Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: FwcE1t8BSSxplGlpaXJI04GmswzV7k/vj5KG6phh6Zc=
Subject key identifier: 83:E0:88:D1:4A:68:D3:61:DD:86:8B:39:AD:AF:EC:F3:57:2D:68:C8
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019CADFE4E904FAC428B532300962ADFA07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0C9E
Signing time: Mon 02 Mar 2026 10:00:50 +0000
Manifest this update: Mon 02 Mar 2026 10:00:50 +0000
Manifest next update: Tue 03 Mar 2026 10:00:50 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: E/cp8kufHqyUbJybxPBXmKaLyExxPZ4WX4SqBADDRvs=)
4: b2hDoC2QeOdetXxS8h0K7-tyYmI.roa (hash: 9C3SPDVj2hN5qln0VFtPBwpA+3WenkqM7y2GLRnn6bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4e:90:4f:ac:42:8b:53:23:00:96:2a:df:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Mar 2 10:00:50 2026 GMT
Not After : Mar 3 10:00:50 2026 GMT
Subject: CN=83e088d14a68d361dd868b39adafecf3572d68c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:cb:d7:c9:3a:a8:8d:8a:44:aa:63:9a:b2:
59:15:86:e2:b4:73:e7:a6:00:8e:46:e0:28:ce:71:
94:95:b6:77:9a:42:33:23:f6:6d:0e:90:ce:51:90:
51:1d:7c:40:2c:9e:29:da:b1:f7:0e:4d:19:9a:dc:
82:a4:e5:84:d0:79:51:e8:8d:43:f8:a0:e3:59:97:
fe:60:3d:60:5f:fb:a3:3e:3b:c5:76:f4:85:b3:cc:
1b:21:f3:16:c3:db:bb:25:21:99:31:0c:3a:1a:af:
ca:4c:35:8e:2b:e7:cd:cc:97:bf:9d:9b:bc:1e:57:
b9:8f:a6:c9:1c:da:ee:11:02:5c:62:f5:b6:14:4d:
e2:d2:d8:e0:e8:8f:6c:1d:bb:20:13:0c:6c:7c:05:
7b:ac:cb:73:84:58:b8:68:c6:28:6c:81:7a:3f:ea:
7b:55:fb:c3:46:bd:44:37:0f:3b:e7:13:46:57:ea:
7d:6c:3e:20:50:91:88:6f:32:81:d9:cb:2c:ec:26:
79:a8:69:57:0e:46:2d:a1:a4:36:9f:b9:dd:e1:e2:
dd:53:65:42:52:f8:dc:1b:ed:d1:ab:b7:08:8b:d4:
8e:77:f9:d8:12:02:e6:e1:6a:0b:6c:96:f6:0a:a0:
29:2b:41:7c:b5:e7:12:f1:53:a9:03:83:c3:a6:ee:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:88:D1:4A:68:D3:61:DD:86:8B:39:AD:AF:EC:F3:57:2D:68:C8
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:91:8b:f5:d4:c1:a9:0b:2d:03:ff:13:c0:d4:33:1d:68:13:
53:97:0b:88:1d:e2:52:db:57:f7:04:0e:02:20:da:02:ec:c3:
e1:8a:1c:c9:fb:f2:b3:b3:3f:f0:b6:1a:1f:90:51:aa:c6:d6:
d4:57:ff:7c:39:e7:01:66:99:ff:22:d6:86:d8:7a:cf:d9:52:
27:14:e5:88:2d:b6:e0:ff:d3:50:11:ee:32:a2:4b:48:ff:16:
ea:67:0c:b0:43:48:c5:22:21:2c:eb:d3:f0:dd:e2:b5:6b:62:
c5:46:f0:46:10:49:3b:01:d2:26:2c:33:45:49:dc:53:90:2d:
e0:20:6b:1e:f0:c7:e9:51:e8:71:a7:44:ba:fd:e6:19:50:6c:
d4:f6:99:3f:37:fc:17:c8:10:30:92:11:a6:a9:b4:fe:eb:45:
e2:89:b2:8f:09:cc:56:dd:1d:1d:58:d0:9d:e4:e2:27:ac:fd:
3f:a8:50:a1:21:0d:8e:c8:34:0d:70:11:12:1a:de:08:c6:f5:
2a:53:c7:d1:39:d3:ad:54:30:e3:48:69:bd:52:d8:9a:cf:14:
fe:35:a0:90:2e:7c:92:c9:e5:d0:e5:42:53:94:05:2d:fb:bb:
70:6e:d6:b0:e4:b5:be:45:f9:3f:90:f3:cc:f1:4d:5f:e6:ef:
7c:96:b3:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/k6QT6xCi1MjAJYq36B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjYwMzAyMTAwMDUwWhcNMjYwMzAzMTAwMDUwWjAzMTEwLwYDVQQD
Eyg4M2UwODhkMTRhNjhkMzYxZGQ4NjhiMzlhZGFmZWNmMzU3MmQ2OGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/3L18k6qI2KRKpjmrJZFYbitHPn
pgCORuAoznGUlbZ3mkIzI/ZtDpDOUZBRHXxALJ4p2rH3Dk0ZmtyCpOWE0HlR6I1D
+KDjWZf+YD1gX/ujPjvFdvSFs8wbIfMWw9u7JSGZMQw6Gq/KTDWOK+fNzJe/nZu8
Hle5j6bJHNruEQJcYvW2FE3i0tjg6I9sHbsgEwxsfAV7rMtzhFi4aMYobIF6P+p7
VfvDRr1ENw875xNGV+p9bD4gUJGIbzKB2css7CZ5qGlXDkYtoaQ2n7nd4eLdU2VC
UvjcG+3Rq7cIi9SOd/nYEgLm4WoLbJb2CqApK0F8tecS8VOpA4PDpu7a/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPgiNFKaNNh3YaLOa2v7PNXLWjIMB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpGL9dTB
qQstA/8TwNQzHWgTU5cLiB3iUttX9wQOAiDaAuzD4Yocyfvys7M/8LYaH5BRqsbW
1Ff/fDnnAWaZ/yLWhth6z9lSJxTliC224P/TUBHuMqJLSP8W6mcMsENIxSIhLOvT
8N3itWtixUbwRhBJOwHSJiwzRUncU5At4CBrHvDH6VHocadEuv3mGVBs1PaZPzf8
F8gQMJIRpqm0/utF4omyjwnMVt0dHVjQneTiJ6z9P6hQoSENjsg0DXAREhreCMb1
KlPH0TnTrVQw40hpvVLYms8U/jWgkC58ksnl0OVCU5QFLfu7cG7WsOS1vkX5P5Dz
zPFNX+bvfJazEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:33 2026 by rpki-client