Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: lhiE0WmCp6mdzDndxxBl+XACOf7WRB5ouE5Gpt4TQ5E=
Subject key identifier: 97:C7:44:24:FA:18:68:1C:4C:46:E5:E3:9D:EB:62:09:69:DC:B7:2E
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019CABA1C7033515DFCD048F39C38DE90C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 1219
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: jpHVFj3a9G0+5GyotzAaJG7fUg6uJJxnvTkHd1uvvq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c7:03:35:15:df:cd:04:8f:39:c3:8d:e9:0c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=97c74424fa18681c4c46e5e39deb620969dcb72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:ea:26:e6:32:70:1c:74:00:5e:81:21:d4:
d1:60:5c:b3:58:2d:88:5d:f3:00:3f:3a:e6:d4:46:
fd:08:a6:13:16:5d:c2:06:7e:99:06:d4:1c:93:1c:
b6:d4:a1:48:06:38:1f:08:66:33:9d:15:2e:d1:9f:
d8:b3:1b:c9:49:91:02:e5:6e:b0:4b:ce:a2:39:ad:
f1:be:a6:15:8c:e7:fa:c6:97:6a:40:fb:81:82:be:
5f:48:37:43:36:18:67:1c:10:56:ce:a1:c2:78:3a:
53:65:6d:d9:b1:5e:46:42:48:ae:36:64:6f:27:2a:
91:e6:8c:13:b0:95:77:5d:2e:29:28:72:97:e6:1a:
4a:72:c7:fc:6a:c9:58:9f:e2:44:82:fb:0c:e5:09:
84:a3:2b:b5:dd:61:e0:75:ce:dc:f7:6b:b5:71:ae:
9e:4c:81:22:a9:c7:20:66:6c:ab:12:61:96:66:84:
4e:5f:21:64:74:d3:bd:73:ec:9b:23:d6:31:e2:9e:
3b:ea:35:ec:ba:24:2f:fa:be:0d:03:63:03:84:cf:
69:84:7c:3e:29:28:2d:2c:60:2d:f2:25:03:95:59:
c3:bb:b5:99:07:5d:03:cd:8a:25:6d:b7:1d:b4:9b:
33:e6:ae:bc:c6:82:d2:cb:6c:e5:a0:9e:c3:99:2b:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:44:24:FA:18:68:1C:4C:46:E5:E3:9D:EB:62:09:69:DC:B7:2E
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:34:c7:45:d8:5c:58:5e:d7:8b:51:e4:46:65:f7:c9:63:
1a:a0:38:02:89:44:1f:37:b9:31:34:38:d9:fd:05:aa:16:a6:
df:63:38:88:fd:7b:fd:c1:c7:c9:a0:0f:5c:f4:2f:47:d7:21:
0a:88:e3:a0:4f:d7:5d:04:81:98:a2:b5:37:e3:15:f8:b7:4c:
09:04:32:1c:af:81:39:db:60:42:97:9a:c9:f1:10:04:f4:09:
98:f3:69:20:90:14:10:cf:c6:78:13:b2:bc:8e:9a:4a:42:72:
ce:41:05:8d:d8:bb:69:5c:4c:4c:a0:9d:96:b9:59:cd:de:e0:
5f:db:4a:e1:ce:80:34:ab:1c:63:d3:da:3a:66:d9:ab:c0:af:
3b:39:f6:57:61:7f:05:0b:69:ec:b3:09:b0:33:ae:c2:1f:43:
fb:85:83:0b:b1:86:8c:e2:97:60:48:12:a7:9a:0e:13:db:82:
94:05:2d:f6:19:f9:1d:71:d5:69:11:c8:09:a9:c4:5e:53:1c:
58:4b:a5:c0:2e:58:0d:25:52:0b:3b:56:08:38:33:01:1e:86:
5e:93:9b:58:fd:c0:80:b8:e4:92:31:af:55:a0:41:ec:07:37:
f3:6c:0e:60:fb:37:d3:c0:08:98:e7:2b:e0:dc:6b:49:7b:a8:
fb:5d:57:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroccDNRXfzQSPOcON6QyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjYwMzAxMjMwMDMyWhcNMjYwMzAyMjMwMDMyWjAzMTEwLwYDVQQD
Eyg5N2M3NDQyNGZhMTg2ODFjNGM0NmU1ZTM5ZGViNjIwOTY5ZGNiNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQbqJuYycBx0AF6BIdTRYFyzWC2I
XfMAPzrm1Eb9CKYTFl3CBn6ZBtQckxy21KFIBjgfCGYznRUu0Z/YsxvJSZEC5W6w
S86iOa3xvqYVjOf6xpdqQPuBgr5fSDdDNhhnHBBWzqHCeDpTZW3ZsV5GQkiuNmRv
JyqR5owTsJV3XS4pKHKX5hpKcsf8aslYn+JEgvsM5QmEoyu13WHgdc7c92u1ca6e
TIEiqccgZmyrEmGWZoROXyFkdNO9c+ybI9Yx4p476jXsuiQv+r4NA2MDhM9phHw+
KSgtLGAt8iUDlVnDu7WZB10DzYolbbcdtJsz5q68xoLSy2zloJ7DmSv+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfHRCT6GGgcTEbl453rYglp3LcuMB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCY0x0XY
XFhe14tR5EZl98ljGqA4AolEHze5MTQ42f0Fqham32M4iP17/cHHyaAPXPQvR9ch
CojjoE/XXQSBmKK1N+MV+LdMCQQyHK+BOdtgQpeayfEQBPQJmPNpIJAUEM/GeBOy
vI6aSkJyzkEFjdi7aVxMTKCdlrlZzd7gX9tK4c6ANKscY9PaOmbZq8CvOzn2V2F/
BQtp7LMJsDOuwh9D+4WDC7GGjOKXYEgSp5oOE9uClAUt9hn5HXHVaRHICanEXlMc
WEulwC5YDSVSCztWCDgzAR6GXpObWP3AgLjkkjGvVaBB7Ac382wOYPs308AImOcr
4NxrSXuo+11XaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:11 2026 by rpki-client