Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: HQsAId1vg0/xxpVhaGWKpxwuOOi2yEj8p95W3OycyQM=
Subject key identifier: 3E:5A:39:E5:8C:F5:D7:53:44:E2:27:48:74:FC:8E:2D:23:76:FB:BE
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 019D25BA8D867997A6F63F18DC14FD74F0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 0AAE
Signing time: Wed 25 Mar 2026 16:01:16 +0000
Manifest this update: Wed 25 Mar 2026 16:01:16 +0000
Manifest next update: Thu 26 Mar 2026 16:01:16 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: B9YQRVwkriM9DNftIu4DnKk5Ad4M1PsyHy/M9BGANGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8d:86:79:97:a6:f6:3f:18:dc:14:fd:74:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Mar 25 16:01:16 2026 GMT
Not After : Mar 26 16:01:16 2026 GMT
Subject: CN=3e5a39e58cf5d75344e2274874fc8e2d2376fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:55:25:28:2f:20:a4:2f:f1:dc:bb:6f:42:
45:0e:a6:bc:94:43:8f:94:38:b4:f9:3c:9e:e5:0c:
b3:5b:f4:9c:85:94:91:4c:58:41:c2:ef:04:f3:f8:
b2:5e:6f:49:2f:d3:e6:9e:be:15:7f:db:b9:19:b4:
36:9f:e9:4c:47:be:21:15:38:77:b2:15:2a:11:ba:
93:7a:07:41:e9:1f:2c:fc:28:f4:c5:a9:d0:d1:83:
37:71:6a:cd:72:da:06:8b:f3:8f:ad:70:0e:9c:57:
ba:a6:6f:b8:1f:52:8f:05:7f:27:39:75:dc:12:e2:
ab:7f:a4:de:90:3d:1f:3c:73:24:eb:9f:9e:5e:8e:
c9:94:ce:18:54:39:ac:43:44:2a:55:ae:fb:a3:d8:
0a:86:13:b0:59:59:a5:e9:0a:2d:2e:38:5c:a0:e1:
d9:c5:0f:bf:5e:5f:31:ef:85:24:51:c1:3f:22:7b:
09:2c:b1:3f:4d:66:51:f1:48:5f:f5:5a:95:90:29:
72:19:33:02:1b:cf:85:87:5e:79:a3:05:92:21:ac:
0f:8c:c5:74:4e:c6:72:a5:bc:a0:09:56:1c:4c:fc:
59:98:f9:d5:fe:a3:fc:99:ab:a3:f7:3e:69:97:a1:
a1:f6:63:53:36:47:99:56:e3:09:70:85:15:72:e9:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:39:E5:8C:F5:D7:53:44:E2:27:48:74:FC:8E:2D:23:76:FB:BE
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c0:7e:16:e0:f1:06:ac:59:d2:5f:84:01:99:58:27:f9:b0:
db:cf:b1:2a:3b:65:d7:16:0b:77:6e:1c:cc:0f:5c:36:2a:41:
9e:57:5f:af:ab:f2:97:8e:16:fb:a1:3e:63:48:4e:4c:ea:2a:
27:51:e1:7b:6b:ff:da:6a:2f:26:ef:5e:09:ac:a3:72:6c:9a:
4e:81:39:10:6e:cf:b0:4a:de:20:57:95:09:0d:44:82:c8:cf:
d4:43:98:78:20:96:0a:5b:d3:d1:fa:78:ef:75:be:82:56:ad:
aa:62:98:19:65:84:48:0b:a7:5f:32:eb:e6:5d:9e:55:a7:15:
b9:c2:76:ec:a9:74:d7:4a:ac:3d:2a:c6:d5:cf:80:3d:e7:1d:
02:7c:b2:76:da:d4:83:0c:f4:47:67:81:87:4c:24:64:c1:3f:
6c:41:33:f5:68:21:01:47:18:61:4a:d3:b2:46:4f:77:1b:e8:
6e:d4:b5:85:b7:5d:c0:5f:df:58:4e:1b:5d:12:04:e8:64:1d:
06:44:fa:d3:a3:64:c1:1b:80:97:c8:8c:27:19:ce:e9:7e:53:
74:99:a3:26:0b:a1:24:fd:bd:2a:2c:81:1b:46:8b:9d:88:ff:
f4:fb:64:3f:da:72:ca:60:66:78:d1:6b:1d:59:0e:11:13:9c:
5f:26:20:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luo2GeZem9j8Y3BT9dPD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk4OWZlM2NhY2EzZjMwNDQzYzU0YTkwMmY2OTEyMTEw
ZDkxOTUwHhcNMjYwMzI1MTYwMTE2WhcNMjYwMzI2MTYwMTE2WjAzMTEwLwYDVQQD
EygzZTVhMzllNThjZjVkNzUzNDRlMjI3NDg3NGZjOGUyZDIzNzZmYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlBVJSgvIKQv8dy7b0JFDqa8lEOP
lDi0+Tye5QyzW/SchZSRTFhBwu8E8/iyXm9JL9Pmnr4Vf9u5GbQ2n+lMR74hFTh3
shUqEbqTegdB6R8s/Cj0xanQ0YM3cWrNctoGi/OPrXAOnFe6pm+4H1KPBX8nOXXc
EuKrf6TekD0fPHMk65+eXo7JlM4YVDmsQ0QqVa77o9gKhhOwWVml6QotLjhcoOHZ
xQ+/Xl8x74UkUcE/InsJLLE/TWZR8Uhf9VqVkClyGTMCG8+Fh155owWSIawPjMV0
TsZypbygCVYcTPxZmPnV/qP8mauj9z5pl6Gh9mNTNkeZVuMJcIUVcumswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5aOeWM9ddTROInSHT8ji0jdvu+MB8GA1UdIwQY
MBaAFCtJif48rKPzBEPFSpAvaRIRDZGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMt
NWMzOGU3ZmU4ZTgxLzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMtNWMzOGU3ZmU4ZTgx
LzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncB+FuDx
BqxZ0l+EAZlYJ/mw28+xKjtl1xYLd24czA9cNipBnldfr6vyl44W+6E+Y0hOTOoq
J1Hhe2v/2movJu9eCayjcmyaToE5EG7PsEreIFeVCQ1EgsjP1EOYeCCWClvT0fp4
73W+glatqmKYGWWESAunXzLr5l2eVacVucJ27Kl010qsPSrG1c+APecdAnyydtrU
gwz0R2eBh0wkZME/bEEz9WghAUcYYUrTskZPdxvobtS1hbddwF/fWE4bXRIE6GQd
BkT606NkwRuAl8iMJxnO6X5TdJmjJguhJP29KiyBG0aLnYj/9PtkP9pyymBmeNFr
HVkOEROcXyYgyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:55 2026 by rpki-client