Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: +CzRaMZipZoj8P3hDtRg3qOXoc6prqlDlR0hIRNRYtg=
Subject key identifier: 5F:1E:74:70:21:A6:61:EE:DB:75:71:B9:34:0C:FF:9B:BE:E2:27:A5
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019CADC7DFC36DA55303EE8F8B1165EA8E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 08A7
Signing time: Mon 02 Mar 2026 09:01:22 +0000
Manifest this update: Mon 02 Mar 2026 09:01:22 +0000
Manifest next update: Tue 03 Mar 2026 09:01:22 +0000
Files and hashes: 1: RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa (hash: lqA/RuUKuPMddo9q5IetsxxRlSYvHTaYbQoeU6IOKZM=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: +BOWUbXDG1MqNwNeA1WZKU/mIWWGnJJnkZVQ/tOhRU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:df:c3:6d:a5:53:03:ee:8f:8b:11:65:ea:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Mar 2 09:01:22 2026 GMT
Not After : Mar 3 09:01:22 2026 GMT
Subject: CN=5f1e747021a661eedb7571b9340cff9bbee227a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:1a:e1:6f:d8:73:33:91:90:83:5f:7c:4d:
36:50:69:a6:86:80:22:a6:2d:48:20:aa:1f:df:25:
f4:e4:41:b9:d4:ae:21:2e:83:dd:35:c4:13:17:b1:
d4:cb:32:a8:34:a9:a8:54:41:ef:a1:ac:46:52:bf:
e9:74:a7:04:94:4c:1c:a8:db:92:65:2f:90:32:68:
d9:b7:da:0e:0b:69:00:47:c5:59:dc:ed:42:83:5b:
9f:59:9d:86:4e:2e:43:ac:74:0b:e4:11:f0:16:5e:
01:c6:c1:de:9b:95:0e:51:39:10:4d:d1:97:df:77:
ab:b3:53:fd:ec:20:d6:d1:ad:4f:f0:a3:9b:aa:20:
12:dc:99:85:6e:4f:3f:22:9b:1d:41:1a:56:84:e8:
7b:cb:99:32:63:30:33:fa:2d:53:49:db:48:cb:97:
5c:e2:54:2b:26:57:97:5b:c4:12:35:f7:e4:9f:3c:
77:7b:6b:27:98:a4:cf:d3:30:05:82:7b:2f:8b:65:
06:e3:b3:71:21:a8:32:d3:fd:87:93:6f:3b:0f:41:
e1:eb:7c:fb:37:42:71:da:77:c1:5b:05:3a:4b:27:
c1:52:8a:e0:ea:bf:f3:eb:df:75:c9:bc:ce:47:28:
bd:dc:d9:68:8a:bb:31:be:cd:a1:99:b7:fe:a3:1f:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:74:70:21:A6:61:EE:DB:75:71:B9:34:0C:FF:9B:BE:E2:27:A5
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7f:6e:34:40:c1:88:e9:2d:43:94:cb:47:88:55:c1:c8:2c:
c2:10:a9:14:06:8e:3d:37:eb:3f:8a:08:ad:55:86:dd:2f:cf:
fd:4a:d6:2d:82:4e:e4:50:28:db:1e:fe:15:e4:96:a6:da:a1:
27:9d:fe:83:98:31:36:e1:56:2f:6d:f4:74:13:65:d0:dd:57:
75:8e:cd:ac:7f:79:43:d0:c8:7d:1b:5d:a9:91:25:a0:61:79:
42:a5:ca:35:42:7e:2c:55:47:50:85:da:ea:fd:80:84:24:1d:
f5:23:64:45:3e:e2:75:31:84:f3:9b:0c:f8:0c:50:c2:0c:e5:
e4:1f:98:10:54:ef:d5:1d:c3:20:03:95:84:9c:2c:60:2c:ef:
e8:5d:cd:7d:ff:2f:bf:11:96:78:c6:f0:ca:8e:fe:7c:b0:d4:
41:bf:5c:f3:11:f9:75:9b:c0:d2:4e:92:ff:6f:14:a3:2c:bf:
fc:4c:ec:bc:05:4a:5f:5d:48:5a:30:3a:b0:b9:b0:3e:b2:3b:
24:28:f7:ee:84:12:a0:a5:65:ac:3d:b9:c5:39:00:46:ab:35:
a1:03:3f:e9:ed:a4:ae:40:7e:33:87:22:60:7c:82:73:8f:d4:
09:13:1b:c2:00:4a:8b:2d:c1:1f:58:a6:4c:c3:12:da:c2:e1:
4b:2c:5d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx9/DbaVTA+6PixFl6o4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj
OThjN2UwHhcNMjYwMzAyMDkwMTIyWhcNMjYwMzAzMDkwMTIyWjAzMTEwLwYDVQQD
Eyg1ZjFlNzQ3MDIxYTY2MWVlZGI3NTcxYjkzNDBjZmY5YmJlZTIyN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCAa4W/YczORkINffE02UGmmhoAi
pi1IIKof3yX05EG51K4hLoPdNcQTF7HUyzKoNKmoVEHvoaxGUr/pdKcElEwcqNuS
ZS+QMmjZt9oOC2kAR8VZ3O1Cg1ufWZ2GTi5DrHQL5BHwFl4BxsHem5UOUTkQTdGX
33ers1P97CDW0a1P8KObqiAS3JmFbk8/IpsdQRpWhOh7y5kyYzAz+i1TSdtIy5dc
4lQrJleXW8QSNffknzx3e2snmKTP0zAFgnsvi2UG47NxIagy0/2Hk287D0Hh63z7
N0Jx2nfBWwU6SyfBUorg6r/z6991ybzORyi93Nloirsxvs2hmbf+ox81rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8edHAhpmHu23VxuTQM/5u+4ielMB8GA1UdIwQY
MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt
YjI0OGNmYTk2YTY5LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5
LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn9uNEDB
iOktQ5TLR4hVwcgswhCpFAaOPTfrP4oIrVWG3S/P/UrWLYJO5FAo2x7+FeSWptqh
J53+g5gxNuFWL230dBNl0N1XdY7NrH95Q9DIfRtdqZEloGF5QqXKNUJ+LFVHUIXa
6v2AhCQd9SNkRT7idTGE85sM+AxQwgzl5B+YEFTv1R3DIAOVhJwsYCzv6F3Nff8v
vxGWeMbwyo7+fLDUQb9c8xH5dZvA0k6S/28Uoyy//EzsvAVKX11IWjA6sLmwPrI7
JCj37oQSoKVlrD25xTkARqs1oQM/6e2krkB+M4ciYHyCc4/UCRMbwgBKiy3BH1im
TMMS2sLhSyxd8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:10 2026 by rpki-client