Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: F714E5c0dJzTzn8BMKKewelPjL4vtP2JwR0XMgT/zyE=
Subject key identifier: 01:04:D2:BE:65:CB:D1:49:82:9E:D0:CE:BC:93:A6:46:9F:2D:25:7B
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019CAC4736E10AC580A546A1C492F68D1E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 095D
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: BSwYS+sUMs0QgRiYXbSAXwT9xWhFLlbgM5klJ86wkuA=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:36:e1:0a:c5:80:a5:46:a1:c4:92:f6:8d:1e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=0104d2be65cbd149829ed0cebc93a6469f2d257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:2a:d0:bd:51:9f:65:9b:64:cf:50:f4:9e:
cc:ea:e4:b5:f3:03:4c:32:29:36:02:9f:66:84:30:
81:49:b5:24:e4:5b:01:43:99:3a:3d:ea:29:05:3d:
88:a4:ae:31:fa:7b:ae:e9:f6:95:9a:85:3a:08:8a:
48:39:5f:62:4f:ca:17:c3:b1:97:c2:31:0a:69:02:
f8:25:9d:7f:49:b9:5e:3c:9d:c4:50:12:5f:03:88:
cb:4d:bb:2d:5e:74:93:b0:b0:ad:a4:5d:80:7c:2e:
94:75:9b:90:1f:e7:9f:d2:13:15:8d:62:1e:fd:71:
89:08:6b:9d:86:a4:6c:47:f3:2c:66:20:91:28:28:
72:7b:64:f7:26:04:7f:85:1c:51:7d:dd:5a:86:82:
e8:cc:e0:3c:7f:07:77:67:48:78:a7:45:96:c6:02:
bc:bb:d3:2c:69:2d:74:4a:76:b3:6a:c7:18:1a:21:
b4:a0:ca:fc:a5:1d:9f:64:85:7c:9e:a1:eb:03:2c:
79:53:6f:2d:76:d3:ba:3b:a0:c7:8d:48:65:1c:43:
14:ca:9f:01:bd:7f:6f:b5:b1:33:1e:42:8d:57:08:
ce:66:70:9e:75:78:07:83:31:bf:52:5c:4c:91:35:
5b:b8:75:d2:b1:39:01:ff:f6:56:f2:59:83:e7:bc:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:D2:BE:65:CB:D1:49:82:9E:D0:CE:BC:93:A6:46:9F:2D:25:7B
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:4c:5d:e7:02:9d:f5:5f:8a:50:a4:a9:5e:3a:f0:89:06:
42:25:5c:71:b8:23:26:0f:01:f6:e5:d7:47:4a:ff:c5:e8:89:
ac:63:a0:16:c4:42:5b:73:2e:66:ec:55:9b:6a:96:08:1a:97:
ab:d2:04:e1:96:1f:89:02:a0:9a:bb:da:6b:f3:ec:af:a0:99:
d5:b7:37:04:bf:3b:da:16:c9:27:b8:46:19:70:35:0f:5c:69:
b8:ae:cb:6d:b2:7d:2a:3a:cb:c7:96:3e:d8:b8:2d:e6:21:5a:
1b:2d:c2:06:fe:b7:b9:92:09:ef:16:14:73:9c:e5:39:92:4e:
fc:a3:c7:25:fa:69:21:bf:52:78:c3:62:4f:18:48:ad:df:76:
b3:cc:1c:b2:6b:ab:ea:b5:b8:f9:14:f8:20:fc:95:22:d8:db:
c0:28:ac:9a:c6:ff:bc:1d:b9:99:b8:c5:52:e1:9e:f3:45:e4:
e8:73:1b:c2:20:4e:6d:01:c3:ab:7a:e4:d4:57:af:f6:5c:f0:
85:c6:1a:b9:49:e6:1d:f6:d7:1b:9d:ba:44:ec:ad:d6:1f:4b:
cc:60:bd:7e:0c:3e:8d:bb:46:fb:fa:88:a7:7e:26:a8:19:d4:
cb:a3:ca:33:db:eb:de:1b:e4:1a:5b:4d:10:b0:bd:44:40:cb:
7a:32:43:5a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysRzbhCsWApUahxJL2jR4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjYwMzAyMDIwMTE0WhcNMjYwMzAzMDIwMTE0WjAzMTEwLwYDVQQD
EygwMTA0ZDJiZTY1Y2JkMTQ5ODI5ZWQwY2ViYzkzYTY0NjlmMmQyNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55sq0L1Rn2WbZM9Q9J7M6uS18wNM
Mik2Ap9mhDCBSbUk5FsBQ5k6PeopBT2IpK4x+nuu6faVmoU6CIpIOV9iT8oXw7GX
wjEKaQL4JZ1/SblePJ3EUBJfA4jLTbstXnSTsLCtpF2AfC6UdZuQH+ef0hMVjWIe
/XGJCGudhqRsR/MsZiCRKChye2T3JgR/hRxRfd1ahoLozOA8fwd3Z0h4p0WWxgK8
u9MsaS10SnazascYGiG0oMr8pR2fZIV8nqHrAyx5U28tdtO6O6DHjUhlHEMUyp8B
vX9vtbEzHkKNVwjOZnCedXgHgzG/UlxMkTVbuHXSsTkB//ZW8lmD57wggwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAEE0r5ly9FJgp7QzryTpkafLSV7MB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKhM
XecCnfVfilCkqV468IkGQiVccbgjJg8B9uXXR0r/xeiJrGOgFsRCW3MuZuxVm2qW
CBqXq9IE4ZYfiQKgmrvaa/Psr6CZ1bc3BL872hbJJ7hGGXA1D1xpuK7LbbJ9KjrL
x5Y+2Lgt5iFaGy3CBv63uZIJ7xYUc5zlOZJO/KPHJfppIb9SeMNiTxhIrd92s8wc
smur6rW4+RT4IPyVItjbwCismsb/vB25mbjFUuGe80Xk6HMbwiBObQHDq3rk1Fev
9lzwhcYauUnmHfbXG526ROyt1h9LzGC9fgw+jbtG+/qIp34mqBnUy6PKM9vr3hvk
GltNELC9REDLejJDWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:24 2026 by rpki-client