Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: Y1QtF//dI8HES5/3sdTo8AamI5ldh47Kzy6s7EATWXU=
Subject key identifier: 0B:10:F1:62:C0:46:42:6E:7B:03:D6:9C:2D:76:87:40:A8:91:3A:96
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019D28BB4C6095170C0478E2C48865EFC012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: xpTStWPWIduMuTJ4KiYuZanxg1FtfOHPscsDLviTSK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4c:60:95:17:0c:04:78:e2:c4:88:65:ef:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=0b10f162c046426e7b03d69c2d768740a8913a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:5c:b1:98:1e:9a:2d:a0:1e:e2:4c:b0:ce:
16:a1:5f:2b:69:c2:1e:4b:be:d5:5e:3e:6d:03:07:
e2:40:5e:ca:f2:09:1b:4c:51:f8:86:b2:f6:e9:c4:
70:53:6d:b8:de:3f:5a:9e:e5:f4:8c:e1:7a:bc:7d:
14:22:59:e0:ba:17:58:01:5e:f7:9f:ec:48:53:1e:
fb:04:94:d4:55:c8:4e:c9:9c:ab:fc:3f:65:4e:4c:
15:b8:8a:f7:af:6a:20:82:f7:bf:e4:28:13:4f:6c:
96:a4:06:24:9e:1b:45:b0:2d:c8:0e:71:50:8d:b3:
95:e1:e3:e8:4b:7d:84:71:17:4c:72:84:31:e6:0e:
22:bd:38:b3:6c:0f:86:e0:80:23:fb:61:b3:98:42:
2b:4b:61:88:9d:c6:ca:13:3c:d1:c5:30:7f:24:5a:
00:e4:0e:a6:95:4d:96:54:1c:ee:4c:7e:a0:0a:08:
ee:4d:1e:c9:b5:e5:3f:61:dd:6c:8d:5d:54:a1:52:
fe:9b:e4:7b:22:20:e6:d4:37:d6:80:4c:d0:8a:6b:
65:b5:7d:df:f5:cf:f0:cc:cc:f3:c3:ce:77:21:eb:
e6:15:40:2a:61:d1:12:3c:d9:97:65:76:97:a6:04:
f2:8f:1e:5f:37:f1:29:38:62:ea:2a:ae:42:d6:f4:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:F1:62:C0:46:42:6E:7B:03:D6:9C:2D:76:87:40:A8:91:3A:96
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f8:80:51:c8:85:8d:71:aa:77:24:76:a7:ba:d3:2b:a1:7e:
a1:99:c5:0d:df:ab:65:b4:24:f3:26:80:72:dd:5a:ee:36:80:
e9:42:45:ea:c9:6c:15:75:ee:e4:48:59:1e:dd:25:1e:2f:0d:
fb:f8:8e:2a:5d:5f:c1:20:3c:36:60:26:bb:db:16:54:c3:1c:
08:e5:a4:ec:32:52:29:be:ef:2f:6b:97:56:38:98:41:49:c9:
db:68:eb:7f:cb:96:26:ea:42:26:cb:33:6a:6c:ef:2f:95:34:
1c:09:a6:be:fe:4b:b0:46:1e:ac:f2:7e:36:5e:0b:e2:3b:ea:
aa:b7:07:9f:47:04:06:f0:ee:96:00:be:06:f4:1c:8c:d9:90:
cb:4e:d2:33:01:0c:8e:3c:dc:b2:c2:67:52:80:57:51:d1:e0:
90:18:30:b9:9a:3b:00:aa:2c:49:3b:33:c6:93:36:ac:d4:5e:
09:51:89:44:9f:a3:4c:4b:cf:64:84:c9:ba:2a:89:90:c8:b6:
71:61:e7:cb:35:8b:d4:08:05:55:12:54:a6:40:69:89:67:88:
4e:55:5c:43:b2:3c:69:94:f5:77:af:b7:a1:94:dc:94:f2:e6:
ff:8a:c5:4d:3d:82:89:59:35:eb:a8:13:fe:12:a3:dd:c6:a6:
55:80:de:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0xglRcMBHjixIhl78ASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx
NzRmMTQwHhcNMjYwMzI2MDYwMDU2WhcNMjYwMzI3MDYwMDU2WjAzMTEwLwYDVQQD
EygwYjEwZjE2MmMwNDY0MjZlN2IwM2Q2OWMyZDc2ODc0MGE4OTEzYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NBcsZgemi2gHuJMsM4WoV8racIe
S77VXj5tAwfiQF7K8gkbTFH4hrL26cRwU2243j9anuX0jOF6vH0UIlnguhdYAV73
n+xIUx77BJTUVchOyZyr/D9lTkwVuIr3r2oggve/5CgTT2yWpAYknhtFsC3IDnFQ
jbOV4ePoS32EcRdMcoQx5g4ivTizbA+G4IAj+2GzmEIrS2GIncbKEzzRxTB/JFoA
5A6mlU2WVBzuTH6gCgjuTR7JteU/Yd1sjV1UoVL+m+R7IiDm1DfWgEzQimtltX3f
9c/wzMzzw853IevmFUAqYdESPNmXZXaXpgTyjx5fN/EpOGLqKq5C1vRHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsQ8WLARkJuewPWnC12h0CokTqWMB8GA1UdIwQY
MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt
OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2
LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABviAUciF
jXGqdyR2p7rTK6F+oZnFDd+rZbQk8yaAct1a7jaA6UJF6slsFXXu5EhZHt0lHi8N
+/iOKl1fwSA8NmAmu9sWVMMcCOWk7DJSKb7vL2uXVjiYQUnJ22jrf8uWJupCJssz
amzvL5U0HAmmvv5LsEYerPJ+Nl4L4jvqqrcHn0cEBvDulgC+BvQcjNmQy07SMwEM
jjzcssJnUoBXUdHgkBgwuZo7AKosSTszxpM2rNReCVGJRJ+jTEvPZITJuiqJkMi2
cWHnyzWL1AgFVRJUpkBpiWeITlVcQ7I8aZT1d6+3oZTclPLm/4rFTT2CiVk166gT
/hKj3camVYDe2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:03 2026 by rpki-client