Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: ui+iugFtn4j63MZ/4XYDe9WPAYFgb62yRREexWLvUe8=
Subject key identifier: 4B:3F:20:C4:D2:1E:D6:A3:4E:98:9D:02:A5:55:F2:24:D0:68:2F:87
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019CABD9A7C01B428ECE986A6BC9CDB20C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 07CF
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: aTXVLy5nAzzLIehRZrEKD5fOw2LG8Zf27qTsRRMXPA4=)
2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a7:c0:1b:42:8e:ce:98:6a:6b:c9:cd:b2:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=4b3f20c4d21ed6a34e989d02a555f224d0682f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:af:70:95:e2:82:e1:34:97:b0:3e:57:6c:
9d:c0:3e:10:5d:59:4c:ee:c8:3b:98:cc:b1:2c:9a:
df:45:cd:c3:f8:3d:d4:68:33:26:5e:fb:b2:d1:68:
ef:71:b0:db:02:e7:05:67:53:98:ef:4a:8d:0e:d4:
ea:6d:1a:07:d3:59:6a:30:3c:fb:9f:38:77:f3:94:
2a:4f:4d:20:16:53:4a:31:c4:f7:b6:8e:74:18:02:
10:04:f7:83:6c:80:12:55:43:fb:99:cd:d8:2d:f3:
8d:a3:7c:82:ed:c7:6b:9a:dd:5b:1d:0c:6a:9a:85:
67:c7:09:1b:1f:17:22:a0:b2:9e:52:b7:8c:c5:03:
73:07:6a:4d:2a:41:37:0c:a0:81:7c:b7:18:c7:76:
5c:a5:74:60:ae:c3:83:e4:2c:f9:0c:d0:2a:ed:88:
39:e7:0f:f8:2a:f3:58:74:4f:ad:a5:58:74:b2:47:
32:3a:ae:d5:07:f2:21:6e:c7:2c:46:ce:56:b8:75:
41:d7:b3:e5:27:fd:66:83:da:42:95:e4:39:c7:03:
c3:79:ad:2f:49:b0:b7:26:bf:8c:bd:cb:ba:19:fb:
cc:da:28:2e:71:b2:fb:a8:15:38:59:40:f4:b6:a3:
96:18:3e:3d:82:f6:7b:67:f6:7f:3a:69:3b:e0:c5:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:20:C4:D2:1E:D6:A3:4E:98:9D:02:A5:55:F2:24:D0:68:2F:87
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:54:16:f7:18:9f:35:3d:c2:78:a4:c1:66:fd:c1:af:c2:15:
2d:35:ea:bb:3f:3c:95:d2:0f:3c:0a:9e:2e:8d:78:af:02:84:
12:44:3f:07:c2:e1:58:41:6a:63:25:41:7d:82:3c:90:db:e8:
d4:0a:ae:a6:bd:7e:e2:e9:46:50:19:9e:f6:38:f9:90:48:b2:
a5:a4:c1:b4:e8:dc:ba:cf:9a:3d:4a:98:64:37:f2:8d:a1:8c:
d8:e2:3e:dc:5a:82:f5:65:f5:44:c5:79:63:b0:7f:14:58:9b:
50:74:c8:db:b6:a6:e5:ad:24:1f:f1:99:02:4b:df:d1:fa:4e:
d5:92:96:40:c1:5b:2f:36:99:ea:ba:a7:89:2f:2e:cb:92:c4:
2e:e8:f5:33:8d:6d:84:ca:62:2c:50:81:fa:bf:81:77:0f:72:
86:90:58:1c:9f:7d:cf:f2:bf:6d:38:5c:24:8a:08:0b:de:69:
11:d2:bd:7c:e5:89:4b:69:17:2c:87:2c:16:ad:b6:5a:92:e2:
20:0d:98:7d:78:02:e1:6e:45:b7:87:54:1f:29:74:b1:96:02:
7a:d9:ca:5a:92:d9:13:31:59:91:a3:68:70:e4:c2:d0:2f:dd:
50:9b:da:45:57:30:6e:c1:2d:a9:e6:0c:f5:cb:33:58:d3:58:
6a:d3:76:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2afAG0KOzphqa8nNsgwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk
OWZmMmYwHhcNMjYwMzAyMDAwMTM0WhcNMjYwMzAzMDAwMTM0WjAzMTEwLwYDVQQD
Eyg0YjNmMjBjNGQyMWVkNmEzNGU5ODlkMDJhNTU1ZjIyNGQwNjgyZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvSvcJXiguE0l7A+V2ydwD4QXVlM
7sg7mMyxLJrfRc3D+D3UaDMmXvuy0WjvcbDbAucFZ1OY70qNDtTqbRoH01lqMDz7
nzh385QqT00gFlNKMcT3to50GAIQBPeDbIASVUP7mc3YLfONo3yC7cdrmt1bHQxq
moVnxwkbHxcioLKeUreMxQNzB2pNKkE3DKCBfLcYx3ZcpXRgrsOD5Cz5DNAq7Yg5
5w/4KvNYdE+tpVh0skcyOq7VB/IhbscsRs5WuHVB17PlJ/1mg9pCleQ5xwPDea0v
SbC3Jr+Mvcu6GfvM2igucbL7qBU4WUD0tqOWGD49gvZ7Z/Z/Omk74MXqvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs/IMTSHtajTpidAqVV8iTQaC+HMB8GA1UdIwQY
MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt
ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3
LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlQW9xif
NT3CeKTBZv3Br8IVLTXquz88ldIPPAqeLo14rwKEEkQ/B8LhWEFqYyVBfYI8kNvo
1Aqupr1+4ulGUBme9jj5kEiypaTBtOjcus+aPUqYZDfyjaGM2OI+3FqC9WX1RMV5
Y7B/FFibUHTI27am5a0kH/GZAkvf0fpO1ZKWQMFbLzaZ6rqniS8uy5LELuj1M41t
hMpiLFCB+r+Bdw9yhpBYHJ99z/K/bThcJIoIC95pEdK9fOWJS2kXLIcsFq22WpLi
IA2YfXgC4W5Ft4dUHyl0sZYCetnKWpLZEzFZkaNocOTC0C/dUJvaRVcwbsEtqeYM
9cszWNNYatN21Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:24 2026 by rpki-client