Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: JdwC1D1YG0u+H8YinB5+NgG568NV4ak+25Btyd8nJS8=
Subject key identifier: 05:74:AC:19:93:DE:16:E1:78:81:50:6C:07:04:9A:BC:AB:B7:25:DC
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019CAD5A2F4C1ED5BA6DD835D4864B2E623F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:34 +0000
Manifest this update: Mon 02 Mar 2026 07:01:34 +0000
Manifest next update: Tue 03 Mar 2026 07:01:34 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: xGrHljvob2lNVvPinJDe2VdTBzwGHwNaPoHbLR9le5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2f:4c:1e:d5:ba:6d:d8:35:d4:86:4b:2e:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Mar 2 07:01:34 2026 GMT
Not After : Mar 3 07:01:34 2026 GMT
Subject: CN=0574ac1993de16e17881506c07049abcabb725dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:90:eb:ac:58:b6:86:4c:9b:7b:0e:3a:e4:
f9:22:2a:ac:69:5f:9e:ba:56:1f:bf:ca:af:09:6d:
9a:01:2b:cb:93:fe:d9:a7:70:b2:1b:4b:71:19:da:
7d:9d:fa:06:e3:ec:bd:96:e0:f8:a4:35:71:f6:7f:
dd:c2:07:2b:80:d6:47:0f:c1:42:0b:70:72:1c:3b:
58:ed:a4:7e:a0:6b:03:82:99:73:e3:22:e0:15:0d:
0a:82:c2:d5:dc:44:97:59:3f:c7:29:b4:fb:78:fb:
99:75:cc:79:e8:0f:24:f8:f4:55:33:a2:5b:6a:75:
d0:6b:db:86:3d:f2:a6:75:f3:20:7e:c5:4d:69:12:
5c:22:2f:b9:c8:f3:62:5a:8a:7f:c6:6a:c6:16:54:
9c:ce:b7:5e:af:61:38:a8:72:53:5e:9a:0f:76:b2:
69:4c:e5:43:24:3a:fd:c2:e1:f9:91:d3:e8:43:00:
f2:48:f9:46:eb:40:80:e4:77:d6:fd:40:14:b4:03:
25:87:ba:2f:9c:c6:3d:d4:df:8f:ea:85:64:85:c3:
bb:fe:fe:18:d9:51:5a:c5:1f:4d:c3:94:6c:40:dd:
25:e3:52:6d:ce:f7:e1:36:28:29:8c:92:a5:bc:de:
21:aa:2c:1b:d6:54:b8:4a:6b:d1:e7:4a:d7:b8:76:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:AC:19:93:DE:16:E1:78:81:50:6C:07:04:9A:BC:AB:B7:25:DC
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:5d:e6:78:fb:9a:08:9b:9c:0d:32:4c:3f:07:33:0d:f7:
7a:88:50:67:f0:4d:82:5a:f2:01:9d:2a:94:db:16:82:8d:cc:
bc:b6:f1:dc:78:6d:52:e7:e5:94:90:65:c8:ad:cf:00:45:68:
aa:f6:52:c7:6f:da:13:67:f1:0c:3b:20:7d:d7:6c:77:02:34:
d2:1c:7c:96:88:a9:07:22:3e:84:60:97:4b:d6:52:d7:0e:62:
34:c5:d5:d8:70:7b:00:9c:a6:25:6e:33:7d:29:66:cd:4c:0b:
ba:a8:fb:1a:22:4c:1b:95:ff:ac:13:7a:ec:5e:7a:16:60:7f:
a7:6a:87:ea:e3:17:e2:39:a4:3a:36:f9:bc:2f:52:09:07:07:
ce:38:98:8c:9d:2e:4f:c6:16:b5:5c:5c:17:f9:a4:e7:26:07:
8b:56:a5:f6:c1:d5:53:23:f4:4e:2b:53:65:f4:f1:9e:25:84:
5f:72:45:5b:0d:1d:7f:c1:8b:b7:ce:27:7c:53:ec:98:5f:9b:
bf:e1:aa:5b:4e:63:43:c2:70:80:d0:50:57:98:98:67:ac:ad:
16:82:02:37:f3:6c:35:9e:ae:bf:ef:85:2e:da:ed:5c:f0:b4:
49:e9:2f:96:b9:56:f0:da:58:c2:f2:1b:e8:ce:0b:27:69:25:
22:26:65:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWi9MHtW6bdg11IZLLmI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjYwMzAyMDcwMTM0WhcNMjYwMzAzMDcwMTM0WjAzMTEwLwYDVQQD
EygwNTc0YWMxOTkzZGUxNmUxNzg4MTUwNmMwNzA0OWFiY2FiYjcyNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv2Q66xYtoZMm3sOOuT5IiqsaV+e
ulYfv8qvCW2aASvLk/7Zp3CyG0txGdp9nfoG4+y9luD4pDVx9n/dwgcrgNZHD8FC
C3ByHDtY7aR+oGsDgplz4yLgFQ0KgsLV3ESXWT/HKbT7ePuZdcx56A8k+PRVM6Jb
anXQa9uGPfKmdfMgfsVNaRJcIi+5yPNiWop/xmrGFlSczrder2E4qHJTXpoPdrJp
TOVDJDr9wuH5kdPoQwDySPlG60CA5HfW/UAUtAMlh7ovnMY91N+P6oVkhcO7/v4Y
2VFaxR9Nw5RsQN0l41JtzvfhNigpjJKlvN4hqiwb1lS4SmvR50rXuHZIRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV0rBmT3hbheIFQbAcEmryrtyXcMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomJd5nj7
mgibnA0yTD8HMw33eohQZ/BNglryAZ0qlNsWgo3MvLbx3HhtUufllJBlyK3PAEVo
qvZSx2/aE2fxDDsgfddsdwI00hx8loipByI+hGCXS9ZS1w5iNMXV2HB7AJymJW4z
fSlmzUwLuqj7GiJMG5X/rBN67F56FmB/p2qH6uMX4jmkOjb5vC9SCQcHzjiYjJ0u
T8YWtVxcF/mk5yYHi1al9sHVUyP0TitTZfTxniWEX3JFWw0df8GLt84nfFPsmF+b
v+GqW05jQ8JwgNBQV5iYZ6ytFoICN/NsNZ6uv++FLtrtXPC0SekvlrlW8NpYwvIb
6M4LJ2klIiZlmA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:08 2026 by rpki-client