Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: v9JWk4uBCdiTTQdh6PpE9+B9POJ/60+5kXwePSm5aVk=
Subject key identifier: 1F:49:B4:E7:BC:7E:06:7F:58:03:AB:C4:51:D0:4C:1F:DB:A3:25:30
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 019CAC47765992230CC46821D2E629E33045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0C37
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: r0UfyjJF9fggmlKwbqs9u+fTkDcswfuuBax2kKRP3yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:76:59:92:23:0c:c4:68:21:d2:e6:29:e3:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=1f49b4e7bc7e067f5803abc451d04c1fdba32530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:21:bf:08:69:fc:8f:61:1a:c5:8d:9a:96:
a6:b4:99:dd:85:7d:1c:49:18:38:42:e9:19:19:74:
6c:15:7b:d0:a5:36:4c:59:5d:46:e9:bc:57:c9:87:
07:9b:da:ce:8a:ea:be:9c:f5:6b:54:85:69:a2:3f:
98:93:59:9b:a9:2f:27:b4:7e:d8:fd:0e:1f:63:49:
9b:e5:51:4a:01:1b:51:e9:6e:15:5f:b3:56:3d:35:
26:22:ba:af:f9:37:f8:c2:63:90:4c:e8:7d:d4:c9:
d9:01:d6:ad:ad:72:ff:a4:20:1e:8e:08:bc:70:d9:
68:a9:38:8b:60:fa:8b:66:73:ff:9c:91:cd:c8:15:
e6:73:12:68:df:66:76:fd:9b:20:ea:da:91:77:a1:
15:39:6e:94:d3:90:ec:fa:58:59:4b:a2:e4:82:ab:
03:fa:42:65:a7:00:3d:fd:cc:a2:57:c4:4d:64:b4:
93:50:b9:53:4d:c5:02:36:a8:23:6c:a2:84:33:bd:
20:49:ac:31:34:28:28:d6:22:4e:9e:77:cb:ee:ec:
84:a0:6b:6c:4b:76:b2:2b:8e:d8:a9:d5:f2:f3:9e:
30:d5:62:09:92:c9:da:43:ab:9f:2d:9d:08:44:d0:
36:fa:f9:5c:b3:b9:93:c7:50:b1:83:e4:8e:f3:52:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:B4:E7:BC:7E:06:7F:58:03:AB:C4:51:D0:4C:1F:DB:A3:25:30
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:93:88:96:0a:75:92:8b:36:cc:e2:56:61:85:5a:65:96:54:
50:38:f6:2d:c5:e3:55:14:f9:fa:c1:f2:2c:03:c6:2f:95:ac:
16:4f:16:b4:00:75:14:3e:a1:4a:96:81:5b:72:b6:56:0e:dc:
bb:47:c1:cd:23:43:17:62:87:b8:7a:a0:43:9a:4a:91:94:f8:
11:6d:4c:c4:61:64:e0:fe:e6:41:6b:ca:69:69:5f:8c:32:30:
ea:ec:09:3d:23:3e:b7:e5:0e:b6:54:75:53:3d:e9:77:5c:5b:
88:56:12:7f:4f:f0:cb:a3:79:f6:5e:a4:d9:4a:42:73:22:c9:
f6:84:51:c8:e7:b1:bb:0a:9f:07:77:53:b2:95:7c:91:13:93:
a5:4f:5b:59:4a:7d:d5:82:48:ad:42:99:d6:20:e9:58:fa:69:
05:f0:70:b8:d7:ed:75:21:71:f1:e2:f6:e9:b1:87:8e:c3:b7:
40:80:a9:a0:8b:07:a5:2b:f6:95:35:ef:3c:14:2c:f2:9f:4b:
21:47:28:61:f3:94:d1:3f:7f:44:a9:c9:6d:9c:d2:dc:a0:9e:
1d:19:5f:d2:cd:d5:76:d7:11:33:b2:ff:72:0d:68:aa:3c:de:
45:9c:b6:25:e4:d5:2f:0f:dc:e6:05:38:ed:40:07:ce:77:b6:
e6:f6:3d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3ZZkiMMxGgh0uYp4zBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi
N2EyOTAwHhcNMjYwMzAyMDIwMTMwWhcNMjYwMzAzMDIwMTMwWjAzMTEwLwYDVQQD
EygxZjQ5YjRlN2JjN2UwNjdmNTgwM2FiYzQ1MWQwNGMxZmRiYTMyNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb8hvwhp/I9hGsWNmpamtJndhX0c
SRg4QukZGXRsFXvQpTZMWV1G6bxXyYcHm9rOiuq+nPVrVIVpoj+Yk1mbqS8ntH7Y
/Q4fY0mb5VFKARtR6W4VX7NWPTUmIrqv+Tf4wmOQTOh91MnZAdatrXL/pCAejgi8
cNloqTiLYPqLZnP/nJHNyBXmcxJo32Z2/Zsg6tqRd6EVOW6U05Ds+lhZS6LkgqsD
+kJlpwA9/cyiV8RNZLSTULlTTcUCNqgjbKKEM70gSawxNCgo1iJOnnfL7uyEoGts
S3ayK47YqdXy854w1WIJksnaQ6ufLZ0IRNA2+vlcs7mTx1Cxg+SO81IYSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9JtOe8fgZ/WAOrxFHQTB/boyUwMB8GA1UdIwQY
MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt
ZWVkMjA0ZWQ5NzgwLzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw
LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZOIlgp1
kos2zOJWYYVaZZZUUDj2LcXjVRT5+sHyLAPGL5WsFk8WtAB1FD6hSpaBW3K2Vg7c
u0fBzSNDF2KHuHqgQ5pKkZT4EW1MxGFk4P7mQWvKaWlfjDIw6uwJPSM+t+UOtlR1
Uz3pd1xbiFYSf0/wy6N59l6k2UpCcyLJ9oRRyOexuwqfB3dTspV8kROTpU9bWUp9
1YJIrUKZ1iDpWPppBfBwuNftdSFx8eL26bGHjsO3QICpoIsHpSv2lTXvPBQs8p9L
IUcoYfOU0T9/RKnJbZzS3KCeHRlf0s3VdtcRM7L/cg1oqjzeRZy2JeTVLw/c5gU4
7UAHzne25vY9eg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:47 2026 by rpki-client