Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: HJvgBslzYitqjp15CLNk9AvfjAKvZKMUGqVYsCpTXfQ=
Subject key identifier: 9A:6C:43:B7:64:33:EE:22:05:78:87:D8:5C:B8:D4:76:1A:1E:FB:8A
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019CAB34B415182AE8B5B1BDC5205A43FEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 070F
Signing time: Sun 01 Mar 2026 21:01:23 +0000
Manifest this update: Sun 01 Mar 2026 21:01:23 +0000
Manifest next update: Mon 02 Mar 2026 21:01:23 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: PV5bTR8PNGqh04Aa7f5K5q8qvG9knSB87yILLZsfxhk=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b4:15:18:2a:e8:b5:b1:bd:c5:20:5a:43:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Mar 1 21:01:23 2026 GMT
Not After : Mar 2 21:01:23 2026 GMT
Subject: CN=9a6c43b76433ee22057887d85cb8d4761a1efb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:ae:2b:cf:90:be:e4:a9:79:a7:c3:87:1b:
f8:e1:6f:2e:22:bd:ed:4d:6e:8a:e1:f7:5e:83:22:
96:3a:37:1c:68:db:a4:cc:a6:69:f8:a0:e2:c1:dd:
24:ef:4a:11:a4:83:33:2e:d4:33:c5:39:d8:7d:3b:
fa:16:50:23:4b:c8:86:e5:e2:0d:9d:a4:eb:67:3d:
18:42:78:66:1d:9b:37:33:4e:2e:e7:4c:8f:c9:57:
6b:25:5c:6d:dd:23:73:e1:1a:66:b1:80:9a:46:b9:
28:a1:0b:21:50:86:53:d9:05:ad:ca:70:e2:23:fb:
cd:47:4c:88:e2:8e:fb:38:d8:8f:a3:99:2e:01:93:
f2:7c:8f:00:7f:a0:4e:82:0a:41:a2:76:6a:47:d4:
7c:05:be:56:2e:79:ae:f2:d6:81:af:63:43:96:10:
88:5f:fd:99:5b:5f:86:24:96:b2:be:a5:5e:30:96:
30:c7:64:a6:ee:fa:71:21:09:c6:d6:fd:12:8e:f2:
18:2b:b4:82:b6:7b:bb:07:15:21:24:66:c3:af:04:
67:26:8d:fe:ae:3c:af:65:af:f0:7d:2c:2b:36:81:
29:52:51:f9:90:f4:77:eb:aa:98:46:eb:1d:ae:2f:
22:60:a8:0e:34:cc:07:85:d2:87:49:f7:2f:fe:37:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:43:B7:64:33:EE:22:05:78:87:D8:5C:B8:D4:76:1A:1E:FB:8A
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:c2:21:a3:1e:c2:4f:99:0c:56:cb:7e:5d:53:c0:6e:e9:
32:71:ad:26:6d:62:bf:bc:6a:c6:c9:34:67:e3:85:9b:a9:e7:
41:0b:33:ae:de:dc:56:fd:7e:66:c1:46:64:f5:ba:b6:89:bc:
43:37:15:71:16:4b:79:49:d4:35:51:24:10:27:8b:d0:aa:14:
87:b5:0f:3d:c6:2c:a5:54:af:4d:b9:de:b6:23:9b:18:2c:4a:
66:24:bf:c2:09:11:9b:cb:60:44:24:3e:c3:d3:ec:92:66:d9:
3b:d5:b4:aa:42:22:29:02:19:50:75:f7:ad:51:44:e3:48:62:
e2:2e:02:19:23:ec:a1:7f:70:10:b9:ac:40:5a:09:14:15:0c:
13:4c:a4:6d:8d:a5:ab:42:ed:c4:0c:6c:e5:be:97:44:5e:c2:
03:a4:b7:c8:c4:d3:f2:78:a2:b2:bf:c4:fe:75:3d:77:52:87:
61:70:b8:7f:f7:78:a6:f4:d8:12:d0:5f:5b:ca:38:d5:0d:57:
cd:75:47:f5:06:66:b7:4e:b1:fc:d7:d9:55:89:5f:98:70:c1:
b8:29:88:b0:43:be:ef:f2:99:b2:3c:c4:8e:99:cc:5f:01:6a:
34:3a:7b:33:fd:46:e8:2a:63:f0:f9:ce:f8:ea:d9:88:4b:91:
ee:a4:11:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNLQVGCrotbG9xSBaQ/6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh
NTYyZmYwHhcNMjYwMzAxMjEwMTIzWhcNMjYwMzAyMjEwMTIzWjAzMTEwLwYDVQQD
Eyg5YTZjNDNiNzY0MzNlZTIyMDU3ODg3ZDg1Y2I4ZDQ3NjFhMWVmYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkmuK8+QvuSpeafDhxv44W8uIr3t
TW6K4fdegyKWOjccaNukzKZp+KDiwd0k70oRpIMzLtQzxTnYfTv6FlAjS8iG5eIN
naTrZz0YQnhmHZs3M04u50yPyVdrJVxt3SNz4RpmsYCaRrkooQshUIZT2QWtynDi
I/vNR0yI4o77ONiPo5kuAZPyfI8Af6BOggpBonZqR9R8Bb5WLnmu8taBr2NDlhCI
X/2ZW1+GJJayvqVeMJYwx2Sm7vpxIQnG1v0SjvIYK7SCtnu7BxUhJGbDrwRnJo3+
rjyvZa/wfSwrNoEpUlH5kPR366qYRusdri8iYKgONMwHhdKHSfcv/jdBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpsQ7dkM+4iBXiH2Fy41HYaHvuKMB8GA1UdIwQY
MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt
NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi
LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4DCIaMe
wk+ZDFbLfl1TwG7pMnGtJm1iv7xqxsk0Z+OFm6nnQQszrt7cVv1+ZsFGZPW6tom8
QzcVcRZLeUnUNVEkECeL0KoUh7UPPcYspVSvTbnetiObGCxKZiS/wgkRm8tgRCQ+
w9PskmbZO9W0qkIiKQIZUHX3rVFE40hi4i4CGSPsoX9wELmsQFoJFBUME0ykbY2l
q0LtxAxs5b6XRF7CA6S3yMTT8niisr/E/nU9d1KHYXC4f/d4pvTYEtBfW8o41Q1X
zXVH9QZmt06x/NfZVYlfmHDBuCmIsEO+7/KZsjzEjpnMXwFqNDp7M/1G6Cpj8PnO
+OrZiEuR7qQRqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:36 2026 by rpki-client