Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: wapT9dbE8GfF95YaGJ8epSZp0SRBtteUGp4LEx5vFzs=
Subject key identifier: 5A:48:14:13:28:8C:A3:97:83:73:AF:D2:BB:3E:B8:1E:1F:1A:9F:5F
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019CA945E5E8CE97FE93398CEACEC9412595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 12:00:56 +0000
Manifest this update: Sun 01 Mar 2026 12:00:56 +0000
Manifest next update: Mon 02 Mar 2026 12:00:56 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: gp06FcdqsoKUEEs146AXO5U+slB7wHDh6hG5wBW3kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:e5:e8:ce:97:fe:93:39:8c:ea:ce:c9:41:25:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Mar 1 12:00:56 2026 GMT
Not After : Mar 2 12:00:56 2026 GMT
Subject: CN=5a481413288ca3978373afd2bb3eb81e1f1a9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:43:fb:ee:01:be:1b:c1:81:b1:8c:aa:db:
5a:6a:72:e6:19:44:7c:36:c5:ae:96:dc:a8:bd:eb:
95:ae:fe:01:f5:b9:73:80:99:4f:71:b2:e6:de:0a:
06:30:94:df:d8:76:74:4f:d9:5c:c4:e9:2d:42:fd:
f3:5b:48:5a:92:71:d6:f2:b8:7a:bb:56:88:fe:89:
7f:c5:74:50:c9:1c:db:2f:46:a1:d2:a2:b2:09:ef:
a4:25:27:11:00:6a:ae:94:56:3e:e7:e6:c7:e4:83:
4e:69:aa:68:b7:9b:d0:f6:1c:0a:70:1d:12:b5:fd:
bd:61:c8:37:ab:4d:e8:cf:b7:13:3d:03:ee:75:6e:
c9:e7:6b:f4:1c:c2:22:a0:93:89:ec:21:10:f5:23:
8f:73:d7:f5:f1:7d:52:9b:63:76:ba:1a:d5:66:8a:
77:dc:29:22:46:4d:94:cb:e7:9f:4d:c1:5d:c8:07:
86:74:e8:a7:b3:f8:61:25:2c:a1:eb:55:3b:08:b3:
0a:fc:cd:cb:da:bc:79:d5:a2:0a:16:51:66:ce:29:
e8:a9:61:93:fa:6e:79:8f:f4:74:d4:a4:64:cd:6e:
63:2a:bf:76:6d:5e:6a:00:c3:24:c5:d1:a2:58:5a:
bb:02:63:49:e7:3c:39:0b:b7:d2:b5:a0:69:7f:26:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:14:13:28:8C:A3:97:83:73:AF:D2:BB:3E:B8:1E:1F:1A:9F:5F
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bd:04:79:8c:16:4f:07:65:c0:b5:10:01:fe:22:c2:e3:87:
05:65:49:25:54:c4:76:18:0a:a0:3b:10:4e:c7:3f:a1:a3:8c:
02:e9:d8:b2:a6:b0:43:f5:33:6f:b8:f4:0a:bf:45:e6:46:21:
fd:2e:92:b0:d9:fd:2a:4d:c7:95:82:68:a0:57:18:91:e3:36:
24:28:e1:9e:b7:f0:d0:92:51:28:86:7f:86:b2:21:9d:38:a9:
3f:d3:71:d7:4b:7a:b1:78:26:3b:c8:b1:65:25:bb:15:56:17:
54:b3:86:6e:c6:cd:17:32:97:1d:1e:ea:fb:26:a7:22:77:49:
ae:77:3b:31:a7:57:f3:63:c1:a5:eb:35:43:0d:dc:52:57:27:
c1:f3:9d:c3:f8:53:ec:ff:a2:6e:ed:d4:aa:dc:ed:bd:f2:66:
a5:c7:45:41:31:f8:96:64:83:da:1d:50:e8:72:ad:d7:5d:29:
11:f8:d8:09:8b:db:db:cd:af:7e:2d:95:c9:cd:43:60:e1:df:
4b:a7:b2:85:0f:35:95:7b:ab:e9:30:fc:c6:29:4e:a7:24:b4:
d8:dc:fe:81:aa:98:3b:cd:0e:92:2e:61:ef:4a:53:31:40:8a:
ca:79:e7:12:4d:db:e4:a1:fe:2d:29:57:72:e8:95:3f:9c:84:
b7:2a:98:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypReXozpf+kzmM6s7JQSWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz
NDhmNDYwHhcNMjYwMzAxMTIwMDU2WhcNMjYwMzAyMTIwMDU2WjAzMTEwLwYDVQQD
Eyg1YTQ4MTQxMzI4OGNhMzk3ODM3M2FmZDJiYjNlYjgxZTFmMWE5ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ilD++4BvhvBgbGMqttaanLmGUR8
NsWultyoveuVrv4B9blzgJlPcbLm3goGMJTf2HZ0T9lcxOktQv3zW0haknHW8rh6
u1aI/ol/xXRQyRzbL0ah0qKyCe+kJScRAGqulFY+5+bH5INOaapot5vQ9hwKcB0S
tf29Ycg3q03oz7cTPQPudW7J52v0HMIioJOJ7CEQ9SOPc9f18X1Sm2N2uhrVZop3
3CkiRk2Uy+efTcFdyAeGdOins/hhJSyh61U7CLMK/M3L2rx51aIKFlFmzinoqWGT
+m55j/R01KRkzW5jKr92bV5qAMMkxdGiWFq7AmNJ5zw5C7fStaBpfyYpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpIFBMojKOXg3Ov0rs+uB4fGp9fMB8GA1UdIwQY
MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt
YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx
LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm70EeYwW
TwdlwLUQAf4iwuOHBWVJJVTEdhgKoDsQTsc/oaOMAunYsqawQ/Uzb7j0Cr9F5kYh
/S6SsNn9Kk3HlYJooFcYkeM2JCjhnrfw0JJRKIZ/hrIhnTipP9Nx10t6sXgmO8ix
ZSW7FVYXVLOGbsbNFzKXHR7q+yanIndJrnc7MadX82PBpes1Qw3cUlcnwfOdw/hT
7P+ibu3UqtztvfJmpcdFQTH4lmSD2h1Q6HKt110pEfjYCYvb282vfi2Vyc1DYOHf
S6eyhQ81lXur6TD8xilOpyS02Nz+gaqYO80Oki5h70pTMUCKynnnEk3b5KH+LSlX
cuiVP5yEtyqYeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:19 2026 by rpki-client