Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: bNJbst6OiIpcxnBiHWVfqf5CM4eGJybROx6es3omwII=
Subject key identifier: 9E:61:F8:1C:FC:50:B7:00:9F:09:E0:F7:2D:9D:A3:11:26:3A:D1:29
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 019CACEB54F8A6670B0E7E38B6AB35DA9743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 17CA
Signing time: Mon 02 Mar 2026 05:00:29 +0000
Manifest this update: Mon 02 Mar 2026 05:00:29 +0000
Manifest next update: Tue 03 Mar 2026 05:00:29 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: 2wHwF8YcitypIJlgKFUVmPuMVkzVIg6j4GmOLsi/4Og=)
2: v-wCFquCVU3REEeKuxPMifGq75E.roa (hash: VExpozMOuBZjJ6RPCyBqYq82PjuTIznByXSgv//ywPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:54:f8:a6:67:0b:0e:7e:38:b6:ab:35:da:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Mar 2 05:00:29 2026 GMT
Not After : Mar 3 05:00:29 2026 GMT
Subject: CN=9e61f81cfc50b7009f09e0f72d9da311263ad129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:d1:8a:01:d2:20:ec:71:37:05:9e:1d:3b:
88:10:0a:73:86:b8:ef:40:23:82:d8:3b:79:30:04:
b7:04:7c:c2:fa:84:68:54:d1:dc:8f:79:c8:d5:b3:
a9:e8:28:d7:3f:6d:4e:99:4f:e8:31:39:37:20:ef:
8d:9c:d0:b0:bb:ce:69:f2:24:26:b3:ef:75:09:79:
c8:c6:20:3a:b1:75:be:31:0e:95:58:6c:1f:82:8e:
eb:c0:eb:29:7d:dc:83:7f:8c:68:15:0f:3b:11:5e:
77:c3:e3:61:28:d4:ea:a6:bf:84:8c:f7:55:56:80:
3b:c7:79:2d:9f:bc:b7:37:0d:99:40:f5:82:a2:d1:
86:4f:74:22:84:90:c2:5b:bb:bb:73:c1:9b:50:db:
5d:a4:c9:7b:49:67:03:fb:68:18:18:e9:74:99:06:
5b:19:c9:90:06:51:20:35:28:21:4d:64:1a:8d:67:
6d:e0:5d:f9:a7:b7:8e:75:f3:e0:a8:1c:ba:75:45:
84:f5:26:55:ec:0b:92:f7:54:af:51:e7:28:f2:e8:
71:55:27:1b:5d:ce:2b:59:49:8d:89:f1:f1:38:90:
25:e9:52:ab:f6:78:8f:00:cc:c7:1a:d8:8b:ef:de:
76:4d:c6:19:19:ec:f3:81:4c:86:f4:f3:53:d2:3b:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:F8:1C:FC:50:B7:00:9F:09:E0:F7:2D:9D:A3:11:26:3A:D1:29
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:c9:60:e3:bb:6f:bc:00:72:fc:88:8a:cd:c0:88:27:38:
ce:e0:72:26:02:5e:8e:7e:64:2e:65:d0:ba:b6:15:9a:05:4e:
3e:33:52:77:6e:be:58:05:d1:c8:d6:47:cb:42:30:c8:84:6d:
d2:9c:e7:e6:88:b5:6a:47:8c:ef:b4:e9:c8:f0:f8:00:a6:04:
37:30:50:d8:e0:34:1e:65:aa:a8:70:14:74:af:cb:9c:59:70:
42:9b:71:1f:c3:68:50:24:7e:6c:9d:9e:7d:de:78:52:4e:95:
06:51:cd:fe:af:4a:65:cb:43:3c:65:0b:4c:ea:73:d6:9b:07:
6a:27:3f:55:5f:af:8b:7b:e9:a8:f7:cd:5e:ac:3a:7a:27:23:
b0:12:a0:c3:d8:d4:28:e3:e0:dd:2c:20:a5:b5:bf:0f:ff:7b:
19:21:45:3e:81:59:0b:19:2e:f4:aa:de:18:bb:0a:1e:82:65:
01:a5:09:86:16:4e:4d:70:e5:f7:3e:aa:ff:65:93:35:4b:84:
0c:35:88:d6:a0:35:88:94:7b:86:ea:7e:8c:eb:02:f5:82:6a:
7f:e7:e1:19:1d:7c:4f:75:9f:c9:35:c0:bc:5e:d1:ac:b5:c6:
6d:64:83:96:c9:28:ba:c0:48:d1:90:f2:2e:40:68:08:68:82:
5d:50:41:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys61T4pmcLDn44tqs12pdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3
YTdmYzQwHhcNMjYwMzAyMDUwMDI5WhcNMjYwMzAzMDUwMDI5WjAzMTEwLwYDVQQD
Eyg5ZTYxZjgxY2ZjNTBiNzAwOWYwOWUwZjcyZDlkYTMxMTI2M2FkMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3RigHSIOxxNwWeHTuIEApzhrjv
QCOC2Dt5MAS3BHzC+oRoVNHcj3nI1bOp6CjXP21OmU/oMTk3IO+NnNCwu85p8iQm
s+91CXnIxiA6sXW+MQ6VWGwfgo7rwOspfdyDf4xoFQ87EV53w+NhKNTqpr+EjPdV
VoA7x3ktn7y3Nw2ZQPWCotGGT3QihJDCW7u7c8GbUNtdpMl7SWcD+2gYGOl0mQZb
GcmQBlEgNSghTWQajWdt4F35p7eOdfPgqBy6dUWE9SZV7AuS91SvUeco8uhxVScb
Xc4rWUmNifHxOJAl6VKr9niPAMzHGtiL7952TcYZGezzgUyG9PNT0jtH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5h+Bz8ULcAnwng9y2doxEmOtEpMB8GA1UdIwQY
MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt
YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4
LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7TJYOO7
b7wAcvyIis3AiCc4zuByJgJejn5kLmXQurYVmgVOPjNSd26+WAXRyNZHy0IwyIRt
0pzn5oi1akeM77TpyPD4AKYENzBQ2OA0HmWqqHAUdK/LnFlwQptxH8NoUCR+bJ2e
fd54Uk6VBlHN/q9KZctDPGULTOpz1psHaic/VV+vi3vpqPfNXqw6eicjsBKgw9jU
KOPg3SwgpbW/D/97GSFFPoFZCxku9KreGLsKHoJlAaUJhhZOTXDl9z6q/2WTNUuE
DDWI1qA1iJR7hup+jOsC9YJqf+fhGR18T3WfyTXAvF7RrLXGbWSDlskousBI0ZDy
LkBoCGiCXVBBAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:28 2026 by rpki-client