Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: C7xSygo2FM3VqiTxgWr5xiQDOFIl8tu4OoMYHXt/Fec=
Subject key identifier: 27:B6:AB:FA:D2:92:C0:A1:71:EC:7A:6D:DF:11:C6:89:DA:98:DD:40
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019CAB348FEEC8E10A12811421A360834985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: cOO1ZRddIZMTvUAGQK39NRLcKdYEh90oiDDEDh+SL64=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8f:ee:c8:e1:0a:12:81:14:21:a3:60:83:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=27b6abfad292c0a171ec7a6ddf11c689da98dd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:13:8c:77:14:02:8d:70:65:7a:ee:50:44:
f5:d5:5b:7d:93:56:ff:34:8f:88:fe:0a:39:7d:33:
84:c5:42:7d:ad:55:33:04:15:eb:01:a3:e9:33:34:
5a:9f:38:c1:1b:c6:9a:44:f1:bf:3d:a3:b4:cc:5e:
1e:4e:a0:3a:0f:46:2f:13:43:41:24:20:27:52:81:
fd:f6:ab:a7:99:d3:a7:46:61:fa:b7:51:2f:97:fd:
44:f3:9f:68:9f:58:ab:cd:4a:2b:a4:93:b7:4a:f2:
57:02:70:35:22:9f:bd:62:39:71:d6:9a:40:30:58:
c8:6f:be:aa:84:de:21:a9:da:8f:ac:f3:b0:97:da:
21:13:7a:d5:17:5d:93:7d:a7:6b:48:7a:11:a6:6a:
2d:6b:fc:b1:47:b9:e7:c6:83:c8:ab:80:1a:3e:dd:
e9:9f:3f:19:1a:3d:fa:47:da:67:ef:8b:2c:9d:92:
ed:25:ad:c0:e3:c2:aa:10:30:ee:21:d2:05:25:ff:
2a:6c:34:f8:91:8a:fa:e9:6e:20:d6:e0:bf:0e:b8:
96:e6:f4:ac:bf:b0:b5:eb:ed:f4:2a:8b:fc:54:3f:
93:88:e2:cc:d2:c5:26:fa:4c:89:90:e0:b2:b5:4f:
4f:78:ed:2d:87:91:52:98:f9:d6:fa:b9:8a:c3:2d:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:AB:FA:D2:92:C0:A1:71:EC:7A:6D:DF:11:C6:89:DA:98:DD:40
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:64:98:9e:7e:08:4a:e7:ce:db:fc:6f:0f:99:e7:d6:aa:
81:f5:b8:f7:c9:cf:0f:de:6a:a0:f0:e2:a5:a0:da:58:a7:8c:
bc:6a:f9:1c:46:6a:96:5d:57:1b:b1:9a:d7:d3:23:f4:33:ff:
80:68:2e:13:e6:01:24:f8:6a:40:88:2f:32:57:6f:01:d3:a4:
0f:2c:7f:76:59:b0:fd:7f:eb:0f:44:37:36:49:df:88:1f:13:
80:bb:d5:af:a1:e6:a8:16:a5:57:13:3d:ec:a6:1f:46:22:a4:
7b:46:57:b8:da:70:dc:98:c8:27:96:11:8b:87:fa:d2:c0:48:
ca:42:47:7d:c3:b4:1c:09:62:d8:40:43:3f:06:25:aa:88:fc:
37:c4:08:67:95:0b:e2:34:c1:dd:6f:1f:63:98:5d:9c:ee:3d:
d3:c9:c9:b0:90:18:eb:3b:3e:9e:03:df:24:11:c5:ae:b7:34:
a7:58:9e:a1:d7:52:fe:2f:1e:27:58:b8:40:0f:eb:7d:ca:b5:
ea:bc:24:5c:5b:86:5a:fa:9a:08:88:c0:db:e3:39:8a:c0:f5:
c3:5d:c3:57:e4:51:8b:ed:c4:5a:15:c9:3c:23:6a:76:47:45:
2e:eb:a6:aa:02:17:ad:e2:e9:d0:65:5c:19:75:5d:b6:c4:1d:
af:04:62:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNI/uyOEKEoEUIaNgg0mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5
MTUxODEwHhcNMjYwMzAxMjEwMTE0WhcNMjYwMzAyMjEwMTE0WjAzMTEwLwYDVQQD
EygyN2I2YWJmYWQyOTJjMGExNzFlYzdhNmRkZjExYzY4OWRhOThkZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQsTjHcUAo1wZXruUET11Vt9k1b/
NI+I/go5fTOExUJ9rVUzBBXrAaPpMzRanzjBG8aaRPG/PaO0zF4eTqA6D0YvE0NB
JCAnUoH99qunmdOnRmH6t1Evl/1E859on1irzUorpJO3SvJXAnA1Ip+9Yjlx1ppA
MFjIb76qhN4hqdqPrPOwl9ohE3rVF12TfadrSHoRpmota/yxR7nnxoPIq4AaPt3p
nz8ZGj36R9pn74ssnZLtJa3A48KqEDDuIdIFJf8qbDT4kYr66W4g1uC/DriW5vSs
v7C16+30Kov8VD+TiOLM0sUm+kyJkOCytU9PeO0th5FSmPnW+rmKwy29aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe2q/rSksChcex6bd8RxonamN1AMB8GA1UdIwQY
MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt
MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2
LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFlkmJ5+
CErnztv8bw+Z59aqgfW498nPD95qoPDipaDaWKeMvGr5HEZqll1XG7Ga19Mj9DP/
gGguE+YBJPhqQIgvMldvAdOkDyx/dlmw/X/rD0Q3NknfiB8TgLvVr6HmqBalVxM9
7KYfRiKke0ZXuNpw3JjIJ5YRi4f60sBIykJHfcO0HAli2EBDPwYlqoj8N8QIZ5UL
4jTB3W8fY5hdnO4908nJsJAY6zs+ngPfJBHFrrc0p1ieoddS/i8eJ1i4QA/rfcq1
6rwkXFuGWvqaCIjA2+M5isD1w13DV+RRi+3EWhXJPCNqdkdFLuumqgIXreLp0GVc
GXVdtsQdrwRiQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:41 2026 by rpki-client