Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: sFja12oomkB9FHV3fDs8KpwFfZRabUEpHotFofoBMBo=
Subject key identifier: 2F:CF:59:5E:86:8C:AF:8D:6C:16:24:96:66:E7:42:16:BD:00:BB:ED
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019CABA22A52CD9753CDD904DF2BCA582E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0AB0
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: _rghgGhHIYbLY2yOEoA9mmW7wqg.roa (hash: LafLigZh1QXUn5FQibqQ6Xl17st+BespqipLbfL+dgY=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: gLtKYU53IrtfMUDyh35HF9rVaTY5m39y0LhWNp33lkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2a:52:cd:97:53:cd:d9:04:df:2b:ca:58:2e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=2fcf595e868caf8d6c16249666e74216bd00bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:9b:bc:08:b3:f8:21:81:e1:56:ec:89:46:
9c:f8:87:01:11:3e:30:94:96:c0:e9:e8:df:77:4f:
97:df:62:da:ed:d6:20:d6:71:91:18:6e:ab:da:32:
24:cf:6c:87:b3:80:b8:d2:81:8b:82:c2:df:86:4b:
49:73:a1:f4:9c:e6:7b:53:cb:50:7c:19:4e:75:bd:
9c:65:6d:7c:af:ca:5d:96:fa:e2:5b:6c:ce:c6:cb:
83:a6:08:a2:de:83:84:b6:8b:c2:a1:9a:11:d8:0b:
2e:b4:9c:f3:de:b1:9b:ab:a6:3c:19:eb:46:1b:af:
d5:bb:af:7c:98:98:0b:d0:cf:32:04:22:98:43:34:
e2:6d:ba:40:43:09:18:fe:9c:4c:98:c8:60:b2:09:
04:6c:91:65:92:2e:58:0a:d6:8c:c9:9e:b2:18:0f:
9c:80:48:c0:7f:7a:67:49:f7:e1:5a:1b:7e:20:c9:
ef:28:a6:2f:8c:c5:10:1b:8b:c1:d7:52:a8:88:35:
e5:2d:36:97:d1:e1:17:2b:17:9e:11:12:cb:3d:3e:
4b:60:f0:8b:0a:58:62:1d:b3:5b:0d:41:6d:da:9a:
68:df:e3:52:8a:7f:79:87:fe:e1:dc:69:5f:50:f4:
a8:df:44:23:9f:b7:65:51:a9:b6:2f:4b:a7:df:c5:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:59:5E:86:8C:AF:8D:6C:16:24:96:66:E7:42:16:BD:00:BB:ED
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e5:c4:47:71:c5:73:57:4e:d2:14:d3:60:03:ff:b9:0c:5c:
14:f4:d1:10:e2:21:1c:59:ab:b9:24:4e:d7:f9:d7:01:47:48:
cb:45:44:21:91:3f:8c:af:0c:af:87:62:b7:4e:19:66:57:5a:
8a:8e:ca:c3:b8:58:29:bb:e1:6d:8a:a9:75:46:85:27:bd:ff:
c7:82:f9:4e:9f:28:08:55:14:d4:6e:86:c3:99:1d:1a:48:20:
9f:e9:b9:e2:11:9e:be:2c:da:37:a7:df:34:a1:19:a1:f6:6d:
87:0f:53:db:d9:f9:49:b8:5f:97:b8:50:63:f7:3c:64:e2:49:
ab:46:80:d5:be:cd:6d:ae:ae:fd:5b:d9:4f:14:f4:d1:31:06:
44:32:8e:ea:e8:b1:4a:4e:00:33:3a:8b:eb:f6:7b:6d:eb:80:
6b:6c:19:08:31:d1:cc:be:87:38:29:2d:40:69:ec:9d:6b:14:
5c:29:3c:18:d4:2b:37:0e:1a:25:c1:fe:e9:f4:80:42:6d:98:
f9:70:f0:b6:7d:2e:68:fb:b4:f9:b7:ea:82:a0:29:44:7b:92:
95:8d:1b:5d:f3:04:45:d4:45:0d:5d:b8:95:84:1a:c6:43:6f:
e6:ed:fd:ea:d3:8a:06:4f:29:c6:73:53:77:51:94:25:75:d5:
17:1c:ad:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroipSzZdTzdkE3yvKWC6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz
YzA1YWUwHhcNMjYwMzAxMjMwMDU3WhcNMjYwMzAyMjMwMDU3WjAzMTEwLwYDVQQD
EygyZmNmNTk1ZTg2OGNhZjhkNmMxNjI0OTY2NmU3NDIxNmJkMDBiYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaybvAiz+CGB4VbsiUac+IcBET4w
lJbA6ejfd0+X32La7dYg1nGRGG6r2jIkz2yHs4C40oGLgsLfhktJc6H0nOZ7U8tQ
fBlOdb2cZW18r8pdlvriW2zOxsuDpgii3oOEtovCoZoR2AsutJzz3rGbq6Y8GetG
G6/Vu698mJgL0M8yBCKYQzTibbpAQwkY/pxMmMhgsgkEbJFlki5YCtaMyZ6yGA+c
gEjAf3pnSffhWht+IMnvKKYvjMUQG4vB11KoiDXlLTaX0eEXKxeeERLLPT5LYPCL
ClhiHbNbDUFt2ppo3+NSin95h/7h3GlfUPSo30Qjn7dlUam2L0un38UC8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/PWV6GjK+NbBYklmbnQha9ALvtMB8GA1UdIwQY
MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt
NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1
LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuXER3HF
c1dO0hTTYAP/uQxcFPTREOIhHFmruSRO1/nXAUdIy0VEIZE/jK8Mr4dit04ZZlda
io7Kw7hYKbvhbYqpdUaFJ73/x4L5Tp8oCFUU1G6Gw5kdGkggn+m54hGevizaN6ff
NKEZofZthw9T29n5Sbhfl7hQY/c8ZOJJq0aA1b7Nba6u/VvZTxT00TEGRDKO6uix
Sk4AMzqL6/Z7beuAa2wZCDHRzL6HOCktQGnsnWsUXCk8GNQrNw4aJcH+6fSAQm2Y
+XDwtn0uaPu0+bfqgqApRHuSlY0bXfMERdRFDV24lYQaxkNv5u396tOKBk8pxnNT
d1GUJXXVFxyteQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:52 2026 by rpki-client