Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: MwxJG7epNJoox1BqGb9i9rIm8vkX4Y2zqEg4clkLA3Q=
Subject key identifier: 90:AA:06:D2:AC:50:91:DB:41:A8:CF:76:19:34:2B:29:4E:46:DC:B2
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019CAA21FC4F13D958969F2BDCF7604241E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 080D
Signing time: Sun 01 Mar 2026 16:01:19 +0000
Manifest this update: Sun 01 Mar 2026 16:01:19 +0000
Manifest next update: Mon 02 Mar 2026 16:01:19 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: +XdperzBysSHXty8RzP2YnS582hwnysK+lbRmxT31EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:fc:4f:13:d9:58:96:9f:2b:dc:f7:60:42:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Mar 1 16:01:19 2026 GMT
Not After : Mar 2 16:01:19 2026 GMT
Subject: CN=90aa06d2ac5091db41a8cf7619342b294e46dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:eb:fb:6a:76:6a:7c:15:f8:82:20:9c:9a:
5f:0a:b8:f4:ff:5c:9b:5c:73:13:74:d2:73:1a:34:
14:0c:a7:57:24:c0:71:ee:a8:34:00:08:c4:69:89:
9b:92:2e:75:59:bc:28:ec:3f:91:99:54:15:33:e6:
db:2d:02:1b:14:0a:ae:d3:91:18:b0:d0:ca:07:b1:
5d:82:42:e4:72:75:eb:38:a6:f8:c2:32:b9:fe:22:
b6:81:61:1e:37:df:8f:a7:5d:0b:87:a5:3e:2f:0f:
57:dc:ac:5f:dd:db:0c:5e:ca:21:9b:67:f9:55:84:
4f:f8:49:99:d5:31:4b:e7:c3:e9:9f:eb:1f:da:05:
02:9a:e4:b6:64:8a:0c:5e:5b:ed:70:c1:14:1a:63:
65:f4:c6:5c:c7:49:b0:45:fe:cb:a4:f0:94:22:84:
6b:dd:68:cb:2d:07:a3:25:c0:74:74:d5:a1:c1:78:
4f:67:9d:b9:f9:04:39:e9:1e:d1:6d:a1:aa:47:24:
87:79:2e:0e:81:ad:db:6a:d9:bb:f9:d6:a5:d2:d2:
d6:c7:fe:88:7e:c2:3b:b0:f3:54:9c:f8:f4:c4:db:
77:44:b8:8e:fc:e5:d4:da:79:5d:e6:98:9a:45:85:
aa:93:9f:e0:18:ec:4a:9f:74:32:bd:94:4c:86:fd:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:06:D2:AC:50:91:DB:41:A8:CF:76:19:34:2B:29:4E:46:DC:B2
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:17:b0:c4:01:e3:d9:32:48:1f:4c:ef:90:37:2d:47:64:4e:
d2:0d:e1:bd:80:5a:0f:74:d4:c2:f3:a0:98:62:2f:20:36:a2:
37:71:d4:f6:1b:e4:0e:f1:52:bd:94:48:e5:05:75:4c:95:48:
07:4c:6b:27:e2:5a:da:45:f2:41:60:69:9b:cf:7d:1c:29:52:
d9:2a:a0:f0:e5:69:d8:cb:96:aa:b0:fe:1b:b2:3c:75:be:40:
c5:36:0a:69:9a:d6:2b:ec:dc:57:81:7b:ca:74:70:df:72:b2:
43:c4:11:1c:b0:d8:7b:46:54:ad:e7:c9:ee:18:28:07:28:3f:
70:d2:6e:f4:5a:55:1a:9c:d5:59:90:1c:90:34:94:1b:cb:a0:
73:fe:fd:fe:62:3a:60:ce:dd:81:2f:59:c5:f8:4d:f0:38:fa:
fa:99:d8:f2:4e:f5:d6:76:eb:e4:e2:be:4d:15:fd:f6:e8:77:
ce:5e:6d:46:25:49:fb:48:53:b1:dd:38:65:22:f1:e3:62:ff:
af:89:3f:a5:37:c1:aa:28:20:eb:5a:69:1a:32:58:d7:31:0b:
e7:8d:87:1c:0f:96:5a:7f:78:0b:66:07:0c:7d:ce:9c:12:e0:
62:c7:1f:96:39:2e:39:01:6c:84:81:02:d4:eb:e6:91:c7:1b:
00:25:20:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIfxPE9lYlp8r3PdgQkHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjYwMzAxMTYwMTE5WhcNMjYwMzAyMTYwMTE5WjAzMTEwLwYDVQQD
Eyg5MGFhMDZkMmFjNTA5MWRiNDFhOGNmNzYxOTM0MmIyOTRlNDZkY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Lr+2p2anwV+IIgnJpfCrj0/1yb
XHMTdNJzGjQUDKdXJMBx7qg0AAjEaYmbki51Wbwo7D+RmVQVM+bbLQIbFAqu05EY
sNDKB7FdgkLkcnXrOKb4wjK5/iK2gWEeN9+Pp10Lh6U+Lw9X3Kxf3dsMXsohm2f5
VYRP+EmZ1TFL58Ppn+sf2gUCmuS2ZIoMXlvtcMEUGmNl9MZcx0mwRf7LpPCUIoRr
3WjLLQejJcB0dNWhwXhPZ525+QQ56R7RbaGqRySHeS4Oga3batm7+dal0tLWx/6I
fsI7sPNUnPj0xNt3RLiO/OXU2nld5piaRYWqk5/gGOxKn3QyvZRMhv3s0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCqBtKsUJHbQajPdhk0KylORtyyMB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRewxAHj
2TJIH0zvkDctR2RO0g3hvYBaD3TUwvOgmGIvIDaiN3HU9hvkDvFSvZRI5QV1TJVI
B0xrJ+Ja2kXyQWBpm899HClS2Sqg8OVp2MuWqrD+G7I8db5AxTYKaZrWK+zcV4F7
ynRw33KyQ8QRHLDYe0ZUrefJ7hgoByg/cNJu9FpVGpzVWZAckDSUG8ugc/79/mI6
YM7dgS9ZxfhN8Dj6+pnY8k711nbr5OK+TRX99uh3zl5tRiVJ+0hTsd04ZSLx42L/
r4k/pTfBqigg61ppGjJY1zEL542HHA+WWn94C2YHDH3OnBLgYscfljkuOQFshIEC
1OvmkccbACUgeA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:15 2026 by rpki-client