Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: 6IkegFDmBz07z4bfGFv5WwzDid4/kGo+b9NhBHNflzs=
Subject key identifier: 87:CC:AD:F8:9D:95:CA:D9:9D:04:68:E3:96:54:4C:3E:7E:DF:1D:65
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 019CAED9C3FFBBF5991D860F6B93AA710F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 059F
Signing time: Mon 02 Mar 2026 14:00:32 +0000
Manifest this update: Mon 02 Mar 2026 14:00:32 +0000
Manifest next update: Tue 03 Mar 2026 14:00:32 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: z/6HlBdwcWlzWwf539+Pz9QHCSh+X7MBvz2RWMi55QE=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c3:ff:bb:f5:99:1d:86:0f:6b:93:aa:71:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Mar 2 14:00:32 2026 GMT
Not After : Mar 3 14:00:32 2026 GMT
Subject: CN=87ccadf89d95cad99d0468e396544c3e7edf1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:46:0a:a2:b3:74:bf:bf:0e:3b:01:11:5e:
d3:fa:d7:86:82:26:cc:80:49:a6:61:61:4c:0a:74:
a1:4f:2e:06:54:47:f9:42:d6:4a:63:f5:c3:99:72:
d6:e2:ce:d4:96:35:63:c1:43:35:bc:f5:0e:f6:e4:
40:ba:f4:72:44:ee:fd:8a:5f:ab:47:d3:2a:e8:4c:
e3:b3:69:e4:ca:f5:27:2e:ec:bb:f5:6c:e8:eb:e4:
9a:e9:bc:ee:89:3c:b6:b3:1e:e9:89:a3:06:ef:87:
30:c8:5c:c5:6b:a4:bb:84:1b:34:ce:38:f1:d4:07:
62:ed:a0:cd:db:39:56:75:00:3f:17:00:74:29:e8:
b2:e8:73:aa:ec:57:74:20:a3:7b:5b:f7:86:d8:4b:
a5:97:63:84:12:7f:c3:04:0d:03:66:8d:6a:63:0e:
0e:98:a2:ad:5a:38:a5:1b:58:ff:f4:37:3c:c4:8b:
2f:ce:c4:96:2a:00:cf:d2:a2:89:48:b4:db:b6:01:
dd:f7:de:6a:1f:c9:bd:29:99:8d:ba:7b:c6:71:e5:
c9:94:5f:23:e9:e6:24:aa:d7:99:0e:4b:c1:91:3d:
d2:62:9c:b4:ed:e5:13:79:8f:71:f0:65:50:38:98:
09:b1:bb:b2:bb:c8:6e:8c:e3:20:75:a0:72:fd:b6:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:AD:F8:9D:95:CA:D9:9D:04:68:E3:96:54:4C:3E:7E:DF:1D:65
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b2:ef:6d:d1:9d:34:5c:7f:27:78:3e:9e:80:9d:cd:85:65:
cb:07:2c:0c:e8:10:95:81:a3:c8:7e:bc:80:ac:10:94:0f:ed:
d8:c0:b8:d3:20:eb:ba:38:b4:22:76:b4:e5:a6:ad:67:5d:54:
83:ed:c3:7c:50:be:a0:94:e5:46:07:a4:f3:f4:44:0f:7e:13:
43:5c:ad:62:49:db:1b:fa:83:6e:ae:81:c6:51:cb:f1:41:2c:
13:37:d6:54:05:fe:d6:a3:7c:40:5a:cc:4d:bd:69:4e:08:5a:
f3:22:96:20:2e:50:e2:cf:e2:46:50:1a:5c:9c:eb:86:2e:63:
c4:34:d1:9c:92:9d:c0:dd:41:7b:73:9b:cb:c9:dc:cb:4c:6c:
d9:74:f1:2d:2c:64:07:ab:e2:8f:58:55:96:e2:5a:e4:c0:20:
9c:de:76:34:3a:fd:b2:96:50:e2:46:3c:1d:fd:03:f4:c9:42:
5c:14:d8:37:4b:45:66:e3:10:07:78:5f:1a:ff:00:7d:af:fa:
0f:f6:0e:d4:0c:e1:08:74:90:7e:11:ab:e2:17:12:77:e0:dc:
92:dd:27:82:a5:14:e3:5f:63:c3:7e:39:6c:6e:15:de:c4:06:
ec:ae:19:b8:24:05:88:bf:3e:37:e8:b3:ad:dc:b5:b0:a9:1d:
e6:50:04:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2cP/u/WZHYYPa5OqcQ+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDE0MGFkMzk0MTRjNGVhYjAyYWM1NTQyMmI0NDE2M2Vk
MzRiMGYwHhcNMjYwMzAyMTQwMDMyWhcNMjYwMzAzMTQwMDMyWjAzMTEwLwYDVQQD
Eyg4N2NjYWRmODlkOTVjYWQ5OWQwNDY4ZTM5NjU0NGMzZTdlZGYxZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVNGCqKzdL+/DjsBEV7T+teGgibM
gEmmYWFMCnShTy4GVEf5QtZKY/XDmXLW4s7UljVjwUM1vPUO9uRAuvRyRO79il+r
R9Mq6Ezjs2nkyvUnLuy79Wzo6+Sa6bzuiTy2sx7piaMG74cwyFzFa6S7hBs0zjjx
1Adi7aDN2zlWdQA/FwB0Keiy6HOq7Fd0IKN7W/eG2Eull2OEEn/DBA0DZo1qYw4O
mKKtWjilG1j/9Dc8xIsvzsSWKgDP0qKJSLTbtgHd995qH8m9KZmNunvGceXJlF8j
6eYkqteZDkvBkT3SYpy07eUTeY9x8GVQOJgJsbuyu8hujOMgdaBy/bZnFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfMrfidlcrZnQRo45ZUTD5+3x1lMB8GA1UdIwQY
MBaAFCsBQK05QUxOqwKsVUIrRBY+00sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUt
MmU3NTIyOGY5MjYxLzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUtMmU3NTIyOGY5MjYx
LzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrLvbdGd
NFx/J3g+noCdzYVlywcsDOgQlYGjyH68gKwQlA/t2MC40yDruji0Ina05aatZ11U
g+3DfFC+oJTlRgek8/RED34TQ1ytYknbG/qDbq6BxlHL8UEsEzfWVAX+1qN8QFrM
Tb1pTgha8yKWIC5Q4s/iRlAaXJzrhi5jxDTRnJKdwN1Be3Oby8ncy0xs2XTxLSxk
B6vij1hVluJa5MAgnN52NDr9spZQ4kY8Hf0D9MlCXBTYN0tFZuMQB3hfGv8Afa/6
D/YO1AzhCHSQfhGr4hcSd+Dckt0ngqUU419jw345bG4V3sQG7K4ZuCQFiL8+N+iz
rdy1sKkd5lAEdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:28 2026 by rpki-client