Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: 5k1qAo4zQGtYBkg/Ds47E/6IUeVfHn8Fvbpp6y24oSw=
Subject key identifier: 5C:4F:AE:3B:21:26:80:1B:6F:76:4D:9F:36:D4:9B:C4:22:6F:8F:E3
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019CABD91211ED8A83EEEA2ECDE183A88AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 0858
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: LPnjs4OtIYP4oCb72vhkTZIpzWK8RadTapnjRm9Ix4M=)
2: Qf4dP42vzRBrZXFbcCRz-VSmv1M.roa (hash: A64N+3juau//kw/FqDqwxIYCtmtyAvH0se4IvywkAE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:11:ed:8a:83:ee:ea:2e:cd:e1:83:a8:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=5c4fae3b2126801b6f764d9f36d49bc4226f8fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:c8:6e:2e:f3:cc:48:60:7d:9f:23:62:c3:
16:4d:7d:74:68:93:42:6d:d8:b3:59:26:3f:7d:47:
b0:2e:13:e7:e7:3b:6a:3e:9a:19:8c:c8:79:ac:ab:
9d:ba:8f:6a:85:ed:5f:ad:85:27:81:97:83:e6:3d:
59:c5:df:fc:d1:0c:ec:db:9b:bf:d6:ad:df:84:2a:
8d:85:9e:03:a4:91:9e:c9:17:17:e5:2a:27:bf:18:
ed:c0:01:6a:2e:5b:d6:dd:05:98:69:ff:c8:a2:92:
10:f1:4b:24:a7:29:dd:28:37:a3:cb:01:18:37:a4:
16:ca:e1:37:6d:ac:1d:a2:35:df:28:f4:ba:e5:40:
c3:68:35:2d:45:ac:42:34:6c:be:cd:64:c0:16:4c:
d9:bb:cd:13:73:c9:34:67:83:ef:51:c3:1c:a5:fb:
44:64:86:f1:8c:04:1d:e8:37:18:a8:21:04:98:09:
9e:f5:b4:c9:84:41:56:d3:e4:09:56:fb:53:b6:b5:
04:4f:35:01:cf:33:da:c3:8a:0c:1c:f9:84:81:57:
cc:58:d0:ee:90:c6:5d:96:99:e9:0a:d8:b1:79:45:
db:4a:25:b0:18:8e:a3:e1:05:21:ce:40:b7:02:0c:
7c:ec:63:fc:a0:be:3b:f4:16:f2:22:27:76:b3:a6:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:AE:3B:21:26:80:1B:6F:76:4D:9F:36:D4:9B:C4:22:6F:8F:E3
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:11:f9:81:02:7b:61:91:35:b9:c0:92:d4:7a:cd:81:28:
b3:25:98:6a:18:39:23:23:18:23:e3:5a:84:94:57:e1:e6:de:
77:7b:d7:05:d9:16:74:ef:5d:ad:e9:cb:96:07:50:95:b0:d4:
3b:65:5f:09:2c:b0:9e:35:a3:55:8e:b6:1a:f3:86:8a:da:18:
e3:ca:cf:d8:db:18:db:2f:bf:84:19:2c:c5:db:76:19:3d:cf:
04:8a:1f:16:81:99:fe:45:49:ff:36:b0:d4:2f:6b:e1:d5:90:
04:87:c8:35:46:e6:5e:79:d9:37:31:af:ca:60:09:de:1d:98:
f1:2f:08:56:05:0e:1c:fe:0c:35:b9:8f:c7:dc:0c:04:47:ee:
6f:87:84:a5:4b:db:fd:67:55:09:3c:7f:ac:29:39:fb:20:e2:
77:cb:4a:a4:91:24:ea:79:68:6d:67:86:3f:b2:78:22:dc:57:
24:d9:40:a0:7d:dc:c6:50:eb:15:35:34:89:d3:24:46:45:e0:
25:37:f9:c2:f7:3f:19:5d:30:cf:67:87:70:fe:1b:cf:37:50:
75:44:24:c8:82:62:e7:ac:17:ca:0d:9f:0c:62:21:23:18:e2:
8b:4c:7d:25:17:65:5a:0c:3d:03:10:9e:aa:2e:3f:bd:71:dc:
0d:b2:8d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RIR7YqD7uouzeGDqIrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz
NTcwZTAwHhcNMjYwMzAyMDAwMDU1WhcNMjYwMzAzMDAwMDU1WjAzMTEwLwYDVQQD
Eyg1YzRmYWUzYjIxMjY4MDFiNmY3NjRkOWYzNmQ0OWJjNDIyNmY4ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7nIbi7zzEhgfZ8jYsMWTX10aJNC
bdizWSY/fUewLhPn5ztqPpoZjMh5rKuduo9qhe1frYUngZeD5j1Zxd/80Qzs25u/
1q3fhCqNhZ4DpJGeyRcX5SonvxjtwAFqLlvW3QWYaf/IopIQ8UskpyndKDejywEY
N6QWyuE3bawdojXfKPS65UDDaDUtRaxCNGy+zWTAFkzZu80Tc8k0Z4PvUcMcpftE
ZIbxjAQd6DcYqCEEmAme9bTJhEFW0+QJVvtTtrUETzUBzzPaw4oMHPmEgVfMWNDu
kMZdlpnpCtixeUXbSiWwGI6j4QUhzkC3Agx87GP8oL479BbyIid2s6ZdeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxPrjshJoAbb3ZNnzbUm8Qib4/jMB8GA1UdIwQY
MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt
YzdhMmQ1ZjlmZDYwLzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw
LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtgR+YEC
e2GRNbnAktR6zYEosyWYahg5IyMYI+NahJRX4ebed3vXBdkWdO9drenLlgdQlbDU
O2VfCSywnjWjVY62GvOGitoY48rP2NsY2y+/hBksxdt2GT3PBIofFoGZ/kVJ/zaw
1C9r4dWQBIfINUbmXnnZNzGvymAJ3h2Y8S8IVgUOHP4MNbmPx9wMBEfub4eEpUvb
/WdVCTx/rCk5+yDid8tKpJEk6nlobWeGP7J4ItxXJNlAoH3cxlDrFTU0idMkRkXg
JTf5wvc/GV0wz2eHcP4bzzdQdUQkyIJi56wXyg2fDGIhIxjii0x9JRdlWgw9AxCe
qi4/vXHcDbKNnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:24 2026 by rpki-client