Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: eqCskIaugJbSV+Uqz5I6GBJ7HriflbYZmLbKT/yGAl8=
Subject key identifier: 64:95:43:62:43:EB:1A:80:22:B5:00:1A:A8:62:E7:3F:4D:6C:B9:75
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 019CABD91C52A9281A13356EA8B5ABAB3BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 064D
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: ELTCRZ9M8KpO2vQ1PYe37Eg7ziyKO6YhdbIwgNfJX6I=)
2: vRHDe49dNuvNmUAPOcMtSNJoxSk.roa (hash: 5+TSEDtVIZGmMa4KwGaP+zSgVu5+duOGjOl+EoHvBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1c:52:a9:28:1a:13:35:6e:a8:b5:ab:ab:3b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=6495436243eb1a8022b5001aa862e73f4d6cb975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:72:a6:0c:c0:99:8c:59:56:bf:25:7e:09:
49:4d:e3:4d:dd:04:08:a6:8a:4b:cb:22:44:91:35:
d4:cd:0f:d9:52:0b:f4:30:32:7a:80:19:05:f9:bd:
67:6c:ce:10:b6:9a:5f:3e:6f:5e:ee:3a:be:9d:a9:
74:68:0d:4c:23:fa:49:c4:a1:c8:90:b3:af:c5:1c:
69:6a:6f:a7:98:37:5a:27:7d:fe:4a:ee:0d:35:ed:
f0:5a:f7:9f:cc:9d:2d:d7:87:7d:d4:1b:fb:dc:5f:
c8:34:58:6e:a7:a8:f8:0a:04:29:a2:e7:f9:af:10:
84:ed:46:72:3c:9d:be:86:10:e7:e8:83:fb:71:3b:
aa:38:78:7b:41:44:3e:14:c2:30:df:04:1f:4e:e8:
47:fd:ee:2b:7d:0c:ca:12:df:d5:c3:ec:1e:ab:b1:
12:ed:3a:db:51:48:3e:fb:89:92:4b:ba:ee:ac:96:
55:3d:40:b1:7b:f3:5b:ef:82:0d:8e:36:f8:47:5e:
c1:0f:ae:bb:d7:16:eb:56:62:36:d9:df:e2:08:ba:
f0:15:43:43:6b:80:0f:8e:10:24:66:d4:33:95:a1:
88:42:a6:2e:41:52:94:ae:9c:8d:c8:5f:fd:f8:52:
f7:45:a1:7c:91:a0:d0:4b:0a:a1:a3:35:0e:54:bf:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:43:62:43:EB:1A:80:22:B5:00:1A:A8:62:E7:3F:4D:6C:B9:75
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:f4:b5:da:72:83:7d:a6:81:5b:59:ad:1b:c9:b8:68:36:
90:81:85:e3:4f:ab:7b:06:e5:2e:47:99:7d:ea:90:7b:e8:1b:
13:c0:a9:b9:4b:7d:e1:a3:d1:9f:1d:0d:36:6f:88:77:53:92:
17:ed:97:f0:84:7d:13:39:12:1a:56:b7:53:c0:e3:77:3a:28:
bc:52:50:ac:49:0c:2f:58:d3:ab:41:82:5e:76:b2:c7:67:2a:
cc:d1:5a:76:d4:c9:dc:1b:f8:49:c3:f2:3e:4d:9e:c8:fd:ba:
9e:49:f9:17:44:e5:27:eb:87:e8:bd:93:73:81:d2:a6:1a:fb:
0b:c0:2e:eb:00:d5:4a:99:5a:b6:40:dc:e3:9f:e4:6f:aa:0e:
2c:b3:1e:88:94:78:d9:42:62:42:e3:b8:b0:fc:0e:4d:b0:b9:
05:d9:cc:47:dc:c9:60:f6:5a:0f:78:e0:ac:6f:45:dc:39:d6:
cc:30:d9:89:1b:e1:10:9e:f2:bd:ac:7e:28:ca:9c:18:06:c2:
10:c0:2c:d9:24:ef:cc:1f:8a:d0:6d:b8:7a:bf:52:29:42:d1:
34:27:28:57:21:3e:96:2d:64:fe:c8:b4:7a:89:e0:83:41:8b:
df:55:ae:cd:9b:06:e8:ff:3a:0c:7c:91:bb:58:b7:78:54:37:
3f:df:1f:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RxSqSgaEzVuqLWrqzuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGM4ZDUxODZjODc3MTQ1NWJlMTMxYjBjN2NmZDY2ZTdk
Mzg2NTUwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
Eyg2NDk1NDM2MjQzZWIxYTgwMjJiNTAwMWFhODYyZTczZjRkNmNiOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnJypgzAmYxZVr8lfglJTeNN3QQI
popLyyJEkTXUzQ/ZUgv0MDJ6gBkF+b1nbM4QtppfPm9e7jq+nal0aA1MI/pJxKHI
kLOvxRxpam+nmDdaJ33+Su4NNe3wWvefzJ0t14d91Bv73F/INFhup6j4CgQpouf5
rxCE7UZyPJ2+hhDn6IP7cTuqOHh7QUQ+FMIw3wQfTuhH/e4rfQzKEt/Vw+weq7ES
7TrbUUg++4mSS7rurJZVPUCxe/Nb74INjjb4R17BD6671xbrVmI22d/iCLrwFUND
a4APjhAkZtQzlaGIQqYuQVKUrpyNyF/9+FL3RaF8kaDQSwqhozUOVL9U+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSVQ2JD6xqAIrUAGqhi5z9NbLl1MB8GA1UdIwQY
MBaAFCqMjVGGyHcUVb4TGwx8/Wbn04ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAt
MjY5YTUxZGQ4ZDM4LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAtMjY5YTUxZGQ4ZDM4
LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw70tdpy
g32mgVtZrRvJuGg2kIGF40+rewblLkeZfeqQe+gbE8CpuUt94aPRnx0NNm+Id1OS
F+2X8IR9EzkSGla3U8DjdzoovFJQrEkML1jTq0GCXnayx2cqzNFadtTJ3Bv4ScPy
Pk2eyP26nkn5F0TlJ+uH6L2Tc4HSphr7C8Au6wDVSplatkDc45/kb6oOLLMeiJR4
2UJiQuO4sPwOTbC5BdnMR9zJYPZaD3jgrG9F3DnWzDDZiRvhEJ7yvax+KMqcGAbC
EMAs2STvzB+K0G24er9SKULRNCcoVyE+li1k/si0eongg0GL31WuzZsG6P86DHyR
u1i3eFQ3P98fPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:37 2026 by rpki-client