Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: e4tClGCHDbAAVueL7U8C1013GcPdq3q+4zjVOOeGyEc=
Subject key identifier: 21:49:95:AC:16:2C:0F:47:99:52:EC:3E:C5:2B:24:54:14:D2:07:8B
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019D2960A3F29D8F3A948EC27B4077A9598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 0899
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: iYKNcS/xd1F75WzQm0z4MCqPawuTw33wQYc9RW74GPI=)
2: Qf4dP42vzRBrZXFbcCRz-VSmv1M.roa (hash: A64N+3juau//kw/FqDqwxIYCtmtyAvH0se4IvywkAE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a3:f2:9d:8f:3a:94:8e:c2:7b:40:77:a9:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=214995ac162c0f479952ec3ec52b245414d2078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:d9:35:0e:48:c4:c6:17:af:21:ee:64:18:
20:b4:cb:c6:26:32:f5:09:b0:bc:af:e0:6e:c0:96:
5d:9f:bd:e9:83:00:2d:ce:52:fb:4f:14:b2:75:22:
89:15:3e:5c:d3:9e:39:b5:8f:12:cb:81:80:81:9b:
08:e3:08:f9:9d:d6:66:4e:b2:57:1c:c4:c1:69:b2:
43:ca:ef:b3:e8:b3:6c:dd:c5:99:ba:41:69:9b:ae:
8d:f4:9c:29:04:97:29:6d:1f:b8:0a:0f:ee:b2:c8:
11:9c:aa:bd:11:36:30:72:0e:75:b8:0e:d6:16:27:
3d:32:fa:3a:28:b0:5c:c7:e5:0d:10:50:7f:be:f7:
75:ee:27:13:80:9c:41:53:2d:60:b0:d2:60:5a:e2:
f3:df:64:92:82:eb:1a:1b:76:5a:65:1a:ab:ea:5e:
d4:9e:48:13:c9:2b:1e:58:bb:b6:02:64:c7:76:dc:
48:bb:ec:d4:8f:dc:99:3a:b7:78:08:c1:78:ef:78:
9b:65:e7:f4:3b:8f:a9:a3:f6:34:22:b7:4e:a9:69:
fd:9e:28:d8:4d:28:a3:21:23:19:e8:60:48:e2:2b:
45:be:f2:c1:82:67:2c:b4:11:9c:e3:2b:65:40:7b:
8a:63:dd:9b:b9:6e:84:35:f1:76:2a:73:00:13:a3:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:49:95:AC:16:2C:0F:47:99:52:EC:3E:C5:2B:24:54:14:D2:07:8B
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:98:bf:fb:88:ac:ac:f4:12:c6:47:d2:2a:a2:30:4f:99:
63:9c:08:77:37:fd:af:4e:21:28:d7:52:b8:5a:93:5c:c1:0f:
72:37:48:94:47:a6:5c:4c:ab:dd:70:86:6e:7a:5b:5b:f8:75:
a1:84:87:47:b9:fb:73:fd:1a:e0:50:26:da:ba:b5:f2:9b:cd:
81:11:28:4b:1d:c5:a7:f0:dd:98:ea:7f:62:95:7f:ab:24:f7:
48:e0:d0:3d:54:a1:d0:da:54:21:73:bf:e2:92:95:99:c0:98:
a9:bd:33:ee:35:69:5f:a3:5e:d6:95:c1:20:be:3e:4d:3a:d1:
9a:d8:cd:64:85:68:41:59:28:70:2e:23:89:9e:06:69:a2:2b:
52:60:03:8a:0d:3d:b5:b5:52:b2:e2:4e:0d:3c:1b:33:fb:1f:
a2:4e:55:ca:a4:24:d5:f7:07:73:f4:73:3b:e0:86:94:4a:b2:
bc:f0:1e:43:1f:38:82:78:03:21:be:85:a9:8b:20:f0:ca:35:
86:2f:19:ff:b5:c0:7f:05:f5:35:b8:85:fd:3a:1e:9e:11:b0:
3f:dd:f7:1c:07:2c:90:6f:ac:d6:06:6d:36:e1:7f:0b:9f:b8:
c7:cb:84:b5:e3:43:ec:70:e6:85:8c:c4:7d:d8:f2:48:92:d2:
78:cc:a9:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKPynY86lI7Ce0B3qVmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz
NTcwZTAwHhcNMjYwMzI2MDkwMTMyWhcNMjYwMzI3MDkwMTMyWjAzMTEwLwYDVQQD
EygyMTQ5OTVhYzE2MmMwZjQ3OTk1MmVjM2VjNTJiMjQ1NDE0ZDIwNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD/ZNQ5IxMYXryHuZBggtMvGJjL1
CbC8r+BuwJZdn73pgwAtzlL7TxSydSKJFT5c0545tY8Sy4GAgZsI4wj5ndZmTrJX
HMTBabJDyu+z6LNs3cWZukFpm66N9JwpBJcpbR+4Cg/ussgRnKq9ETYwcg51uA7W
Fic9Mvo6KLBcx+UNEFB/vvd17icTgJxBUy1gsNJgWuLz32SSgusaG3ZaZRqr6l7U
nkgTySseWLu2AmTHdtxIu+zUj9yZOrd4CMF473ibZef0O4+po/Y0IrdOqWn9nijY
TSijISMZ6GBI4itFvvLBgmcstBGc4ytlQHuKY92buW6ENfF2KnMAE6MT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFJlawWLA9HmVLsPsUrJFQU0geLMB8GA1UdIwQY
MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt
YzdhMmQ1ZjlmZDYwLzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw
LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWaYv/uI
rKz0EsZH0iqiME+ZY5wIdzf9r04hKNdSuFqTXMEPcjdIlEemXEyr3XCGbnpbW/h1
oYSHR7n7c/0a4FAm2rq18pvNgREoSx3Fp/DdmOp/YpV/qyT3SODQPVSh0NpUIXO/
4pKVmcCYqb0z7jVpX6Ne1pXBIL4+TTrRmtjNZIVoQVkocC4jiZ4GaaIrUmADig09
tbVSsuJODTwbM/sfok5VyqQk1fcHc/RzO+CGlEqyvPAeQx84gngDIb6FqYsg8Mo1
hi8Z/7XAfwX1NbiF/ToenhGwP933HAcskG+s1gZtNuF/C5+4x8uEteND7HDmhYzE
fdjySJLSeMypew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:22 2026 by rpki-client