Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: lArRivTywg48A7lGMs8PX06Qg0A8CRGQvtH2iYgSzBM=
Subject key identifier: E8:C7:AC:61:4F:F7:8F:CB:4C:06:20:DB:65:45:C0:3C:50:EC:A7:7F
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019CACB46FEC053BD4E02CCE342AF635902F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:00:31 +0000
Manifest this update: Mon 02 Mar 2026 04:00:31 +0000
Manifest next update: Tue 03 Mar 2026 04:00:31 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: JUb83upR4FUy4R/4kD/eACh0YDAeWr4Riuyt4JVIReU=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6f:ec:05:3b:d4:e0:2c:ce:34:2a:f6:35:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Mar 2 04:00:31 2026 GMT
Not After : Mar 3 04:00:31 2026 GMT
Subject: CN=e8c7ac614ff78fcb4c0620db6545c03c50eca77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:5c:d8:43:94:e2:6b:02:4b:6f:5b:f3:25:
7a:42:ed:9e:8f:49:2c:aa:50:d6:92:75:98:bc:1e:
9b:6e:ee:c2:0d:dd:9a:1f:71:9a:87:f2:7f:47:05:
9d:d4:5b:0e:14:a5:05:14:45:07:eb:db:ff:84:a3:
82:91:5a:20:9b:02:9a:54:a8:6d:51:75:6b:73:18:
e8:44:5b:b9:3a:fb:dc:ec:46:08:f7:07:ed:16:20:
16:cf:72:41:a7:15:92:9a:02:0e:d7:5d:19:c2:fe:
3c:09:23:e0:02:82:77:4f:a7:66:d5:76:16:b4:d3:
76:86:d7:ca:40:0e:08:04:51:5c:06:64:7f:e6:cd:
7d:8f:02:f8:a6:aa:31:17:ab:db:f0:44:88:68:af:
e2:0c:e0:36:a4:7a:d8:9f:04:7b:1c:ce:49:c5:ed:
1d:d8:87:73:fc:9c:82:2f:36:6c:5f:39:a9:df:5c:
da:76:6a:c3:76:05:f7:0f:4c:f5:f2:a1:f7:e8:e2:
c5:e1:e6:fe:c7:81:f1:89:0f:0c:78:5f:b4:c9:0b:
d1:7d:06:8f:96:b7:9c:81:c4:3d:6d:6a:58:72:72:
8f:fa:6c:88:21:68:df:d1:1a:54:ec:5c:2b:b6:11:
70:80:d0:59:6d:24:de:db:fa:57:b8:19:74:0b:58:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:AC:61:4F:F7:8F:CB:4C:06:20:DB:65:45:C0:3C:50:EC:A7:7F
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:05:76:45:9b:ae:1e:a1:21:a3:21:ef:ba:ae:fd:b7:3b:
14:c2:85:d6:6d:5b:cb:c8:3c:64:fa:ec:5b:84:c2:6e:01:2e:
bf:11:cf:48:3f:d6:a6:20:fc:9c:5a:0d:56:a8:4a:cf:a7:ce:
21:bd:d8:f0:88:64:f6:4d:ea:71:c2:b7:bb:a0:70:ce:4e:73:
9d:11:ca:11:cc:99:22:44:d7:1e:26:24:51:7b:34:2e:93:9b:
a4:d7:8e:7e:9b:f6:78:02:47:e9:e6:8e:e1:ea:8f:de:13:3f:
e9:72:43:18:48:2e:6c:54:38:a4:fd:bc:2d:a8:6d:0c:6a:5e:
1e:12:c0:6c:fd:c5:db:aa:01:41:ea:a3:01:f4:73:2c:e1:31:
db:e9:4e:50:be:04:f2:8c:f2:85:cb:f4:67:de:38:4b:cb:c2:
7e:74:9a:e3:13:ed:16:cd:8f:0a:96:2a:df:45:9e:84:43:fc:
f7:82:c9:9d:58:92:59:4f:60:bb:40:3b:d4:b1:55:17:42:5c:
2f:65:66:e5:08:7a:ed:70:5e:8a:67:ef:c4:54:0a:43:3e:ab:
db:4a:0d:50:17:fd:b7:df:17:b4:f0:47:62:6b:4f:3c:a2:ec:
9f:f9:2c:c7:38:fe:fd:41:eb:7d:71:4e:39:f8:d4:15:df:a5:
e2:33:bd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystG/sBTvU4CzONCr2NZAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3
YTI1NjYwHhcNMjYwMzAyMDQwMDMxWhcNMjYwMzAzMDQwMDMxWjAzMTEwLwYDVQQD
EyhlOGM3YWM2MTRmZjc4ZmNiNGMwNjIwZGI2NTQ1YzAzYzUwZWNhNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD9c2EOU4msCS29b8yV6Qu2ej0ks
qlDWknWYvB6bbu7CDd2aH3Gah/J/RwWd1FsOFKUFFEUH69v/hKOCkVogmwKaVKht
UXVrcxjoRFu5Ovvc7EYI9wftFiAWz3JBpxWSmgIO110Zwv48CSPgAoJ3T6dm1XYW
tNN2htfKQA4IBFFcBmR/5s19jwL4pqoxF6vb8ESIaK/iDOA2pHrYnwR7HM5Jxe0d
2Idz/JyCLzZsXzmp31zadmrDdgX3D0z18qH36OLF4eb+x4HxiQ8MeF+0yQvRfQaP
lrecgcQ9bWpYcnKP+myIIWjf0RpU7FwrthFwgNBZbSTe2/pXuBl0C1h4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjHrGFP94/LTAYg22VFwDxQ7Kd/MB8GA1UdIwQY
MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt
OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz
LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIywFdkWb
rh6hIaMh77qu/bc7FMKF1m1by8g8ZPrsW4TCbgEuvxHPSD/WpiD8nFoNVqhKz6fO
Ib3Y8Ihk9k3qccK3u6Bwzk5znRHKEcyZIkTXHiYkUXs0LpObpNeOfpv2eAJH6eaO
4eqP3hM/6XJDGEgubFQ4pP28LahtDGpeHhLAbP3F26oBQeqjAfRzLOEx2+lOUL4E
8ozyhcv0Z944S8vCfnSa4xPtFs2PCpYq30WehEP894LJnViSWU9gu0A71LFVF0Jc
L2Vm5Qh67XBeimfvxFQKQz6r20oNUBf9t98XtPBHYmtPPKLsn/ksxzj+/UHrfXFO
OfjUFd+l4jO9pA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:47 2026 by rpki-client