Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: wK/ECwDYc4LgVlFJiASeUZy7zqwbIUmjeCl6dCZyrD8=
Subject key identifier: 2D:71:2E:15:29:73:1A:DA:DA:13:64:B9:83:6F:8E:3C:0C:72:C0:1C
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 019CACB4E8C3F822ADD1F8D04C0F49DF474C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 0217
Signing time: Mon 02 Mar 2026 04:01:02 +0000
Manifest this update: Mon 02 Mar 2026 04:01:02 +0000
Manifest next update: Tue 03 Mar 2026 04:01:02 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: +94TJv9gS0O33L/wZ4y5N5a1XifhfrPNUJs/b7Kzty8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e8:c3:f8:22:ad:d1:f8:d0:4c:0f:49:df:47:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Mar 2 04:01:02 2026 GMT
Not After : Mar 3 04:01:02 2026 GMT
Subject: CN=2d712e1529731adada1364b9836f8e3c0c72c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:ec:b9:43:49:b8:5b:52:cf:ef:51:ca:3c:
30:6c:42:5b:bb:77:ba:0a:49:63:3c:43:29:4f:dc:
7d:a1:c2:bc:80:37:46:c7:3a:50:36:2a:cb:12:54:
6f:7d:d7:33:af:93:25:62:48:32:bc:74:60:c4:01:
f9:ef:83:44:e7:08:2a:63:cf:a1:77:c2:97:f6:10:
59:10:03:23:40:4f:a8:a3:f1:85:27:f6:b9:a5:42:
c6:e0:16:b5:f7:30:81:43:52:8b:03:df:cc:d3:f7:
41:1e:3d:c6:cf:0c:43:e3:cd:4e:a5:7a:63:7e:8b:
5b:cd:3d:e5:56:00:04:c6:49:78:80:1e:6d:03:6a:
08:c0:5d:5a:87:b8:d6:fa:f3:b3:12:85:b1:ba:76:
c7:f6:5d:f0:0f:af:83:2c:3b:84:d9:54:2f:17:29:
be:59:60:c3:96:d9:0f:d0:81:a4:82:4b:3a:c4:2f:
f6:ee:3a:84:5a:d9:64:cb:f3:c8:43:7c:31:59:7d:
f3:05:93:43:f2:3b:d7:b0:36:a3:ff:39:f9:f8:61:
f9:84:fb:d9:9e:1a:93:e2:43:96:2c:18:47:18:79:
fd:81:24:59:36:75:c3:b0:c0:07:07:32:83:f6:95:
7f:0a:67:10:23:ab:76:49:68:f3:6b:29:11:08:e0:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:2E:15:29:73:1A:DA:DA:13:64:B9:83:6F:8E:3C:0C:72:C0:1C
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:05:50:26:17:bf:17:f8:e2:d1:bc:06:f6:38:3f:b1:af:
a4:e9:a4:74:b5:7e:d7:85:3a:3a:45:39:bb:d9:8d:dc:7d:9b:
16:93:57:d1:fa:2d:7c:c7:c3:3e:28:a5:da:41:f9:05:81:76:
bd:b3:b8:a2:0e:c8:26:56:51:3c:84:99:dd:b7:4e:7a:0f:76:
01:6b:4e:2a:2e:10:57:8b:b1:d1:a9:03:3c:5d:40:8f:b0:f6:
4d:18:f8:eb:3c:ee:b0:08:c6:d5:24:ca:2d:12:53:94:61:10:
28:94:fc:07:48:e0:9a:70:4b:1d:ce:69:c0:de:0c:b9:4c:fb:
87:13:61:16:da:36:eb:89:83:87:7e:49:a7:5f:b3:0d:77:bc:
20:dc:b7:ff:d7:b7:e0:48:fe:76:a1:1a:56:5d:e5:d0:a4:d8:
2e:81:b2:27:b1:2e:ff:56:81:ea:ce:42:9b:3c:85:6b:d0:ca:
60:48:c7:27:16:78:b6:ae:4c:93:0c:fa:46:1e:d3:6c:c0:bf:
98:ac:6b:84:82:47:15:8b:e4:8c:52:4b:51:ab:ba:50:db:10:
c3:ec:af:b2:10:09:eb:65:45:1d:12:d5:e6:d3:0d:2d:62:34:
d5:1a:e6:1d:5d:11:7c:54:c0:db:ba:ff:44:e3:2a:e4:6d:c6:
e4:bb:6f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystOjD+CKt0fjQTA9J30dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzdiNTFkYmYzNWFhNDIzOWFiZGFkNTVmOTY2OTQ1NjU5
NDAxY2YwHhcNMjYwMzAyMDQwMTAyWhcNMjYwMzAzMDQwMTAyWjAzMTEwLwYDVQQD
EygyZDcxMmUxNTI5NzMxYWRhZGExMzY0Yjk4MzZmOGUzYzBjNzJjMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L7suUNJuFtSz+9RyjwwbEJbu3e6
CkljPEMpT9x9ocK8gDdGxzpQNirLElRvfdczr5MlYkgyvHRgxAH574NE5wgqY8+h
d8KX9hBZEAMjQE+oo/GFJ/a5pULG4Ba19zCBQ1KLA9/M0/dBHj3GzwxD481OpXpj
fotbzT3lVgAExkl4gB5tA2oIwF1ah7jW+vOzEoWxunbH9l3wD6+DLDuE2VQvFym+
WWDDltkP0IGkgks6xC/27jqEWtlky/PIQ3wxWX3zBZND8jvXsDaj/zn5+GH5hPvZ
nhqT4kOWLBhHGHn9gSRZNnXDsMAHBzKD9pV/CmcQI6t2SWjzaykRCODzfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1xLhUpcxra2hNkuYNvjjwMcsAcMB8GA1UdIwQY
MBaAFCvHtR2/NapCOava1V+WaUVllAHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQt
MmEzODEyNGJhZDhjLzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQtMmEzODEyNGJhZDhj
LzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNQFUCYX
vxf44tG8BvY4P7GvpOmkdLV+14U6OkU5u9mN3H2bFpNX0fotfMfDPiil2kH5BYF2
vbO4og7IJlZRPISZ3bdOeg92AWtOKi4QV4ux0akDPF1Aj7D2TRj46zzusAjG1STK
LRJTlGEQKJT8B0jgmnBLHc5pwN4MuUz7hxNhFto264mDh35Jp1+zDXe8INy3/9e3
4Ej+dqEaVl3l0KTYLoGyJ7Eu/1aB6s5CmzyFa9DKYEjHJxZ4tq5Mkwz6Rh7TbMC/
mKxrhIJHFYvkjFJLUau6UNsQw+yvshAJ62VFHRLV5tMNLWI01RrmHV0RfFTA27r/
ROMq5G3G5LtvwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:59 2026 by rpki-client