Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: +wigGjoWb1C6K8ccXe6w2LYtUL54QZehsWIfVym90oI=
Subject key identifier: 2A:7D:C2:60:8A:6C:D8:9D:C2:9F:29:66:D2:39:9B:3F:90:46:EC:A4
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019CA94637F156D3D61D24A2E354298CE22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 12:01:17 +0000
Manifest this update: Sun 01 Mar 2026 12:01:17 +0000
Manifest next update: Mon 02 Mar 2026 12:01:17 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: q8OnzDLxa5pqXytJ+u7Cux4hdKgTfwC7xud6+H/+bZY=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:37:f1:56:d3:d6:1d:24:a2:e3:54:29:8c:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Mar 1 12:01:17 2026 GMT
Not After : Mar 2 12:01:17 2026 GMT
Subject: CN=2a7dc2608a6cd89dc29f2966d2399b3f9046eca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:5a:73:17:71:09:67:64:ee:58:20:e9:ef:
e3:5b:2d:3e:0f:5c:2a:97:f6:71:ce:ab:29:e9:02:
8c:1c:d3:f0:2b:82:5b:06:c9:48:3d:3c:e1:0e:5a:
ca:e5:5e:c9:11:41:c0:68:f3:55:2a:32:17:a5:82:
8d:47:40:ee:09:35:9f:e6:92:c8:0b:7a:cc:a0:b4:
a8:25:c5:eb:5f:7a:90:b2:51:ba:fa:47:2f:f9:85:
65:4a:62:d1:34:09:20:ad:54:80:a4:27:36:88:4d:
c2:95:be:87:ea:09:46:73:f4:47:d8:1a:3b:37:40:
40:1b:a4:f6:a3:0d:ca:3b:96:6b:ea:6b:91:6c:14:
15:cc:f4:52:07:79:31:81:64:69:57:39:d8:f4:7c:
e8:a5:64:87:cc:75:44:98:a3:2f:a1:b2:fa:d6:b9:
e3:59:b1:16:e5:3f:1e:bf:39:1a:4b:5e:e8:63:f2:
89:50:b3:de:be:8e:d3:e6:be:89:92:ee:da:95:fe:
f6:87:22:84:eb:8d:f9:ef:66:78:e2:52:c1:79:a1:
29:fb:57:cb:4f:3c:c8:98:52:9f:cf:db:8b:5b:72:
6e:73:c8:09:ae:21:e3:fb:46:ea:3e:47:1d:a4:41:
0d:57:16:2a:40:b0:fe:f6:50:14:55:fb:69:af:66:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:C2:60:8A:6C:D8:9D:C2:9F:29:66:D2:39:9B:3F:90:46:EC:A4
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:95:03:95:eb:f6:dc:82:ba:f3:81:fe:3e:51:e9:44:79:4c:
e3:9b:cc:db:1e:47:32:e7:40:7c:c3:3b:11:9b:f7:c2:52:18:
63:29:a4:fe:5c:32:04:10:3a:d0:67:1a:3b:e6:26:9e:ca:73:
c2:13:54:4a:f5:38:b4:59:65:fc:6f:e4:06:18:72:2e:90:b1:
79:b8:0b:9e:ad:41:de:97:c8:68:69:e3:30:37:a1:bd:60:75:
39:c9:9b:6c:28:4b:c1:34:43:08:c9:2a:e5:d8:05:5a:fa:09:
ef:6d:0c:e9:61:ea:08:9f:57:a1:1c:6b:f3:29:4a:6b:1f:95:
89:f8:6e:17:84:50:2c:50:28:fa:6d:70:c9:84:25:b3:83:a3:
e9:d9:08:ed:e0:51:2a:03:78:b1:0a:a9:3c:a5:74:67:c4:92:
f5:f5:10:8c:36:b5:bc:d2:08:57:fb:f2:90:f2:80:f7:ae:a5:
cd:55:53:cb:2f:e6:ce:f3:cd:c6:f0:4a:7d:65:9c:26:28:39:
9e:dc:54:c4:88:74:bd:80:07:41:d7:f3:62:a1:f3:c1:3a:ba:
a8:80:9c:31:3a:ad:b6:3d:fa:49:b1:b9:83:08:99:e1:76:ec:
49:83:d3:d4:0d:fc:88:d9:6f:93:eb:95:83:57:6a:a6:36:a4:
8e:b8:89:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRjfxVtPWHSSi41QpjOIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjYwMzAxMTIwMTE3WhcNMjYwMzAyMTIwMTE3WjAzMTEwLwYDVQQD
EygyYTdkYzI2MDhhNmNkODlkYzI5ZjI5NjZkMjM5OWIzZjkwNDZlY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwVacxdxCWdk7lgg6e/jWy0+D1wq
l/Zxzqsp6QKMHNPwK4JbBslIPTzhDlrK5V7JEUHAaPNVKjIXpYKNR0DuCTWf5pLI
C3rMoLSoJcXrX3qQslG6+kcv+YVlSmLRNAkgrVSApCc2iE3Clb6H6glGc/RH2Bo7
N0BAG6T2ow3KO5Zr6muRbBQVzPRSB3kxgWRpVznY9HzopWSHzHVEmKMvobL61rnj
WbEW5T8evzkaS17oY/KJULPevo7T5r6Jku7alf72hyKE643572Z44lLBeaEp+1fL
TzzImFKfz9uLW3Juc8gJriHj+0bqPkcdpEENVxYqQLD+9lAUVftpr2aMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp9wmCKbNidwp8pZtI5mz+QRuykMB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZUDlev2
3IK684H+PlHpRHlM45vM2x5HMudAfMM7EZv3wlIYYymk/lwyBBA60GcaO+Ymnspz
whNUSvU4tFll/G/kBhhyLpCxebgLnq1B3pfIaGnjMDehvWB1OcmbbChLwTRDCMkq
5dgFWvoJ720M6WHqCJ9XoRxr8ylKax+VifhuF4RQLFAo+m1wyYQls4Oj6dkI7eBR
KgN4sQqpPKV0Z8SS9fUQjDa1vNIIV/vykPKA966lzVVTyy/mzvPNxvBKfWWcJig5
ntxUxIh0vYAHQdfzYqHzwTq6qICcMTqttj36SbG5gwiZ4XbsSYPT1A38iNlvk+uV
g1dqpjakjriJDA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:36 2026 by rpki-client