Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: 9CAgVdvLopuUk+M8iG3e2JkOa3hhSiO0Kg8QKFZHJu0=
Subject key identifier: 4A:54:31:22:E8:CA:A4:5B:7C:07:0D:3D:71:9D:D8:3A:58:1D:66:78
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019CAB341842647AFB5645408FB641D99238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: Rkx/98T1kOSpWOvpTpcIpaq+gD0WCOZ7oA/Vp680cy0=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:18:42:64:7a:fb:56:45:40:8f:b6:41:d9:92:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=4a543122e8caa45b7c070d3d719dd83a581d6678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:a0:e0:e2:6d:93:f6:bb:d4:71:5f:d4:d1:
73:2f:b4:2e:8f:82:99:f1:0f:e3:4f:0f:15:89:d1:
4e:6e:7d:35:dc:41:bd:d9:f2:29:3a:d8:9d:38:df:
58:76:0e:86:ae:3f:44:70:06:25:35:b9:cd:87:df:
da:65:2a:5d:ae:63:68:bc:23:c8:fe:68:76:01:69:
8a:9c:aa:63:6f:9b:a0:cd:84:a2:19:a4:4b:41:c5:
79:e7:d2:ca:8d:95:a0:48:06:41:af:98:bf:95:30:
86:88:53:57:38:e4:05:cf:64:dd:02:03:9a:d1:fe:
72:48:e7:d7:3b:9a:01:7b:bf:8e:bb:96:c9:ed:93:
3b:37:5c:53:ff:fa:2d:43:7d:08:4a:34:34:cf:db:
9e:d3:76:e8:9c:12:c0:6e:0a:07:b3:69:80:69:84:
01:c3:c7:e8:ed:94:52:32:3c:4f:bd:08:45:99:ef:
53:bd:4a:91:2e:0e:c2:64:fe:95:1d:12:48:38:ff:
3c:39:2a:35:a8:1b:3e:4e:05:90:ea:af:7e:e8:03:
af:0a:71:dc:93:f6:29:ad:40:79:e5:24:99:cb:e5:
07:70:a3:5a:c5:9c:01:e3:8c:b0:ec:dd:bd:83:41:
45:17:3f:7c:40:14:a1:2c:ab:7e:38:f5:2a:38:93:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:31:22:E8:CA:A4:5B:7C:07:0D:3D:71:9D:D8:3A:58:1D:66:78
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9d:4a:d4:bc:17:da:77:b7:51:d1:fb:e7:a3:ee:0e:77:5e:
e9:94:88:95:3b:fc:24:56:9c:25:ab:81:76:50:fa:2d:1a:3d:
76:33:1c:1b:6b:7b:6e:63:4c:3b:f1:1c:da:02:fa:f0:40:b4:
3b:a7:7e:46:b4:4e:d7:7d:72:71:8a:95:70:f9:da:a0:ac:e6:
bd:ee:92:3a:d5:b3:dd:91:0c:db:6b:d7:77:33:24:8f:e3:37:
90:09:08:14:49:82:5d:19:76:30:92:37:3c:46:ed:80:c0:f5:
e3:b9:b9:24:83:0a:93:6e:10:4c:68:7e:3d:9f:a4:72:87:4c:
f7:df:64:e4:c2:21:ce:21:c7:18:15:15:e7:33:85:09:65:33:
ad:3e:b0:65:6b:42:99:9f:74:a4:cd:a3:6c:0c:2b:df:ee:e6:
2f:88:40:1e:8c:6a:81:fa:b7:fd:e8:f4:d8:d5:43:77:c4:87:
26:88:48:be:aa:48:34:dc:eb:cd:9c:2b:06:56:b3:1a:45:fc:
9d:83:ac:f4:02:cf:b8:b2:ce:fd:32:73:65:93:0d:07:a9:45:
48:cc:bb:fa:ef:59:21:f2:62:69:59:9d:94:79:bf:97:cd:74:
94:83:5a:4f:fb:8d:30:63:66:db:54:b3:99:68:08:28:cb:51:
67:78:8e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBhCZHr7VkVAj7ZB2ZI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm
NmM3M2IwHhcNMjYwMzAxMjEwMDQzWhcNMjYwMzAyMjEwMDQzWjAzMTEwLwYDVQQD
Eyg0YTU0MzEyMmU4Y2FhNDViN2MwNzBkM2Q3MTlkZDgzYTU4MWQ2Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujag4OJtk/a71HFf1NFzL7Quj4KZ
8Q/jTw8VidFObn013EG92fIpOtidON9Ydg6Grj9EcAYlNbnNh9/aZSpdrmNovCPI
/mh2AWmKnKpjb5ugzYSiGaRLQcV559LKjZWgSAZBr5i/lTCGiFNXOOQFz2TdAgOa
0f5ySOfXO5oBe7+Ou5bJ7ZM7N1xT//otQ30ISjQ0z9ue03bonBLAbgoHs2mAaYQB
w8fo7ZRSMjxPvQhFme9TvUqRLg7CZP6VHRJIOP88OSo1qBs+TgWQ6q9+6AOvCnHc
k/YprUB55SSZy+UHcKNaxZwB44yw7N29g0FFFz98QBShLKt+OPUqOJOYbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpUMSLoyqRbfAcNPXGd2DpYHWZ4MB8GA1UdIwQY
MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt
NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx
LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp1K1LwX
2ne3UdH756PuDnde6ZSIlTv8JFacJauBdlD6LRo9djMcG2t7bmNMO/Ec2gL68EC0
O6d+RrRO131ycYqVcPnaoKzmve6SOtWz3ZEM22vXdzMkj+M3kAkIFEmCXRl2MJI3
PEbtgMD147m5JIMKk24QTGh+PZ+kcodM999k5MIhziHHGBUV5zOFCWUzrT6wZWtC
mZ90pM2jbAwr3+7mL4hAHoxqgfq3/ej02NVDd8SHJohIvqpINNzrzZwrBlazGkX8
nYOs9ALPuLLO/TJzZZMNB6lFSMy7+u9ZIfJiaVmdlHm/l810lINaT/uNMGNm21Sz
mWgIKMtRZ3iOag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:20 2026 by rpki-client