Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: RjUbLq6aKKIxxh2of/lDnR+xLr9Cn2mV+2truIpxd8Y=
Subject key identifier: AF:82:45:F0:58:EC:20:0C:03:C5:B8:0A:95:D1:43:1C:9A:2F:34:F6
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019CAEA38F48CA35EB2C765714BB45B56530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 12E9
Signing time: Mon 02 Mar 2026 13:01:20 +0000
Manifest this update: Mon 02 Mar 2026 13:01:20 +0000
Manifest next update: Tue 03 Mar 2026 13:01:20 +0000
Files and hashes: 1: fKvVor01qPV-ORu7n9y9qnaHTq4.roa (hash: 6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: Mlsdtgx8BiBzuTlUJHWyw/3jbvjyqtSH5b0FbIcK1F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:8f:48:ca:35:eb:2c:76:57:14:bb:45:b5:65:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Mar 2 13:01:20 2026 GMT
Not After : Mar 3 13:01:20 2026 GMT
Subject: CN=af8245f058ec200c03c5b80a95d1431c9a2f34f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:d1:ef:1e:80:93:64:97:bd:3e:c8:7d:9e:
02:46:9b:4b:49:d4:09:2e:3b:44:9d:ed:79:2b:85:
57:67:bd:3b:a4:05:27:20:a3:f8:c7:67:6f:6e:82:
34:7e:cb:78:e0:9e:be:db:9b:38:be:bf:3f:33:02:
b1:51:7f:60:1d:e0:c7:42:f8:da:1d:df:b9:2a:7c:
ee:27:c7:8a:b0:22:8b:cb:cb:58:74:cd:71:25:17:
80:00:80:d3:2c:34:8e:b5:9b:25:9b:a8:84:9a:81:
41:3d:72:e2:3c:bd:ce:bd:9c:de:be:80:d5:02:1f:
0e:c5:8c:ac:7d:13:c5:58:a1:6e:eb:74:e0:c0:00:
a1:aa:ad:b8:d1:03:03:03:4a:e6:d9:8a:94:4c:ad:
6d:cd:2b:54:82:24:e9:c0:76:8e:7f:a4:45:a6:a1:
26:bf:49:71:51:27:da:91:4c:67:44:94:bc:64:90:
45:3f:25:66:16:2b:63:9a:b8:71:76:e3:d6:02:db:
48:83:7b:2b:e1:34:7f:c8:e6:1d:c0:e2:f9:80:8d:
94:f4:36:e9:3c:a2:3e:62:35:ea:de:f3:70:1c:ea:
f6:f2:6d:29:aa:50:43:7c:ae:c7:89:c2:2a:c3:9c:
1d:f5:09:07:6d:0b:a7:7c:ce:e6:a3:dd:bb:11:4e:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:45:F0:58:EC:20:0C:03:C5:B8:0A:95:D1:43:1C:9A:2F:34:F6
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:04:a1:18:2b:64:2a:b7:53:f4:52:a3:f1:05:eb:23:49:
f1:54:6c:c7:5e:c3:86:8d:39:fa:72:42:de:87:84:45:d7:5f:
55:78:c4:2d:a6:f6:95:5a:9c:7d:f5:0e:60:c6:e9:98:f1:28:
4f:72:fe:8e:9d:0e:b7:b1:3c:54:5f:2d:c0:58:f4:29:c0:c1:
70:83:51:62:54:dd:62:a7:09:06:99:d8:fc:96:30:fc:91:0b:
d8:35:92:64:91:9c:06:d7:00:8b:bf:70:90:f1:c8:eb:ef:41:
04:00:01:50:42:b4:76:c3:46:c6:ac:2b:5d:cd:e4:e6:fd:5d:
7f:12:3d:26:81:a9:1d:81:ef:1a:df:af:cd:94:b0:62:1c:cf:
b0:01:c5:66:09:dd:e3:74:d5:cd:f5:5d:75:10:cd:62:6d:07:
78:38:a4:76:a5:50:d4:49:25:21:84:a0:99:98:2f:16:70:4c:
27:d4:cd:8f:5e:f9:9a:39:5b:39:d5:5e:37:7b:ad:6c:11:d0:
66:50:94:66:09:e2:d2:25:b3:a8:ad:00:a7:f5:5f:bd:16:e4:
ef:2a:5c:85:df:81:1c:24:de:7a:d4:7a:54:c9:01:b3:94:eb:
89:04:81:f1:4a:84:f3:16:a3:8e:cb:7a:23:94:1e:24:d1:05:
a3:d0:88:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo49IyjXrLHZXFLtFtWUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjYwMzAyMTMwMTIwWhcNMjYwMzAzMTMwMTIwWjAzMTEwLwYDVQQD
EyhhZjgyNDVmMDU4ZWMyMDBjMDNjNWI4MGE5NWQxNDMxYzlhMmYzNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8zR7x6Ak2SXvT7IfZ4CRptLSdQJ
LjtEne15K4VXZ707pAUnIKP4x2dvboI0fst44J6+25s4vr8/MwKxUX9gHeDHQvja
Hd+5KnzuJ8eKsCKLy8tYdM1xJReAAIDTLDSOtZslm6iEmoFBPXLiPL3OvZzevoDV
Ah8OxYysfRPFWKFu63TgwAChqq240QMDA0rm2YqUTK1tzStUgiTpwHaOf6RFpqEm
v0lxUSfakUxnRJS8ZJBFPyVmFitjmrhxduPWAttIg3sr4TR/yOYdwOL5gI2U9Dbp
PKI+YjXq3vNwHOr28m0pqlBDfK7HicIqw5wd9QkHbQunfM7mo927EU4oIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+CRfBY7CAMA8W4CpXRQxyaLzT2MB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiwEoRgr
ZCq3U/RSo/EF6yNJ8VRsx17Dho05+nJC3oeERddfVXjELab2lVqcffUOYMbpmPEo
T3L+jp0Ot7E8VF8twFj0KcDBcINRYlTdYqcJBpnY/JYw/JEL2DWSZJGcBtcAi79w
kPHI6+9BBAABUEK0dsNGxqwrXc3k5v1dfxI9JoGpHYHvGt+vzZSwYhzPsAHFZgnd
43TVzfVddRDNYm0HeDikdqVQ1EklIYSgmZgvFnBMJ9TNj175mjlbOdVeN3utbBHQ
ZlCUZgni0iWzqK0Ap/VfvRbk7ypchd+BHCTeetR6VMkBs5TriQSB8UqE8xajjst6
I5QeJNEFo9CIZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:03 2026 by rpki-client