Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: US3vl79kt9CCGQQVPcEnZCt8Xs3f5LQKN8cm+6tpUck=
Subject key identifier: CF:93:CF:D0:A8:BE:AA:AE:72:4C:16:66:D5:66:C2:A4:49:CA:63:BF
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019EC2929D87353807E7EE4C6EE0F5F79853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0DEC
Signing time: Sat 13 Jun 2026 20:00:48 +0000
Manifest this update: Sat 13 Jun 2026 20:00:48 +0000
Manifest next update: Sun 14 Jun 2026 20:00:48 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 1+LcBwx3fopqBcV8AynWz7kotrC0Fmd1iYEPIotgdr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:9d:87:35:38:07:e7:ee:4c:6e:e0:f5:f7:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jun 13 20:00:48 2026 GMT
Not After : Jun 14 20:00:48 2026 GMT
Subject: CN=cf93cfd0a8beaaae724c1666d566c2a449ca63bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:bc:28:fd:3a:3c:3e:0f:fa:66:c3:02:9c:
03:12:41:3e:a3:35:cb:33:40:26:76:86:4f:9a:29:
bc:56:d6:a2:92:39:ff:e6:8c:c3:9b:f7:e9:e5:3d:
5f:96:f8:78:a3:3f:e3:e0:c8:7e:23:87:b9:2e:f9:
98:ba:cb:15:c1:4b:92:b0:f3:7c:7b:f6:ac:c0:e3:
d7:78:0b:8d:52:c6:1f:e0:33:4a:f3:99:74:b1:33:
18:e7:b0:fd:97:9d:22:50:f3:97:89:3d:6a:59:0b:
ba:7f:02:94:e7:e6:13:1e:e3:13:f0:2c:21:cf:cb:
6d:ad:a1:61:1e:42:c6:89:cf:fd:ef:9c:42:83:4c:
ea:a7:8b:d7:57:5f:b0:63:62:bc:b3:6f:0e:1a:de:
9e:bd:42:b8:1c:e1:3d:d9:ab:78:84:5b:13:a4:08:
21:d5:e3:63:85:e5:13:5b:bf:57:37:cc:a4:65:27:
b6:2a:06:5e:53:59:15:03:a3:9d:99:55:0d:4a:ad:
2f:f7:6f:a0:b7:64:0d:e1:59:07:32:37:3c:e9:4b:
76:0d:de:6b:b6:70:a2:9a:23:87:c4:fb:d5:39:3a:
da:68:57:85:c4:fb:34:eb:62:46:df:19:b0:21:7e:
4b:88:9b:d8:01:18:91:f3:db:89:8f:45:90:ad:ca:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:93:CF:D0:A8:BE:AA:AE:72:4C:16:66:D5:66:C2:A4:49:CA:63:BF
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:4b:54:57:9d:77:6a:76:84:96:fd:4f:46:42:29:21:35:
4a:8a:32:98:56:79:f8:b5:65:0e:47:5b:d5:a7:1e:06:21:43:
f5:d3:18:a5:75:41:41:98:05:5a:11:c0:a2:b3:e9:04:36:ca:
0e:03:de:58:c2:18:36:bc:e4:29:29:e7:c4:21:ce:7d:0e:a8:
64:2c:ad:92:6f:1d:ae:5e:50:f7:59:56:74:57:f2:ef:ae:b7:
3a:f1:83:3f:e2:8c:c5:df:ca:8e:c0:de:f9:b7:e6:1c:73:f5:
11:4f:83:e7:d0:78:e8:40:80:fc:dc:2a:bf:1d:f9:4f:58:72:
6b:89:07:ab:d7:d0:91:a0:5e:90:45:34:da:17:25:91:ea:cb:
83:f9:b8:29:4a:dd:ab:70:34:87:14:6e:ae:94:65:c9:92:06:
49:67:d5:f0:18:41:24:a0:48:19:1a:a2:1c:1b:8b:5d:eb:b9:
4d:6e:17:44:01:45:97:6f:7e:c1:0b:3f:47:7d:5d:3f:9b:91:
39:21:50:f4:c7:46:ef:44:4c:2b:61:6e:55:04:f0:28:6f:58:
4d:0c:e4:d9:a8:66:d1:e5:5a:7c:20:77:ce:23:f3:fc:bb:39:
85:6f:34:e1:41:a2:9f:ee:c8:49:4e:67:96:bf:bf:da:78:08:
63:09:a5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ckp2HNTgH5+5MbuD195hTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh
MDM1YTMwHhcNMjYwNjEzMjAwMDQ4WhcNMjYwNjE0MjAwMDQ4WjAzMTEwLwYDVQQD
EyhjZjkzY2ZkMGE4YmVhYWFlNzI0YzE2NjZkNTY2YzJhNDQ5Y2E2M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkG8KP06PD4P+mbDApwDEkE+ozXL
M0AmdoZPmim8Vtaikjn/5ozDm/fp5T1flvh4oz/j4Mh+I4e5LvmYussVwUuSsPN8
e/aswOPXeAuNUsYf4DNK85l0sTMY57D9l50iUPOXiT1qWQu6fwKU5+YTHuMT8Cwh
z8ttraFhHkLGic/975xCg0zqp4vXV1+wY2K8s28OGt6evUK4HOE92at4hFsTpAgh
1eNjheUTW79XN8ykZSe2KgZeU1kVA6OdmVUNSq0v92+gt2QN4VkHMjc86Ut2Dd5r
tnCimiOHxPvVOTraaFeFxPs062JG3xmwIX5LiJvYARiR89uJj0WQrcogCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+Tz9CovqquckwWZtVmwqRJymO/MB8GA1UdIwQY
MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt
NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj
LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHVLVFed
d2p2hJb9T0ZCKSE1SooymFZ5+LVlDkdb1aceBiFD9dMYpXVBQZgFWhHAorPpBDbK
DgPeWMIYNrzkKSnnxCHOfQ6oZCytkm8drl5Q91lWdFfy7663OvGDP+KMxd/KjsDe
+bfmHHP1EU+D59B46ECA/Nwqvx35T1hya4kHq9fQkaBekEU02hclkerLg/m4KUrd
q3A0hxRurpRlyZIGSWfV8BhBJKBIGRqiHBuLXeu5TW4XRAFFl29+wQs/R31dP5uR
OSFQ9MdG70RMK2FuVQTwKG9YTQzk2ahm0eVafCB3ziPz/Ls5hW804UGin+7ISU5n
lr+/2ngIYwmlpw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:55 2026 by rpki-client