Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: 9D8UDIkmpu/WmiPbB2z51wL/mVG0nHp1ehRykgeW23o=
Subject key identifier: AD:34:71:93:FD:72:0A:27:1B:B2:ED:5E:D7:E7:AA:49:55:48:E5:E7
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 019CADC792EC800D8686D516CE36B87B925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0F3E
Signing time: Mon 02 Mar 2026 09:01:03 +0000
Manifest this update: Mon 02 Mar 2026 09:01:03 +0000
Manifest next update: Tue 03 Mar 2026 09:01:03 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: fhlRPnj9VLa68vMgcFMMQ/l1XK1t1wc0VuzWOMGTFPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:92:ec:80:0d:86:86:d5:16:ce:36:b8:7b:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Mar 2 09:01:03 2026 GMT
Not After : Mar 3 09:01:03 2026 GMT
Subject: CN=ad347193fd720a271bb2ed5ed7e7aa495548e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:57:f8:49:4b:32:9c:f7:c4:4d:48:10:2d:
76:7a:a7:5b:f5:57:76:22:72:20:ba:e8:db:01:dc:
f9:05:91:01:09:23:0a:be:f9:61:c0:5e:97:3a:b5:
75:8e:b1:7f:d6:0c:83:b7:8f:54:de:91:55:68:9f:
8b:44:1b:42:77:10:4f:d3:8a:7b:b9:7f:a7:62:68:
cb:d2:36:03:0a:9a:d2:9b:51:77:24:a3:59:fb:56:
20:63:cb:e9:56:44:57:89:96:53:02:4a:49:36:46:
18:dc:62:77:09:eb:36:30:96:a6:9e:0d:a7:5f:17:
07:2d:a8:80:92:bf:c4:9d:60:ab:45:3e:6e:a2:44:
95:92:b3:eb:81:82:a7:89:5f:1d:aa:99:f1:3a:08:
4e:8e:8c:4e:00:11:df:be:c4:5c:c7:e1:81:e2:e3:
cc:f9:44:d9:5b:b7:ae:3a:37:ea:9d:9a:f4:16:6c:
21:8a:0f:a0:8c:fd:bb:e6:c8:65:45:4d:3d:4a:08:
9d:fd:85:ed:65:4c:eb:a7:55:a2:d5:0c:a3:76:53:
88:f1:64:38:62:5e:0b:ae:a6:2a:df:45:41:54:c6:
74:d0:b7:a2:0f:a0:39:93:2e:9b:f3:2f:19:f9:6d:
a2:1f:24:70:e5:b1:81:96:2b:cd:a6:21:cb:1d:71:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:71:93:FD:72:0A:27:1B:B2:ED:5E:D7:E7:AA:49:55:48:E5:E7
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:23:49:a8:52:37:3c:8a:05:38:6f:cf:a7:bf:ce:0d:36:
5d:19:6a:ac:52:81:03:fa:f3:0c:51:3a:32:4d:5d:c9:9c:3c:
4f:40:49:2d:7d:16:e1:fe:ef:a2:24:46:f3:55:67:bb:4a:93:
b7:0b:c2:47:f3:df:f4:ae:04:0a:3d:af:2d:84:a5:69:66:03:
9d:b0:50:e1:72:b9:88:5a:3e:b8:7a:26:da:35:c2:e7:33:4a:
69:e6:ab:f2:bb:81:53:92:65:59:b8:15:c7:9e:df:34:ea:94:
e3:99:a1:f4:cc:eb:f3:5b:e9:36:97:c6:54:91:5b:78:05:89:
14:db:62:b2:58:25:dd:ba:d6:fc:dd:dc:bd:71:a3:20:48:25:
dd:fd:a3:3b:1b:93:17:b0:8f:2a:ec:10:c1:f0:0b:a5:44:ed:
35:41:72:8c:ae:17:df:09:c1:d9:fc:ab:98:bf:63:42:29:68:
c7:5f:7e:51:2c:72:bb:ab:e1:20:27:36:e8:6a:20:a9:fe:93:
71:79:ba:df:b1:a7:77:55:1c:1b:83:b7:2b:8d:37:08:8a:06:
2c:92:d7:f7:f6:4b:88:98:dd:b0:b7:66:17:e0:1f:2f:ca:ae:
f9:be:6d:ce:40:0b:a2:a4:4e:39:4e:72:e0:f4:4a:8d:c6:81:
cb:f4:ad:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx5LsgA2GhtUWzja4e5JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj
MzUxNTUwHhcNMjYwMzAyMDkwMTAzWhcNMjYwMzAzMDkwMTAzWjAzMTEwLwYDVQQD
EyhhZDM0NzE5M2ZkNzIwYTI3MWJiMmVkNWVkN2U3YWE0OTU1NDhlNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1X+ElLMpz3xE1IEC12eqdb9Vd2
InIguujbAdz5BZEBCSMKvvlhwF6XOrV1jrF/1gyDt49U3pFVaJ+LRBtCdxBP04p7
uX+nYmjL0jYDCprSm1F3JKNZ+1YgY8vpVkRXiZZTAkpJNkYY3GJ3Ces2MJamng2n
XxcHLaiAkr/EnWCrRT5uokSVkrPrgYKniV8dqpnxOghOjoxOABHfvsRcx+GB4uPM
+UTZW7euOjfqnZr0Fmwhig+gjP275shlRU09Sgid/YXtZUzrp1Wi1QyjdlOI8WQ4
Yl4LrqYq30VBVMZ00LeiD6A5ky6b8y8Z+W2iHyRw5bGBlivNpiHLHXFh5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK00cZP9cgonG7LtXtfnqklVSOXnMB8GA1UdIwQY
MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt
N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0
LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYn4jSahS
NzyKBThvz6e/zg02XRlqrFKBA/rzDFE6Mk1dyZw8T0BJLX0W4f7voiRG81Vnu0qT
twvCR/Pf9K4ECj2vLYSlaWYDnbBQ4XK5iFo+uHom2jXC5zNKaear8ruBU5JlWbgV
x57fNOqU45mh9Mzr81vpNpfGVJFbeAWJFNtislgl3brW/N3cvXGjIEgl3f2jOxuT
F7CPKuwQwfALpUTtNUFyjK4X3wnB2fyrmL9jQilox19+USxyu6vhICc26Gogqf6T
cXm637Gnd1UcG4O3K403CIoGLJLX9/ZLiJjdsLdmF+AfL8qu+b5tzkALoqROOU5y
4PRKjcaBy/StkA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:37 2026 by rpki-client