Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: VLpFLmqw65MRxCgs2q1aFgxy+6CUZuLmGKg6yODom3k=
Subject key identifier: D4:8E:8A:FA:93:F5:48:63:03:73:4C:1A:62:CB:22:6A:E3:81:47:C9
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019CAAC6FCEA0348923F52617F3630685D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0E4B
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (hash: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: 02i680IVaxW3pWbn7/L+cH5KWQU3NlzZQqbAy0RhgFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fc:ea:03:48:92:3f:52:61:7f:36:30:68:5d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=d48e8afa93f5486303734c1a62cb226ae38147c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:3e:50:4d:a2:57:cf:63:e5:0f:81:ef:77:
60:b0:69:e3:e6:2f:1e:9c:fc:05:7d:ba:e0:9b:d6:
79:bb:37:62:a1:ca:a4:96:3a:96:7f:e3:95:d0:fc:
8e:cb:be:5d:9d:2b:37:ed:28:c2:73:4c:1b:99:65:
0a:65:64:ea:25:44:b5:4d:20:ef:28:13:7e:a0:d4:
a9:11:6a:03:01:f1:4b:ee:71:fd:97:31:ee:5e:5d:
30:e4:12:f5:dc:0f:39:1a:03:18:22:28:c7:c4:c3:
7e:0d:8c:e6:1b:6a:84:b1:b5:79:ed:31:c8:b1:09:
bf:87:e9:f0:5f:b3:ef:85:aa:d8:7b:69:44:ce:8f:
d6:e2:b8:6d:6a:a6:94:e6:96:c6:03:a9:ca:cf:bb:
b3:c4:81:a9:db:fe:e9:4e:f3:05:b3:f1:bc:3b:c0:
7d:b0:eb:c0:f9:1d:88:bb:b6:81:49:1b:76:b3:8d:
b0:fb:a7:88:88:53:d3:b1:64:69:ce:37:7c:77:e2:
a6:ce:26:bf:6e:d1:dd:a3:d0:3f:7f:82:fd:77:10:
a7:78:6c:39:24:19:a8:14:8d:cc:6f:86:94:f5:48:
cd:e7:5f:b0:2e:e0:89:ec:ef:f4:20:f5:80:0c:8d:
44:1f:90:cc:e9:2a:3e:e5:8f:5b:b6:f7:50:e5:93:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:8A:FA:93:F5:48:63:03:73:4C:1A:62:CB:22:6A:E3:81:47:C9
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ef:2c:f7:a5:2a:51:bc:bb:75:44:ce:b9:e1:f1:38:a7:b7:
29:78:d0:c6:02:5a:8d:46:81:08:9a:3c:32:5f:c0:fc:c1:b9:
b2:e1:57:54:e6:fa:c7:b9:90:27:19:16:26:e7:73:f9:1a:3f:
70:f3:30:0e:b6:fa:49:1a:fa:46:b6:37:df:cc:49:47:f2:e5:
46:0f:af:7e:d5:c0:90:2b:2d:d6:35:f4:6e:79:0c:55:65:2f:
42:a4:f4:18:e6:14:8a:7d:bf:75:04:70:86:de:a5:6b:bf:5f:
88:46:ec:c0:c9:0d:a8:18:27:2a:ee:d3:b1:c0:e5:30:9f:e0:
10:5d:2d:7a:6c:f5:1c:9a:50:89:19:64:56:3c:6f:91:50:24:
0b:72:3e:fa:00:f1:7e:2a:c2:5a:f8:2e:89:cc:62:92:50:b2:
32:2f:7e:3e:d9:2d:b7:81:6d:92:a3:cf:4c:22:1d:10:8a:68:
bd:5c:94:62:9e:3a:ec:9d:ee:ba:85:10:b1:bc:8d:8d:23:4a:
c1:33:fd:88:2f:e2:2e:33:e4:ae:a8:70:cc:bb:fc:f3:af:51:
f6:ef:0a:d7:c6:78:0b:e6:c0:5c:1b:61:da:c1:d3:f2:37:03:
3f:b2:7c:a4:16:8e:bf:65:74:13:76:24:36:dd:27:0f:de:57:
fb:97:61:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvzqA0iSP1JhfzYwaF2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0
NWEyY2MwHhcNMjYwMzAxMTkwMTMzWhcNMjYwMzAyMTkwMTMzWjAzMTEwLwYDVQQD
EyhkNDhlOGFmYTkzZjU0ODYzMDM3MzRjMWE2MmNiMjI2YWUzODE0N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUc+UE2iV89j5Q+B73dgsGnj5i8e
nPwFfbrgm9Z5uzdiocqkljqWf+OV0PyOy75dnSs37SjCc0wbmWUKZWTqJUS1TSDv
KBN+oNSpEWoDAfFL7nH9lzHuXl0w5BL13A85GgMYIijHxMN+DYzmG2qEsbV57THI
sQm/h+nwX7PvharYe2lEzo/W4rhtaqaU5pbGA6nKz7uzxIGp2/7pTvMFs/G8O8B9
sOvA+R2Iu7aBSRt2s42w+6eIiFPTsWRpzjd8d+Kmzia/btHdo9A/f4L9dxCneGw5
JBmoFI3Mb4aU9UjN51+wLuCJ7O/0IPWADI1EH5DM6So+5Y9btvdQ5ZPg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSOivqT9UhjA3NMGmLLImrjgUfJMB8GA1UdIwQY
MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt
ZDBiMTExYmE0MTQ4LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4
LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu8s96Uq
Uby7dUTOueHxOKe3KXjQxgJajUaBCJo8Ml/A/MG5suFXVOb6x7mQJxkWJudz+Ro/
cPMwDrb6SRr6RrY338xJR/LlRg+vftXAkCst1jX0bnkMVWUvQqT0GOYUin2/dQRw
ht6la79fiEbswMkNqBgnKu7TscDlMJ/gEF0temz1HJpQiRlkVjxvkVAkC3I++gDx
firCWvguicxiklCyMi9+Ptktt4FtkqPPTCIdEIpovVyUYp467J3uuoUQsbyNjSNK
wTP9iC/iLjPkrqhwzLv8869R9u8K18Z4C+bAXBth2sHT8jcDP7J8pBaOv2V0E3Yk
Nt0nD95X+5dh1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:56 2026 by rpki-client