Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: YnZoaxzXsF2Aaw0dpVi0zdsB1vuzozMY+DrkTusHAXI=
Subject key identifier: B0:58:A1:A9:20:7E:71:E9:35:13:0B:C6:4A:71:8E:D9:EF:46:0D:92
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 019CAAFD1D027D175507816F739E5BCB30E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0FAA
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: ZEMqj3tb1ybXDKr5XlxXEL_WdLM.roa (hash: rTSw7EgVmlH/cwLSzDAynJz/mTmMnyEjwe5X2k2ZIyU=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: uh28FfDCMzT1Owc3tzboD3stMLjvjz0pa1FyIxbDBrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1d:02:7d:17:55:07:81:6f:73:9e:5b:cb:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=b058a1a9207e71e935130bc64a718ed9ef460d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:67:db:79:56:8c:5e:f7:be:f5:5c:cb:3e:
ce:bd:ba:55:58:42:5d:0d:99:8f:b8:e6:3f:15:db:
cf:6d:63:2d:1d:f1:fd:de:bb:0b:1a:92:02:50:27:
39:5e:85:d2:fd:c6:c8:fa:63:8f:65:60:ee:07:22:
a2:f4:67:b0:90:04:78:40:1f:1e:d6:eb:af:dc:84:
cb:ef:51:d9:5a:e1:2f:04:dd:54:a1:a3:7e:fe:c8:
fc:83:43:d1:3e:dc:79:2b:b9:27:3a:10:0b:7e:b1:
fc:8d:a6:5e:fb:43:78:41:41:c5:57:3d:37:96:22:
a4:ca:1d:76:dd:94:92:0b:d5:08:13:b6:93:31:69:
f4:82:a8:e3:1b:c8:c7:b7:b2:d9:57:90:ef:24:94:
ac:96:6e:d2:f2:c1:97:11:2e:0b:5c:63:f1:68:61:
ae:50:f5:74:0d:31:91:49:74:85:f8:59:15:f4:a9:
0c:a2:e8:6d:55:ea:6e:3c:28:75:07:e3:c4:6f:d0:
bf:f8:d1:fc:45:40:33:07:21:4c:fb:e8:44:ae:54:
4e:18:5d:c8:8c:8c:73:9b:1c:db:76:f8:d6:79:35:
3a:82:ed:53:0e:1c:6d:91:64:58:3c:61:7f:e2:4f:
2f:dc:59:cf:af:31:1c:8f:d0:c5:8d:4e:01:ff:34:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:A1:A9:20:7E:71:E9:35:13:0B:C6:4A:71:8E:D9:EF:46:0D:92
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:40:91:15:81:89:55:c7:72:9e:29:bf:cc:df:d9:dd:68:
f8:af:49:49:01:91:8a:e5:22:db:cf:bd:b1:93:7c:e6:1c:06:
71:c6:eb:24:0c:e3:5c:0a:54:6c:7b:bb:32:4a:90:2a:53:5b:
8c:91:73:7f:d2:bb:6d:31:d0:11:b3:b0:53:91:85:63:51:40:
96:06:7a:30:1c:4c:00:3f:ed:e9:5d:3a:61:6c:dc:bd:01:c5:
ac:25:8e:3d:f4:f7:39:bd:8e:bf:76:89:2d:ae:b8:65:36:13:
c0:aa:57:b1:b2:b1:37:de:48:87:24:48:22:62:4f:50:87:49:
5e:ba:b8:d5:71:68:f9:3b:04:f6:64:8d:de:f4:62:5e:0f:79:
ae:69:3c:c6:85:88:14:f0:3d:05:0c:6e:f9:7c:3b:9d:5d:05:
85:22:d5:93:82:81:94:1e:0c:0f:12:1b:82:c0:10:5d:02:55:
19:06:a4:5d:2a:cc:68:76:1d:48:4d:67:e8:91:93:ff:01:0f:
6c:d7:45:ba:e7:df:25:4e:2b:c2:3a:20:d4:4c:e8:3a:a6:13:
2c:0e:56:de:0a:32:6e:e6:8e:4b:f3:34:dd:1e:5f:f6:89:f6:
80:f6:33:05:de:9e:b5:21:d0:e5:38:4b:35:71:7c:9e:9c:14:
7b:43:db:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/R0CfRdVB4Fvc55byzDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi
ODJlMDIwHhcNMjYwMzAxMjAwMDQwWhcNMjYwMzAyMjAwMDQwWjAzMTEwLwYDVQQD
EyhiMDU4YTFhOTIwN2U3MWU5MzUxMzBiYzY0YTcxOGVkOWVmNDYwZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9n23lWjF73vvVcyz7OvbpVWEJd
DZmPuOY/FdvPbWMtHfH93rsLGpICUCc5XoXS/cbI+mOPZWDuByKi9GewkAR4QB8e
1uuv3ITL71HZWuEvBN1UoaN+/sj8g0PRPtx5K7knOhALfrH8jaZe+0N4QUHFVz03
liKkyh123ZSSC9UIE7aTMWn0gqjjG8jHt7LZV5DvJJSslm7S8sGXES4LXGPxaGGu
UPV0DTGRSXSF+FkV9KkMouhtVepuPCh1B+PEb9C/+NH8RUAzByFM++hErlROGF3I
jIxzmxzbdvjWeTU6gu1TDhxtkWRYPGF/4k8v3FnPrzEcj9DFjU4B/zTiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBYoakgfnHpNRMLxkpxjtnvRg2SMB8GA1UdIwQY
MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt
YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk
LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQBAkRWB
iVXHcp4pv8zf2d1o+K9JSQGRiuUi28+9sZN85hwGccbrJAzjXApUbHu7MkqQKlNb
jJFzf9K7bTHQEbOwU5GFY1FAlgZ6MBxMAD/t6V06YWzcvQHFrCWOPfT3Ob2Ov3aJ
La64ZTYTwKpXsbKxN95IhyRIImJPUIdJXrq41XFo+TsE9mSN3vRiXg95rmk8xoWI
FPA9BQxu+Xw7nV0FhSLVk4KBlB4MDxIbgsAQXQJVGQakXSrMaHYdSE1n6JGT/wEP
bNdFuuffJU4rwjog1EzoOqYTLA5W3goybuaOS/M03R5f9on2gPYzBd6etSHQ5ThL
NXF8npwUe0Pb7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:04 2026 by rpki-client