Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: Carbv3Sn/zIlX44IW5Z4xefIynPpOg/zAqpY6HGvtQA=
Subject key identifier: 50:0D:A6:65:7E:0F:C2:88:0E:F1:A1:F3:E5:24:46:C0:8B:DE:1C:9D
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019CAA586A743440208DB6599E6EEA65FFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 11A2
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: 1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (hash: 1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: DqWfCVZ2Lw+HqBE2xULhp1lcIHvLz0CARYxkNn9x0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6a:74:34:40:20:8d:b6:59:9e:6e:ea:65:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=500da6657e0fc2880ef1a1f3e52446c08bde1c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:f8:0b:c1:f8:68:e8:19:f8:1f:2e:0e:98:
9a:80:b0:7c:06:25:d8:b7:da:f5:ca:e9:f1:08:b9:
70:a6:c3:12:87:be:66:8a:65:4c:7f:7f:da:c2:31:
4a:d8:9e:f2:1e:7f:b9:40:fa:b8:35:94:d5:de:c5:
63:5b:f9:f8:63:fe:c6:89:2b:1f:f9:01:2c:62:c3:
3d:2e:87:5d:dd:77:ed:57:e0:2a:c1:98:fa:54:99:
b3:97:be:7a:b8:fb:6a:6e:4b:c8:8f:70:f2:cd:a6:
ad:f9:bc:25:8b:56:2a:54:77:2d:4d:a9:e2:e2:97:
50:26:87:b9:02:1e:58:4c:99:59:8f:e2:87:c6:e9:
f6:82:87:b0:29:5e:56:31:cf:44:e5:24:3c:b5:d9:
2e:c8:89:9c:53:61:96:fb:12:ad:2e:c3:39:2b:35:
fe:d5:34:42:49:5c:99:62:f4:cf:92:52:b4:62:9d:
91:33:c2:25:39:fa:63:ac:9b:8a:09:b5:c6:de:c3:
c6:3e:ab:0b:c0:8a:ef:08:53:f3:4b:02:5a:1b:a0:
8e:c7:46:1b:1a:4c:25:a8:72:99:1e:71:13:b1:c0:
a3:5d:d3:6a:0e:d2:8b:1e:d4:93:e8:a2:fc:4f:42:
c5:11:30:ad:7e:e7:52:b3:a5:02:1b:3d:7a:bb:a7:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:A6:65:7E:0F:C2:88:0E:F1:A1:F3:E5:24:46:C0:8B:DE:1C:9D
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:16:4e:53:cb:e3:df:da:17:2e:c2:23:66:c1:1d:86:4d:
ca:87:5f:e7:bc:05:db:37:a0:e3:13:41:6c:c8:72:30:d3:ff:
21:2c:6b:2b:31:2f:45:84:38:72:42:f3:31:dd:c3:bc:e8:bd:
b7:69:82:f5:de:58:ae:86:3a:6e:26:71:a5:70:6a:17:32:2f:
16:2a:0e:55:db:47:54:15:1d:28:2c:84:7e:11:bf:2c:b7:0d:
2e:f9:f1:f6:91:2f:f6:fd:67:35:7f:7f:56:a2:5e:db:bb:d7:
f3:20:2b:64:2e:ba:fc:92:d6:d4:21:b0:77:ff:56:08:cf:c2:
ee:17:54:0f:e3:ad:80:f9:c8:b5:86:92:50:1e:87:ce:8c:c9:
04:85:a0:91:6b:3c:6f:45:dd:18:3a:30:88:16:cc:52:c7:a3:
a2:b9:c1:88:e1:d2:e1:48:20:ea:60:df:34:0e:2e:f7:78:dd:
86:af:5c:16:e3:48:01:48:06:10:46:bf:58:85:0f:09:ea:c9:
55:e0:9a:23:41:ce:4b:9a:35:1c:13:cd:d2:d3:56:be:01:c2:
84:29:bc:bf:6f:f6:49:ae:e3:6c:43:40:bb:d2:43:fc:7b:f5:
53:36:f1:f4:fe:7c:88:05:75:28:b4:7f:9e:5b:40:89:0c:b1:
bc:69:50:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGp0NEAgjbZZnm7qZf/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0
ZGIzNWUwHhcNMjYwMzAxMTcwMDQ2WhcNMjYwMzAyMTcwMDQ2WjAzMTEwLwYDVQQD
Eyg1MDBkYTY2NTdlMGZjMjg4MGVmMWExZjNlNTI0NDZjMDhiZGUxYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdv4C8H4aOgZ+B8uDpiagLB8BiXY
t9r1yunxCLlwpsMSh75mimVMf3/awjFK2J7yHn+5QPq4NZTV3sVjW/n4Y/7GiSsf
+QEsYsM9Lodd3XftV+AqwZj6VJmzl756uPtqbkvIj3Dyzaat+bwli1YqVHctTani
4pdQJoe5Ah5YTJlZj+KHxun2goewKV5WMc9E5SQ8tdkuyImcU2GW+xKtLsM5KzX+
1TRCSVyZYvTPklK0Yp2RM8IlOfpjrJuKCbXG3sPGPqsLwIrvCFPzSwJaG6COx0Yb
GkwlqHKZHnETscCjXdNqDtKLHtST6KL8T0LFETCtfudSs6UCGz16u6dNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFANpmV+D8KIDvGh8+UkRsCL3hydMB8GA1UdIwQY
MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt
NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz
LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTUWTlPL
49/aFy7CI2bBHYZNyodf57wF2zeg4xNBbMhyMNP/ISxrKzEvRYQ4ckLzMd3DvOi9
t2mC9d5YroY6biZxpXBqFzIvFioOVdtHVBUdKCyEfhG/LLcNLvnx9pEv9v1nNX9/
VqJe27vX8yArZC66/JLW1CGwd/9WCM/C7hdUD+OtgPnItYaSUB6HzozJBIWgkWs8
b0XdGDowiBbMUsejornBiOHS4Ugg6mDfNA4u93jdhq9cFuNIAUgGEEa/WIUPCerJ
VeCaI0HOS5o1HBPN0tNWvgHChCm8v2/2Sa7jbENAu9JD/Hv1Uzbx9P58iAV1KLR/
nltAiQyxvGlQaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:21 2026 by rpki-client