Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: 6w7u1GbNVUMcSzNrOPswSLAfjclVAvXJVyk4eJwj8AE=
Subject key identifier: F8:D3:0A:4D:C8:EF:0D:0B:64:E0:E6:BD:82:B8:22:1A:95:F9:3B:03
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019CAAFD27CC1F6DB140CF1C463D80F5ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 1123
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: dmwMMaB9dr7SA2aaB97hp45KLO5ZdpA/kNiMKibja4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:27:cc:1f:6d:b1:40:cf:1c:46:3d:80:f5:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=f8d30a4dc8ef0d0b64e0e6bd82b8221a95f93b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:b5:c4:1d:ca:fc:52:64:fa:5e:37:63:c5:
44:13:8e:5a:0d:f4:3d:de:63:92:93:05:2c:98:5c:
5f:18:5c:09:a5:ec:09:1d:5d:7c:5d:9d:4d:69:a0:
8b:6c:81:8d:00:4e:c1:5a:ea:4f:94:9d:73:00:04:
a3:e9:01:f1:bc:9d:78:51:b8:21:04:98:4a:91:d0:
62:e2:9b:1b:72:e6:dd:62:aa:79:37:36:e1:e2:40:
48:2c:84:e1:0a:39:98:5c:54:b4:95:a6:20:e0:a2:
f1:ba:47:57:51:5b:fa:0a:f1:4a:e1:dd:f7:96:b4:
99:77:c2:e9:97:0c:95:f9:91:ed:d6:21:5e:2d:3a:
0b:7e:50:48:e4:0a:8c:eb:c9:b7:10:0c:d1:41:85:
32:c5:74:88:46:77:3a:87:5d:0c:e8:c0:5f:55:b7:
3b:22:3f:d2:85:b7:48:17:49:45:3a:2b:fd:5c:d0:
c5:88:4f:b6:0d:e1:bc:fd:e9:d9:9e:f0:ac:0e:81:
aa:4f:49:4c:bb:6a:77:e4:35:a9:4a:51:2c:74:fa:
f0:9c:c4:ec:7a:84:17:ab:91:7f:01:3e:87:6d:20:
22:58:9d:4e:e2:78:ee:cb:b4:85:db:a8:45:d5:4c:
0a:55:73:0d:10:79:e1:d2:d1:a1:8c:73:c0:51:1c:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:0A:4D:C8:EF:0D:0B:64:E0:E6:BD:82:B8:22:1A:95:F9:3B:03
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6a:fc:57:11:b4:f0:c2:89:55:3a:76:fb:26:77:12:f6:93:
a2:32:b7:27:2c:d2:ec:e6:bb:26:9d:bf:3e:c2:e7:36:b7:8e:
e6:0b:cb:fe:8c:c9:20:6a:f4:f7:38:00:66:f0:66:f6:b9:ec:
13:26:d3:b8:78:8c:11:94:a4:52:77:67:56:c7:53:25:a1:90:
a1:19:e3:2d:4c:af:63:7e:b5:c9:b9:b3:15:de:f0:4e:37:c9:
a6:ec:d8:1c:71:a1:52:e1:cf:95:d1:3a:ad:02:2f:00:44:43:
cd:58:87:75:90:1f:92:cc:99:46:49:8f:4f:b6:f9:37:0f:f2:
c6:07:d9:46:07:95:d5:38:07:b5:93:d2:63:7a:40:ef:f1:83:
d6:63:ca:72:b5:56:39:2f:44:c2:e8:03:d3:97:1d:29:2e:0e:
29:b8:3f:dc:60:11:6c:53:39:78:ba:e0:0a:00:de:91:57:2e:
29:a9:54:da:24:04:77:d8:c8:41:dc:5b:38:2f:85:72:a7:be:
42:bb:5a:5a:ad:ff:f4:dc:cf:60:49:b3:45:8a:2c:12:0f:0e:
93:1c:be:a3:b7:0d:86:d3:85:13:4d:9a:9b:73:2e:1c:0b:4f:
68:c4:44:d8:b3:24:79:07:c5:fe:3d:c3:d3:38:c5:eb:b2:7d:
1d:26:0b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SfMH22xQM8cRj2A9a3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm
OTYxYjUwHhcNMjYwMzAxMjAwMDQzWhcNMjYwMzAyMjAwMDQzWjAzMTEwLwYDVQQD
EyhmOGQzMGE0ZGM4ZWYwZDBiNjRlMGU2YmQ4MmI4MjIxYTk1ZjkzYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HW1xB3K/FJk+l43Y8VEE45aDfQ9
3mOSkwUsmFxfGFwJpewJHV18XZ1NaaCLbIGNAE7BWupPlJ1zAASj6QHxvJ14Ubgh
BJhKkdBi4psbcubdYqp5Nzbh4kBILIThCjmYXFS0laYg4KLxukdXUVv6CvFK4d33
lrSZd8LplwyV+ZHt1iFeLToLflBI5AqM68m3EAzRQYUyxXSIRnc6h10M6MBfVbc7
Ij/ShbdIF0lFOiv9XNDFiE+2DeG8/enZnvCsDoGqT0lMu2p35DWpSlEsdPrwnMTs
eoQXq5F/AT6HbSAiWJ1O4njuy7SF26hF1UwKVXMNEHnh0tGhjHPAURybhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjTCk3I7w0LZODmvYK4IhqV+TsDMB8GA1UdIwQY
MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWr8VxG0
8MKJVTp2+yZ3EvaTojK3JyzS7Oa7Jp2/PsLnNreO5gvL/ozJIGr09zgAZvBm9rns
EybTuHiMEZSkUndnVsdTJaGQoRnjLUyvY361ybmzFd7wTjfJpuzYHHGhUuHPldE6
rQIvAERDzViHdZAfksyZRkmPT7b5Nw/yxgfZRgeV1TgHtZPSY3pA7/GD1mPKcrVW
OS9EwugD05cdKS4OKbg/3GARbFM5eLrgCgDekVcuKalU2iQEd9jIQdxbOC+Fcqe+
QrtaWq3/9NzPYEmzRYosEg8Okxy+o7cNhtOFE02am3MuHAtPaMRE2LMkeQfF/j3D
0zjF67J9HSYLYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:31 2026 by rpki-client