Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: S/PXiUfZKBELJIXZm+lz8FZ0wkdj6+D1r3PrDgiI/Js=
Subject key identifier: 1C:A5:10:CA:84:E7:09:CE:13:A1:B8:02:E8:0C:25:60:90:0F:C6:89
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019D265F649CED51E9161E44F223614FD776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 1384
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: Nl2VmyEv5omz00ltHeASJFFrA4sdHvDgRyEb4DizGbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:9c:ed:51:e9:16:1e:44:f2:23:61:4f:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=1ca510ca84e709ce13a1b802e80c2560900fc689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:e0:e4:60:1a:31:88:8e:59:67:b9:61:74:
2f:b8:ee:02:5a:44:79:4c:19:74:31:5e:e8:46:7c:
97:d7:70:1a:ae:88:89:7c:18:81:09:2a:59:cc:b5:
43:af:3c:6a:ac:ae:7f:59:2b:95:f7:c6:1f:07:6b:
5f:3c:e5:f9:13:c4:3a:54:2c:08:48:51:22:12:f5:
23:09:eb:71:ad:0f:e3:04:c4:90:93:c5:bd:c3:68:
18:60:8b:7a:d9:39:b8:aa:f4:5c:dc:f7:2a:d9:44:
80:d9:83:7a:60:e6:0a:e1:5a:3e:b7:1b:32:4d:67:
32:77:18:5a:0c:c5:23:a7:f5:4b:5e:60:37:17:d1:
f7:5b:3a:d7:27:57:2e:35:c4:2f:73:1a:4e:eb:cd:
06:1b:92:b1:88:b4:fe:28:e6:6a:93:fa:3f:b6:ec:
a9:f7:bf:f5:66:c8:e7:4f:5d:4c:e1:59:b3:9a:0e:
e4:83:dd:3d:34:b8:21:8a:bb:ad:c3:78:77:e1:1d:
f2:e3:d8:66:39:e2:f5:e3:67:cc:8d:c0:a2:53:e0:
4c:f4:f3:ef:31:25:5a:3b:47:a9:92:b8:50:3d:3c:
13:f4:cd:25:35:41:e0:db:20:b2:45:f5:7e:b1:1e:
c5:f8:72:57:8f:64:25:ba:0a:0e:fa:9e:6a:d5:fb:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:10:CA:84:E7:09:CE:13:A1:B8:02:E8:0C:25:60:90:0F:C6:89
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:30:ea:8b:f5:13:66:30:fb:71:78:3c:83:bb:19:e5:89:cd:
c8:a4:71:47:6e:4c:c6:df:22:49:02:cb:7b:86:f8:15:75:67:
18:fc:6a:69:1a:58:99:b1:68:64:17:02:4d:d4:fc:3f:a0:6f:
0f:0e:9f:2f:e8:3f:f3:d8:6b:63:3e:3e:ab:25:cc:b0:a1:5c:
b0:63:72:4f:41:dd:29:77:89:23:75:f8:e7:a9:dd:e4:e1:63:
26:74:a3:07:62:31:df:e1:47:d7:fd:ed:a7:db:24:cc:aa:3c:
66:8a:b9:5f:2a:3e:09:48:f5:d9:4f:fa:7b:8e:c1:79:90:2c:
1d:35:99:26:45:cf:fb:91:90:fe:e9:b9:6d:64:b5:ce:2b:07:
40:75:72:7d:29:9e:67:ce:a3:d9:11:e9:50:3e:03:b3:f3:6d:
f0:56:a9:ca:83:d7:e6:2e:7b:ef:d5:c9:9f:7f:9e:14:28:eb:
57:6e:55:65:6d:5b:77:d1:32:a3:af:b1:cb:cf:b4:18:37:94:
ee:24:66:e9:47:b8:47:cf:7c:a3:4c:a9:01:38:2e:a2:ba:58:
22:4c:df:ff:a3:94:f2:b0:28:9e:25:1a:77:b0:aa:8c:2c:79:
8b:03:39:a0:26:9b:61:f9:03:d9:70:01:05:dd:69:0a:27:38:
85:31:64:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2Sc7VHpFh5E8iNhT9d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDUwM2RkNWY2YWQwYTYwZTdiNDAzYTVhNjQyYWRlNDYx
OTk2M2MwHhcNMjYwMzI1MTkwMTE5WhcNMjYwMzI2MTkwMTE5WjAzMTEwLwYDVQQD
EygxY2E1MTBjYTg0ZTcwOWNlMTNhMWI4MDJlODBjMjU2MDkwMGZjNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz63g5GAaMYiOWWe5YXQvuO4CWkR5
TBl0MV7oRnyX13AaroiJfBiBCSpZzLVDrzxqrK5/WSuV98YfB2tfPOX5E8Q6VCwI
SFEiEvUjCetxrQ/jBMSQk8W9w2gYYIt62Tm4qvRc3Pcq2USA2YN6YOYK4Vo+txsy
TWcydxhaDMUjp/VLXmA3F9H3WzrXJ1cuNcQvcxpO680GG5KxiLT+KOZqk/o/tuyp
97/1ZsjnT11M4Vmzmg7kg909NLghirutw3h34R3y49hmOeL142fMjcCiU+BM9PPv
MSVaO0epkrhQPTwT9M0lNUHg2yCyRfV+sR7F+HJXj2QlugoO+p5q1fsGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBylEMqE5wnOE6G4AugMJWCQD8aJMB8GA1UdIwQY
MBaAFJNFA91fatCmDntAOlpkKt5GGZY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQt
YzZlYTA4ODc1NzM3LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQtYzZlYTA4ODc1NzM3
LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDDqi/UT
ZjD7cXg8g7sZ5YnNyKRxR25Mxt8iSQLLe4b4FXVnGPxqaRpYmbFoZBcCTdT8P6Bv
Dw6fL+g/89hrYz4+qyXMsKFcsGNyT0HdKXeJI3X456nd5OFjJnSjB2Ix3+FH1/3t
p9skzKo8Zoq5Xyo+CUj12U/6e47BeZAsHTWZJkXP+5GQ/um5bWS1zisHQHVyfSme
Z86j2RHpUD4Ds/Nt8FapyoPX5i5779XJn3+eFCjrV25VZW1bd9Eyo6+xy8+0GDeU
7iRm6Ue4R898o0ypATguorpYIkzf/6OU8rAoniUad7CqjCx5iwM5oCabYfkD2XAB
Bd1pCic4hTFkOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:25 2026 by rpki-client