Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: UlQTjwTL93ryejEps5S5q70DQ/OfLXV0YH64GxStCH4=
Subject key identifier: 9A:24:F4:78:5F:12:4B:4A:67:F5:67:FA:CF:2C:23:5E:F4:88:38:03
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 019CAB6B30E592B9084DF6A957773D6567D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0D81
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: 3WalPkGubG1ORUkB2mV+AxcLN0kdn9XUY2fIFUVSMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:30:e5:92:b9:08:4d:f6:a9:57:77:3d:65:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=9a24f4785f124b4a67f567facf2c235ef4883803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:ae:84:01:22:86:7f:95:6a:71:88:d1:ef:
fc:78:bd:33:40:71:8c:2d:fa:3a:53:66:71:58:a1:
4f:66:a2:e0:2a:ec:81:38:99:58:33:1e:5c:c9:8e:
2f:e2:36:3c:44:01:57:bf:d9:a1:9d:d8:4e:24:4e:
38:ed:76:bd:0c:57:3c:15:6d:f0:f8:82:54:d2:98:
07:05:97:e7:f9:6d:32:83:a3:94:a2:bd:f8:e9:dd:
95:1e:b9:2d:0f:b4:2e:bc:9b:ed:8c:4f:89:72:f9:
e9:9c:a8:84:ae:a4:75:aa:66:70:0d:14:f8:42:a3:
f3:79:a4:a6:9e:44:8a:4e:c2:f9:09:5c:60:ae:72:
81:72:cb:2a:3f:e5:f5:99:3c:75:1a:99:88:50:07:
9f:cb:bf:45:92:c4:a1:eb:34:b1:54:60:27:85:c5:
10:7e:d7:98:04:3b:aa:33:2a:60:d9:bc:18:4f:b9:
e6:2f:9e:25:b3:06:0b:d6:51:64:d1:59:4c:7c:98:
7e:7b:af:03:1d:0f:07:63:92:6c:41:c4:a7:a3:5a:
8e:3f:9e:b5:78:e6:49:1b:5f:bc:ca:38:e1:65:3f:
e9:42:d5:04:79:84:f7:f5:4a:06:df:5a:95:ee:03:
be:c2:d6:00:9d:3d:e7:27:bb:1b:96:98:82:d8:af:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:F4:78:5F:12:4B:4A:67:F5:67:FA:CF:2C:23:5E:F4:88:38:03
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:77:6b:53:63:57:c2:6b:56:81:72:97:59:c8:74:5a:49:9f:
62:fa:32:d7:cf:21:1e:c8:8d:82:32:bb:06:a3:4c:78:a0:0e:
89:6d:c6:38:27:4b:b0:bd:85:b9:a9:7a:8c:4d:31:32:0b:a5:
3b:1f:b0:2a:85:14:e2:45:ab:0b:be:ee:b2:51:88:56:61:e0:
ac:19:99:2a:66:04:b1:32:ef:ce:d3:37:b8:13:a6:0f:54:f4:
35:a5:0a:ff:0c:77:a0:61:27:66:33:c0:8d:8c:91:c2:e2:ea:
79:b6:bb:63:e7:6f:ae:0a:e1:09:bb:20:f8:5f:98:8c:be:a5:
76:83:9d:08:35:58:d5:71:04:e0:f1:a7:67:0b:74:69:a4:0c:
c7:5c:02:4e:8d:a6:65:ba:77:c0:bd:6f:1b:bd:4a:fa:b0:4f:
91:88:b5:ce:d4:3e:c8:3e:47:ec:4e:f0:e9:b6:12:14:75:75:
00:0c:5b:a7:70:cf:f4:4d:d7:e9:73:c8:5a:c8:30:af:ab:69:
f9:fe:f5:b8:c7:fb:8a:db:71:65:d1:58:d6:0e:30:0d:be:ec:
be:01:5a:17:46:e8:bf:7c:89:14:ca:4c:64:bf:c6:2b:20:a9:
0d:da:50:c0:43:89:ab:28:47:e8:ad:81:7d:6e:96:eb:c1:47:
98:02:fc:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazDlkrkITfapV3c9ZWfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmE0NTZkMWMyMzY3ODYyMTk1NGZmYmY0OTNhMzIzZGUy
YzQ0ODQwHhcNMjYwMzAxMjIwMDU0WhcNMjYwMzAyMjIwMDU0WjAzMTEwLwYDVQQD
Eyg5YTI0ZjQ3ODVmMTI0YjRhNjdmNTY3ZmFjZjJjMjM1ZWY0ODgzODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir+uhAEihn+VanGI0e/8eL0zQHGM
Lfo6U2ZxWKFPZqLgKuyBOJlYMx5cyY4v4jY8RAFXv9mhndhOJE447Xa9DFc8FW3w
+IJU0pgHBZfn+W0yg6OUor346d2VHrktD7QuvJvtjE+JcvnpnKiErqR1qmZwDRT4
QqPzeaSmnkSKTsL5CVxgrnKBcssqP+X1mTx1GpmIUAefy79FksSh6zSxVGAnhcUQ
fteYBDuqMypg2bwYT7nmL54lswYL1lFk0VlMfJh+e68DHQ8HY5JsQcSno1qOP561
eOZJG1+8yjjhZT/pQtUEeYT39UoG31qV7gO+wtYAnT3nJ7sblpiC2K+zowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJok9HhfEktKZ/Vn+s8sI170iDgDMB8GA1UdIwQY
MBaAFCj6RW0cI2eGIZVP+/SToyPeLESEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMWFjYWItOWE4Yi00MjNlLWIwYmMt
ZjQ1YTJhNjM0NzA0LzEvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iMWFjYWItOWE4Yi00MjNlLWIwYmMtZjQ1YTJhNjM0NzA0
LzEvS1BwRmJSd2paNFlobFVfNzlKT2pJOTRzUklRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXdrU2NX
wmtWgXKXWch0WkmfYvoy188hHsiNgjK7BqNMeKAOiW3GOCdLsL2Fual6jE0xMgul
Ox+wKoUU4kWrC77uslGIVmHgrBmZKmYEsTLvztM3uBOmD1T0NaUK/wx3oGEnZjPA
jYyRwuLqeba7Y+dvrgrhCbsg+F+YjL6ldoOdCDVY1XEE4PGnZwt0aaQMx1wCTo2m
Zbp3wL1vG71K+rBPkYi1ztQ+yD5H7E7w6bYSFHV1AAxbp3DP9E3X6XPIWsgwr6tp
+f71uMf7ittxZdFY1g4wDb7svgFaF0bov3yJFMpMZL/GKyCpDdpQwEOJqyhH6K2B
fW6W68FHmAL8pQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:46 2026 by rpki-client