1:4f:8c:5e:c7:9a:4f:69:be:
dc:a2:49:cc:86:f2:56:33:99:44:94:a4:c2:28:fa:ea:2c:1f:
8a:46:78:97:ac:9d:9c:ed:e3:28:1d:a8:10:82:59:1e:cf:74:
ac:4a:7c:1e:4e:18:92:bc:41:38:dd:41:68:64:bd:36:63:a0:
24:81:ec:bd:ce:9c:5c:a9:53:86:91:51:ab:72:7d:25:97:68:
0b:a4:db:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao9FfZ1Mit1jU7zFCiVTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx
YmMxY2IwHhcNMjYwNjEzMTEwMDIxWhcNMjYwNjE0MTEwMDIxWjAzMTEwLwYDVQQD
Eyg2OTE0MDExMTlhYmYyYTg2MzVjOWY0MWQ2Yjk3MDgyNGI3NDhmZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHLRvQcve0zJ1deKOKuibabdzKjb
BQkYkPZdSzsfHLqbJImu7ODgfYHt+KBkWMmG+EN3eM+al02+buwp1O9TO1q9vFDY
ykekLVnKgh0jXVhGIWUpDaFYthd9rTIB+uWL8S8bqJe9oLCk7LEgHH7nY0ieZ9Q+
i9Y69EAoW2rHm71rL/oQPXtmBDLAIV5YkY+rAHtnlErzvS6XsFkUQgquR6OvkpYJ
NnFeJ1tZ1M+Grgldgje1aqAfYsasqf0NTqcc7HweFwEMiM2Uk1Shihh8z5ApW6YP
cMeeA0F0SRfqTEWjVfTpSCkRKwVXPF0g+5mZ/19hzHvss2zkLIBvtY7WYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkUARGavyqGNcn0HWuXCCS3SP83MB8GA1UdIwQY
MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt
OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl
LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZpuYBaG
5hFMYfHRyfYT018qZpoe/kfNLEDfYDjVmGP4DEfWSsna6Lj2b/2hIWJ5KTwd2plU
JTcvEFpOz7xWqOAON0478OnuLXplXwYuwdq35Nl2t7Mw7FLs6aKtIEObSwAKo+Yk
ahYN3pL9rWMcfTL4E/ss4raReE1MN2hI0aYJBjxvjNGOWcKzlokoKq7voRV1b3D6
8HaE4yaBht7W8xeb8UslIbAcukMD4U+MXseaT2m+3KJJzIbyVjOZRJSkwij66iwf
ikZ4l6ydnO3jKB2oEIJZHs90rEp8Hk4YkrxBON1BaGS9NmOgJIHsvc6cXKlThpFR
q3J9JZdoC6Tb7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:48 2026 by rpki-client