Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: ofhIsdUa/eTEublPt9M/Mj02JnZMbIA8hwuK2iiBITU=
Subject key identifier: 58:DE:1C:B3:15:05:02:29:BE:37:3D:90:EE:1F:67:93:D2:70:D4:B9
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019EC2FFEE021DEC4A486C5B5697B1960DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:00:12 +0000
Manifest this update: Sat 13 Jun 2026 22:00:12 +0000
Manifest next update: Sun 14 Jun 2026 22:00:12 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: l7HLu3S74aoFO2K0nKrnJGkoJBf4DpU4RQantKUJLNw=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ff:ee:02:1d:ec:4a:48:6c:5b:56:97:b1:96:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jun 13 22:00:12 2026 GMT
Not After : Jun 14 22:00:12 2026 GMT
Subject: CN=58de1cb315050229be373d90ee1f6793d270d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:ec:43:b3:d3:5b:2b:2d:11:6e:da:87:9a:
01:38:a0:ee:a3:3c:9c:ca:c8:e2:c8:b6:9b:5e:b2:
b3:e6:da:a5:32:a7:e6:41:bf:12:f7:1c:ff:d5:cb:
4d:79:ad:4b:4e:6c:46:99:8c:8c:93:9d:03:19:fb:
97:54:78:26:b2:bb:87:5c:db:8d:d6:0c:1c:32:93:
bd:5b:36:95:69:17:3a:be:2f:57:bb:4b:31:7d:57:
16:41:13:11:35:5a:16:9d:35:f7:82:24:d0:04:0e:
33:db:02:f1:3b:16:29:a9:36:e7:b4:f6:23:6c:25:
6a:22:e4:50:4d:7b:c4:8b:4a:87:e3:a3:ab:32:73:
5d:72:f0:6b:6b:3a:b2:4f:fe:eb:e9:e5:32:25:5d:
3d:08:e4:e3:c3:03:ca:ff:e6:e2:b3:b1:fe:a9:16:
80:85:1a:db:5d:56:53:8e:84:f6:b0:84:81:e2:3a:
e8:50:8a:d1:6a:b3:29:21:0b:0e:1a:34:3c:ea:45:
a7:ec:99:d0:8a:47:3f:5a:3b:af:1b:93:d6:a1:82:
e2:74:69:4a:02:fa:22:dc:7c:4f:12:84:53:12:a2:
df:0d:5d:73:b2:fe:e2:eb:e2:50:20:17:f2:5b:92:
c0:a8:88:0f:a0:ea:38:5d:ca:73:48:98:f6:58:91:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DE:1C:B3:15:05:02:29:BE:37:3D:90:EE:1F:67:93:D2:70:D4:B9
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b3:14:91:dd:9c:a3:83:53:c3:1b:2a:86:e6:9e:f7:71:aa:
b0:96:46:31:48:7c:92:a1:17:75:18:73:f0:32:bc:f2:a9:8a:
5e:9a:5e:58:6d:16:c7:6c:f3:6f:7f:e0:6b:b5:4a:54:38:ca:
07:6e:aa:fc:91:68:7b:80:7d:72:7c:84:72:ae:85:fa:63:2d:
e8:47:76:15:5c:88:95:bc:1c:fa:8b:89:ad:62:7c:e3:18:1c:
22:b5:8e:ca:0f:55:a4:6c:cb:1b:5a:2b:cc:43:98:6b:5d:e3:
f8:2d:2f:2a:ab:50:9a:0c:a7:ba:16:ce:19:ce:40:c5:c9:a6:
f1:c7:06:f6:8f:3f:f3:eb:fd:aa:14:75:b6:4e:59:80:2c:fe:
ce:30:51:35:bd:cf:ec:87:c9:b3:7b:d5:82:1c:6f:0d:78:20:
b2:9b:8c:02:2e:c6:d9:7e:74:49:3c:49:ef:08:6d:22:b7:1c:
de:e5:78:cb:93:8c:6b:0c:df:92:19:3c:66:05:08:c8:bd:69:
25:53:76:9c:c5:72:22:1d:f3:dc:a6:8c:9d:2b:12:41:b9:fa:
f5:a2:4f:61:c4:54:27:b8:b9:b9:43:78:c2:41:33:43:90:c7:
97:26:b0:3c:45:f0:92:82:94:74:cd:d6:d4:8a:50:64:e2:f5:
8a:d2:b2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7C/+4CHexKSGxbVpexlg3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw
YmMxNWQwHhcNMjYwNjEzMjIwMDEyWhcNMjYwNjE0MjIwMDEyWjAzMTEwLwYDVQQD
Eyg1OGRlMWNiMzE1MDUwMjI5YmUzNzNkOTBlZTFmNjc5M2QyNzBkNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyovsQ7PTWystEW7ah5oBOKDuozyc
ysjiyLabXrKz5tqlMqfmQb8S9xz/1ctNea1LTmxGmYyMk50DGfuXVHgmsruHXNuN
1gwcMpO9WzaVaRc6vi9Xu0sxfVcWQRMRNVoWnTX3giTQBA4z2wLxOxYpqTbntPYj
bCVqIuRQTXvEi0qH46OrMnNdcvBrazqyT/7r6eUyJV09COTjwwPK/+bis7H+qRaA
hRrbXVZTjoT2sISB4jroUIrRarMpIQsOGjQ86kWn7JnQikc/WjuvG5PWoYLidGlK
Avoi3HxPEoRTEqLfDV1zsv7i6+JQIBfyW5LAqIgPoOo4XcpzSJj2WJFX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjeHLMVBQIpvjc9kO4fZ5PScNS5MB8GA1UdIwQY
MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt
MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3
LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7MUkd2c
o4NTwxsqhuae93GqsJZGMUh8kqEXdRhz8DK88qmKXppeWG0Wx2zzb3/ga7VKVDjK
B26q/JFoe4B9cnyEcq6F+mMt6Ed2FVyIlbwc+ouJrWJ84xgcIrWOyg9VpGzLG1or
zEOYa13j+C0vKqtQmgynuhbOGc5Axcmm8ccG9o8/8+v9qhR1tk5ZgCz+zjBRNb3P
7IfJs3vVghxvDXggspuMAi7G2X50STxJ7whtIrcc3uV4y5OMawzfkhk8ZgUIyL1p
JVN2nMVyIh3z3KaMnSsSQbn69aJPYcRUJ7i5uUN4wkEzQ5DHlyawPEXwkoKUdM3W
1IpQZOL1itKytQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:29 2026 by rpki-client