Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: V7Orrb0qJhgrfUanAozpDpUn4sg3ULgDOHlPV1DfiUg=
Subject key identifier: B5:92:24:FD:B1:6A:02:97:81:23:F0:B4:E8:A1:20:73:80:EA:BD:B1
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019EC41362203670560A15994938E3562842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1961
Signing time: Sun 14 Jun 2026 03:01:05 +0000
Manifest this update: Sun 14 Jun 2026 03:01:05 +0000
Manifest next update: Mon 15 Jun 2026 03:01:05 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: PmfEPTqATmf7IZmzqUn2BOKzAmjdlkqz5j9KCItu9e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:13:62:20:36:70:56:0a:15:99:49:38:e3:56:28:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jun 14 03:01:05 2026 GMT
Not After : Jun 15 03:01:05 2026 GMT
Subject: CN=b59224fdb16a02978123f0b4e8a1207380eabdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:d2:7f:6f:5e:38:ec:8a:f1:ee:0e:10:0d:
90:1b:4c:91:19:14:e3:1f:86:ff:1e:d3:fe:2a:79:
47:38:e5:cd:58:e7:d5:55:11:70:ff:78:0e:3b:b2:
0a:82:33:e1:86:ef:21:b4:3c:ef:1c:1b:fd:0a:9a:
52:bd:df:f9:d2:33:36:95:6d:e6:89:a1:3d:04:e5:
f5:83:3e:f8:20:0f:3f:f0:6b:95:f6:a7:89:bc:96:
37:fc:13:fe:b1:55:ac:e1:f7:77:b6:93:cc:aa:12:
e2:b5:f6:d6:3f:34:ca:7e:95:06:75:67:58:21:1c:
f9:11:36:63:2e:94:4b:41:7a:6d:02:1b:71:d3:2a:
e1:e9:da:f4:b5:52:f1:1a:f3:c4:f0:cc:f4:c4:28:
48:ea:32:eb:0d:93:9d:bb:c9:a7:ab:d3:ac:b9:f2:
31:45:f2:76:20:9e:56:e1:2b:b8:42:c7:9c:9c:98:
88:3f:76:0f:dd:a9:95:d8:98:1c:75:a9:9e:9b:37:
99:a7:9a:bf:18:63:73:c3:64:4d:1a:19:14:b2:5c:
01:14:4b:40:99:a4:05:ba:d0:44:14:fe:c1:6b:20:
a1:ee:77:0e:f2:4b:d1:5f:e3:f0:e7:20:77:a9:c0:
e2:0a:43:cc:ae:ee:a6:e2:67:a3:1d:98:f6:5c:f1:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:24:FD:B1:6A:02:97:81:23:F0:B4:E8:A1:20:73:80:EA:BD:B1
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:97:98:79:08:1d:b5:04:ad:12:6d:44:73:24:d1:e2:65:b1:
f7:86:f8:f4:bf:1c:0b:19:35:1a:df:67:ff:f5:6c:c2:5f:ec:
14:61:ec:47:aa:b8:6d:f3:a4:ed:3f:65:ab:58:b4:a7:b7:48:
1e:06:d3:8b:86:7e:6c:7d:f9:57:1c:70:1c:e4:c2:b0:9d:62:
94:2b:0d:e0:d3:99:50:76:37:50:5f:ee:a8:07:55:da:ba:bf:
f3:59:10:07:b7:bb:38:19:36:29:05:d1:f7:9c:6e:d9:7d:79:
e3:de:16:04:4a:3b:35:f1:be:d5:42:11:cf:d8:71:35:81:1f:
d1:51:91:b0:bc:83:ca:d2:b9:3b:23:6b:c4:ff:0a:ec:e6:ef:
90:50:a1:36:c7:87:89:78:fd:44:02:bd:49:a4:82:bd:26:f0:
f5:6d:6d:9c:86:5e:29:8b:3a:0d:af:4e:ce:b5:30:16:dc:8c:
34:31:bc:71:bf:57:18:5b:0d:00:f2:e2:3c:32:89:a4:f8:94:
59:08:52:4d:f4:cb:35:e0:49:4f:17:78:1b:5f:bf:f1:b5:68:
5d:00:50:74:6d:f3:09:af:17:24:38:10:84:ef:3e:99:4c:24:
17:80:b4:39:3c:43:85:1a:bf:e3:12:46:6c:4a:8d:9a:bd:a5:
a2:b7:c0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EE2IgNnBWChWZSTjjVihCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTNiNDNmNjQ3ZTFlNzcxNGNkMTMwNzY0Y2JiYzQ4MTRl
N2ExNDgwHhcNMjYwNjE0MDMwMTA1WhcNMjYwNjE1MDMwMTA1WjAzMTEwLwYDVQQD
EyhiNTkyMjRmZGIxNmEwMjk3ODEyM2YwYjRlOGExMjA3MzgwZWFiZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB/Sf29eOOyK8e4OEA2QG0yRGRTj
H4b/HtP+KnlHOOXNWOfVVRFw/3gOO7IKgjPhhu8htDzvHBv9CppSvd/50jM2lW3m
iaE9BOX1gz74IA8/8GuV9qeJvJY3/BP+sVWs4fd3tpPMqhLitfbWPzTKfpUGdWdY
IRz5ETZjLpRLQXptAhtx0yrh6dr0tVLxGvPE8Mz0xChI6jLrDZOdu8mnq9OsufIx
RfJ2IJ5W4Su4QsecnJiIP3YP3amV2JgcdamemzeZp5q/GGNzw2RNGhkUslwBFEtA
maQFutBEFP7BayCh7ncO8kvRX+Pw5yB3qcDiCkPMru6m4mejHZj2XPEjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWSJP2xagKXgSPwtOihIHOA6r2xMB8GA1UdIwQY
MBaAFESjtD9kfh53FM0TB2TLvEgU56FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgt
YTNjNTM5ZjBiNmQyLzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgtYTNjNTM5ZjBiNmQy
LzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJeYeQgd
tQStEm1EcyTR4mWx94b49L8cCxk1Gt9n//Vswl/sFGHsR6q4bfOk7T9lq1i0p7dI
HgbTi4Z+bH35VxxwHOTCsJ1ilCsN4NOZUHY3UF/uqAdV2rq/81kQB7e7OBk2KQXR
95xu2X15494WBEo7NfG+1UIRz9hxNYEf0VGRsLyDytK5OyNrxP8K7ObvkFChNseH
iXj9RAK9SaSCvSbw9W1tnIZeKYs6Da9OzrUwFtyMNDG8cb9XGFsNAPLiPDKJpPiU
WQhSTfTLNeBJTxd4G1+/8bVoXQBQdG3zCa8XJDgQhO8+mUwkF4C0OTxDhRq/4xJG
bEqNmr2lorfAQA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:44 2026 by rpki-client