Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: duSaQK7RzwZC10/jscK4XtSFqToSCH3gJ4jZCNiMttU=
Subject key identifier: 13:02:03:1F:09:80:42:00:56:AC:A7:15:97:86:CB:68:65:F1:7B:73
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019CAAFD30B8D11B08053772D04732F14460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 08E1
Signing time: Sun 01 Mar 2026 20:00:45 +0000
Manifest this update: Sun 01 Mar 2026 20:00:45 +0000
Manifest next update: Mon 02 Mar 2026 20:00:45 +0000
Files and hashes: 1: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: r0CDz5GH3nzzsgsrRzsktDVdLM+jAKNoiGnanR4oaxs=)
2: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (hash: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:30:b8:d1:1b:08:05:37:72:d0:47:32:f1:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Mar 1 20:00:45 2026 GMT
Not After : Mar 2 20:00:45 2026 GMT
Subject: CN=1302031f0980420056aca7159786cb6865f17b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:b2:99:80:7e:62:12:3d:66:8c:48:2e:64:
f6:70:5b:f8:e8:18:27:48:7d:aa:f3:b0:ee:30:f8:
c3:6b:a2:3c:aa:47:4d:25:df:48:89:2b:7a:6a:54:
e3:8f:f8:0e:13:1d:37:ae:77:74:58:66:cc:62:15:
e1:b4:e0:78:4c:57:9c:2f:f3:be:07:4d:06:51:74:
17:8f:b5:62:17:44:be:a7:1e:64:a1:79:cb:01:ef:
79:30:33:05:be:1a:20:68:c3:70:5e:e7:ca:4e:d7:
b2:d5:50:b9:9e:ae:fc:1e:52:88:c7:e9:9b:41:6b:
5b:b9:1c:ea:52:c9:82:9c:a2:5d:f0:4c:83:a3:dc:
1a:6f:27:d4:cf:c2:3c:e8:70:be:07:83:ce:28:b1:
d8:2a:22:f1:ca:8e:de:f4:74:00:bf:9d:9a:f3:bf:
90:4b:ef:4e:72:a2:3a:25:f3:a0:5a:26:e5:79:7c:
c1:59:ac:b2:02:60:8e:2c:42:f3:6f:c3:e3:a9:d1:
d9:3f:63:21:a3:61:07:d6:62:0b:60:83:53:a3:e3:
c9:ad:7b:a0:26:db:e6:3c:1a:4d:a2:06:f5:ab:f4:
4a:42:ef:d6:0c:e4:51:1a:59:cf:2e:e7:42:27:86:
bf:9b:e8:2b:e6:16:f0:98:3f:ab:4e:be:3b:54:f9:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:02:03:1F:09:80:42:00:56:AC:A7:15:97:86:CB:68:65:F1:7B:73
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:a7:4d:82:e1:ed:d6:4a:e6:1f:6b:07:1c:9e:84:10:2f:
eb:14:20:b6:de:97:91:33:47:49:8c:31:8e:ea:46:7c:2f:2c:
f9:4f:47:ee:40:1f:a1:5a:77:c8:1c:00:c4:87:64:dc:21:d8:
0c:8f:89:83:f2:55:2f:88:15:e6:86:bf:57:47:49:fa:7c:d8:
55:7a:06:9d:83:a6:ea:da:d4:b5:c0:c4:dd:27:a6:61:6e:fe:
3d:03:ee:0b:74:f3:dc:d9:e1:31:29:6c:c0:4a:21:f1:28:19:
ff:37:80:38:99:57:b2:11:13:d2:c6:c1:fb:65:68:ed:41:38:
5b:23:81:99:be:2f:e5:2c:fb:1d:a8:51:75:18:b3:98:9c:ea:
1e:fd:69:77:e7:87:a3:52:10:fd:ee:f3:39:93:c7:13:cb:f2:
8f:0a:8d:c0:c2:ea:a3:5f:bf:42:b3:39:fb:16:4a:e0:9a:3e:
e0:a3:31:8a:77:1b:6f:96:10:3b:23:ba:c9:98:2d:1f:1f:d0:
22:f9:3f:07:bd:3f:45:d1:0c:73:82:9f:34:d9:9b:35:92:96:
fb:6d:b8:d4:58:7b:7c:e7:3d:c6:37:45:03:3e:90:53:a4:91:
e4:bd:a3:66:f1:af:f5:3a:18:f6:c7:ab:58:7e:86:79:0e:8b:
2a:25:27:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TC40RsIBTdy0Ecy8URgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1
NjA2NmUwHhcNMjYwMzAxMjAwMDQ1WhcNMjYwMzAyMjAwMDQ1WjAzMTEwLwYDVQQD
EygxMzAyMDMxZjA5ODA0MjAwNTZhY2E3MTU5Nzg2Y2I2ODY1ZjE3YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM6ymYB+YhI9ZoxILmT2cFv46Bgn
SH2q87DuMPjDa6I8qkdNJd9IiSt6alTjj/gOEx03rnd0WGbMYhXhtOB4TFecL/O+
B00GUXQXj7ViF0S+px5koXnLAe95MDMFvhogaMNwXufKTtey1VC5nq78HlKIx+mb
QWtbuRzqUsmCnKJd8EyDo9wabyfUz8I86HC+B4POKLHYKiLxyo7e9HQAv52a87+Q
S+9OcqI6JfOgWibleXzBWayyAmCOLELzb8PjqdHZP2Mho2EH1mILYINTo+PJrXug
JtvmPBpNogb1q/RKQu/WDORRGlnPLudCJ4a/m+gr5hbwmD+rTr47VPnHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMCAx8JgEIAVqynFZeGy2hl8XtzMB8GA1UdIwQY
MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt
ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw
LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbanTYLh
7dZK5h9rBxyehBAv6xQgtt6XkTNHSYwxjupGfC8s+U9H7kAfoVp3yBwAxIdk3CHY
DI+Jg/JVL4gV5oa/V0dJ+nzYVXoGnYOm6trUtcDE3SemYW7+PQPuC3Tz3NnhMSls
wEoh8SgZ/zeAOJlXshET0sbB+2Vo7UE4WyOBmb4v5Sz7HahRdRizmJzqHv1pd+eH
o1IQ/e7zOZPHE8vyjwqNwMLqo1+/QrM5+xZK4Jo+4KMxincbb5YQOyO6yZgtHx/Q
Ivk/B70/RdEMc4KfNNmbNZKW+2241Fh7fOc9xjdFAz6QU6SR5L2jZvGv9ToY9ser
WH6GeQ6LKiUn+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:26 2026 by rpki-client