Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: DNha3B7ewdaMj0ykWYuJOYlxvBSrTI3qxJcwOe1EOmE=
Subject key identifier: 3C:1E:3C:09:17:1A:20:0B:5B:65:DC:00:65:FA:CA:0E:9E:38:5D:6E
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 019CAD901B99DCD1A1E6F3F6637079E849CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 06C9
Signing time: Mon 02 Mar 2026 08:00:28 +0000
Manifest this update: Mon 02 Mar 2026 08:00:28 +0000
Manifest next update: Tue 03 Mar 2026 08:00:28 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: io8UD4eQI6Lc0RMdKOb84kuGzMIuN5+UFMtBbrtP8KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:1b:99:dc:d1:a1:e6:f3:f6:63:70:79:e8:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Mar 2 08:00:28 2026 GMT
Not After : Mar 3 08:00:28 2026 GMT
Subject: CN=3c1e3c09171a200b5b65dc0065faca0e9e385d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:47:c6:cc:15:2a:ee:5b:8e:b0:ff:21:7f:
4c:ad:92:c9:a3:69:8a:89:20:c5:f0:84:c4:2e:bc:
a9:e7:38:7a:bf:4c:c7:42:84:a1:82:44:2e:ed:52:
aa:14:c7:89:a3:1b:3c:a5:54:03:1b:af:9d:dc:73:
82:19:d9:f3:1f:98:19:11:36:d8:dc:60:fe:55:67:
a9:4a:70:25:7c:23:44:89:4b:02:f5:e4:17:a9:48:
f4:54:2b:d9:54:0b:61:f1:83:5f:9d:21:85:bf:27:
fc:e3:9b:c4:05:79:a6:93:a3:76:71:bb:16:b9:d2:
4a:02:eb:ea:f1:9b:be:b8:49:2e:68:30:8e:93:88:
e2:58:c0:87:12:b4:e1:09:c6:8d:d6:bc:1e:7a:a6:
98:7d:07:4e:84:5b:35:c0:92:d4:3c:c1:d9:90:11:
bd:be:8b:da:ea:85:da:df:d2:e2:6b:ca:32:36:22:
64:d5:ca:ee:0e:e9:6f:7b:ab:f8:2b:0d:19:2a:44:
a4:0c:b2:36:2a:c5:18:73:d0:19:c7:0a:15:30:c4:
25:93:e5:7b:ae:99:50:51:82:11:14:b3:ef:97:42:
c7:58:96:d6:fb:1c:f7:cf:65:b9:09:74:96:d7:44:
f6:3a:fe:1e:0b:ee:24:bc:35:7a:a3:0f:2b:61:2b:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1E:3C:09:17:1A:20:0B:5B:65:DC:00:65:FA:CA:0E:9E:38:5D:6E
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:56:8f:b6:3f:38:67:a8:6c:c1:b3:f8:ca:f9:80:89:42:ec:
5e:f1:3a:a4:93:d9:36:16:81:6a:eb:39:42:0d:78:bd:d6:4e:
8c:fe:54:04:47:bd:50:97:05:18:e2:01:10:17:70:33:e2:16:
57:12:be:6b:dc:f7:e5:c8:12:a7:de:32:d5:af:4b:9b:28:8d:
95:23:d5:2f:53:58:04:ac:95:b8:83:9c:de:ed:36:3f:ac:c4:
5b:9f:4c:ed:f3:17:c5:a6:a8:c8:d7:63:6f:60:1e:b9:16:76:
c3:aa:93:0a:52:ad:11:33:e1:06:81:60:4f:de:b2:67:dd:7d:
af:96:bb:21:27:3f:52:f0:ec:a6:f6:bb:f6:75:53:00:1b:3e:
fd:27:24:4f:2a:a9:c7:21:b4:3b:57:c3:0c:bc:fb:20:7e:0b:
98:f9:9f:5c:de:00:1f:cd:eb:ef:0b:34:2f:67:d1:55:fb:74:
6a:83:a5:9e:4b:e1:fd:8e:c9:7a:f6:28:5f:cd:8b:37:c5:c4:
32:25:39:1c:24:01:73:e7:30:6b:c6:d0:69:76:8f:a4:ea:ae:
c2:14:46:62:d8:ab:98:e0:a8:26:e6:8d:42:65:c5:b3:94:a5:
d6:52:0d:4e:13:88:ea:81:f2:54:1b:26:8e:7c:20:20:85:dc:
33:9b:47:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkBuZ3NGh5vP2Y3B56EnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmY2ZTVjYTVkYjQzNzc5ZTczYWNlN2NlMTZlY2UwZWU3
OTQ3OTkwHhcNMjYwMzAyMDgwMDI4WhcNMjYwMzAzMDgwMDI4WjAzMTEwLwYDVQQD
EygzYzFlM2MwOTE3MWEyMDBiNWI2NWRjMDA2NWZhY2EwZTllMzg1ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIJHxswVKu5bjrD/IX9MrZLJo2mK
iSDF8ITELryp5zh6v0zHQoShgkQu7VKqFMeJoxs8pVQDG6+d3HOCGdnzH5gZETbY
3GD+VWepSnAlfCNEiUsC9eQXqUj0VCvZVAth8YNfnSGFvyf845vEBXmmk6N2cbsW
udJKAuvq8Zu+uEkuaDCOk4jiWMCHErThCcaN1rweeqaYfQdOhFs1wJLUPMHZkBG9
vova6oXa39Lia8oyNiJk1cruDulve6v4Kw0ZKkSkDLI2KsUYc9AZxwoVMMQlk+V7
rplQUYIRFLPvl0LHWJbW+xz3z2W5CXSW10T2Ov4eC+4kvDV6ow8rYSsqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwePAkXGiALW2XcAGX6yg6eOF1uMB8GA1UdIwQY
MBaAFCpvblyl20N3nnOs584W7ODueUeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2Mjgt
NzJlOTllZTQ3NjZkLzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2MjgtNzJlOTllZTQ3NjZk
LzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1aPtj84
Z6hswbP4yvmAiULsXvE6pJPZNhaBaus5Qg14vdZOjP5UBEe9UJcFGOIBEBdwM+IW
VxK+a9z35cgSp94y1a9LmyiNlSPVL1NYBKyVuIOc3u02P6zEW59M7fMXxaaoyNdj
b2AeuRZ2w6qTClKtETPhBoFgT96yZ919r5a7ISc/UvDspva79nVTABs+/SckTyqp
xyG0O1fDDLz7IH4LmPmfXN4AH83r7ws0L2fRVft0aoOlnkvh/Y7JevYoX82LN8XE
MiU5HCQBc+cwa8bQaXaPpOquwhRGYtirmOCoJuaNQmXFs5Sl1lINThOI6oHyVBsm
jnwgIIXcM5tH0g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:38 2026 by rpki-client