Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: 4UN8FZVJ3E4NAB9T5DAtEDkxzOp3HYAHTSz5H/O4TZM=
Subject key identifier: 26:AA:6F:97:8F:A1:90:8E:F4:5D:C5:41:FB:24:49:9E:89:31:33:77
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019CABD9019BAC3B242E5B9F9435EC262E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 15CB
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: wo6dKciyN+DzbYo3yyhRSnvn/JQ142DGMdZzOURF+Qo=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:01:9b:ac:3b:24:2e:5b:9f:94:35:ec:26:2e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=26aa6f978fa1908ef45dc541fb24499e89313377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:ce:9c:72:09:69:8f:a7:ca:2a:5c:8b:14:
ea:f4:8b:9a:d2:73:b1:96:aa:63:e4:d8:80:0c:c6:
69:1a:87:c3:1b:76:f1:c3:be:3e:c3:10:40:af:8d:
67:bf:cf:b2:0a:29:c3:1a:71:11:c5:54:e8:14:55:
50:cc:ce:48:96:6e:2c:5e:e3:12:f5:cf:ce:4c:cc:
fb:bd:8b:c5:fd:ad:94:03:a6:da:13:ae:ca:90:91:
a8:3c:24:19:54:63:23:18:87:6e:9a:37:d0:f4:d5:
d4:35:78:45:3b:63:2c:f2:b7:55:bc:63:c4:b5:a6:
87:c0:a1:3e:4a:83:04:c8:41:eb:13:9c:62:25:8f:
45:8b:16:4b:99:96:2d:94:86:32:82:c8:f6:56:2c:
d2:d6:be:3e:0c:aa:9e:07:62:63:56:e9:91:28:b4:
8f:b2:74:7e:c5:52:59:ba:75:54:28:5c:5d:b8:8d:
63:b4:1c:37:7b:c2:d1:a0:f3:f5:22:39:73:1d:0b:
b5:7a:c2:aa:ad:c2:f4:fe:d0:a2:f9:cb:ef:87:16:
38:c8:4c:2b:cd:19:e9:e9:ae:e1:38:fe:00:bc:67:
c2:13:ed:2d:82:a1:62:12:3a:64:89:7d:40:80:14:
f7:bc:da:f0:9b:28:96:62:d2:31:9e:e0:3b:6b:05:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:6F:97:8F:A1:90:8E:F4:5D:C5:41:FB:24:49:9E:89:31:33:77
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:d7:44:42:07:9f:fb:6f:65:35:c3:ec:a1:65:dc:64:e4:
b7:47:db:65:ca:46:df:e6:6c:54:9d:9c:69:7b:f0:c3:35:71:
fd:3f:59:a2:c8:5e:6f:4c:23:d7:77:25:6a:40:af:da:57:c7:
7f:0a:cb:8d:84:bb:c5:d3:8c:75:aa:f5:2c:51:5c:32:b0:52:
56:36:5e:06:f7:6c:0d:7b:28:45:99:d8:b6:e0:28:91:d4:20:
1a:14:02:ff:83:f0:58:14:15:d7:d9:cc:ef:e6:16:34:8a:f9:
98:6f:e2:79:c0:34:63:85:48:6a:e2:92:51:75:01:9a:3c:ea:
b0:93:06:65:bb:b6:00:bc:8b:90:6b:de:d1:38:d7:66:0f:c9:
38:38:23:6c:0e:20:66:d4:ca:9c:6a:0c:38:bc:bd:bd:c5:2e:
b5:84:16:79:ae:46:3a:7a:b3:66:aa:03:74:f6:e9:89:28:64:
5c:cd:17:26:30:a4:1b:b0:98:24:1f:7f:e1:93:7b:02:07:1e:
25:b5:60:5b:0d:ba:91:dd:7e:db:2c:3f:ba:0f:d4:32:a5:c9:
b7:fb:00:e5:7a:84:ba:f6:cd:c9:7f:11:63:50:6a:7f:1c:fb:
81:20:f1:91:05:b0:80:4e:2f:38:f1:21:90:3b:66:e2:dd:44:
8e:db:e0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QGbrDskLluflDXsJi5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi
MDg1ZWYwHhcNMjYwMzAyMDAwMDUxWhcNMjYwMzAzMDAwMDUxWjAzMTEwLwYDVQQD
EygyNmFhNmY5NzhmYTE5MDhlZjQ1ZGM1NDFmYjI0NDk5ZTg5MzEzMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobrOnHIJaY+nyipcixTq9Iua0nOx
lqpj5NiADMZpGofDG3bxw74+wxBAr41nv8+yCinDGnERxVToFFVQzM5Ilm4sXuMS
9c/OTMz7vYvF/a2UA6baE67KkJGoPCQZVGMjGIdumjfQ9NXUNXhFO2Ms8rdVvGPE
taaHwKE+SoMEyEHrE5xiJY9FixZLmZYtlIYygsj2VizS1r4+DKqeB2JjVumRKLSP
snR+xVJZunVUKFxduI1jtBw3e8LRoPP1IjlzHQu1esKqrcL0/tCi+cvvhxY4yEwr
zRnp6a7hOP4AvGfCE+0tgqFiEjpkiX1AgBT3vNrwmyiWYtIxnuA7awUhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaqb5ePoZCO9F3FQfskSZ6JMTN3MB8GA1UdIwQY
MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt
OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw
LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoDXREIH
n/tvZTXD7KFl3GTkt0fbZcpG3+ZsVJ2caXvwwzVx/T9Zosheb0wj13clakCv2lfH
fwrLjYS7xdOMdar1LFFcMrBSVjZeBvdsDXsoRZnYtuAokdQgGhQC/4PwWBQV19nM
7+YWNIr5mG/iecA0Y4VIauKSUXUBmjzqsJMGZbu2ALyLkGve0TjXZg/JODgjbA4g
ZtTKnGoMOLy9vcUutYQWea5GOnqzZqoDdPbpiShkXM0XJjCkG7CYJB9/4ZN7Agce
JbVgWw26kd1+2yw/ug/UMqXJt/sA5XqEuvbNyX8RY1Bqfxz7gSDxkQWwgE4vOPEh
kDtm4t1EjtvgaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:08 2026 by rpki-client