Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: fZL7QCz1N6aML09RICeZzviGf1Fdi1qRNBo9ickpJ4U=
Subject key identifier: BA:97:83:22:32:06:6D:72:97:4D:1A:80:E5:F0:6F:94:DB:D9:D8:DE
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019D284DEC9653555C5538286DB90AD0CB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 1814
Signing time: Thu 26 Mar 2026 04:01:28 +0000
Manifest this update: Thu 26 Mar 2026 04:01:28 +0000
Manifest next update: Fri 27 Mar 2026 04:01:28 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: xGeM6TAIc7MBa9jaqCZ3bGXhwpp8WtSlAPo8/yM/5hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ec:96:53:55:5c:55:38:28:6d:b9:0a:d0:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Mar 26 04:01:28 2026 GMT
Not After : Mar 27 04:01:28 2026 GMT
Subject: CN=ba97832232066d72974d1a80e5f06f94dbd9d8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:76:78:fa:4d:a1:57:21:0f:ff:0a:f8:ee:
93:62:54:76:5d:2e:f6:8f:09:36:31:24:c4:be:75:
1a:6d:ae:b8:3d:53:8e:09:ba:95:bd:5a:39:49:22:
30:f6:90:aa:bc:e5:7b:43:0f:02:60:af:b1:c6:c6:
08:17:73:ca:8b:78:56:96:93:67:d3:3b:3c:0f:34:
93:6e:5e:e3:24:e1:f3:f1:c4:0e:b6:0f:80:e4:96:
aa:1e:05:8f:f9:78:35:a4:ec:16:74:c0:2c:f0:b3:
dd:f0:35:2d:37:c7:17:8b:70:5d:4a:b8:15:d1:9b:
49:18:ac:e5:51:7f:f1:23:5a:05:fa:1f:29:e8:77:
21:0b:43:e6:25:46:68:94:0a:67:50:17:d7:9a:66:
03:8b:2c:08:66:b4:5d:dd:2e:71:79:9b:50:31:3e:
1f:18:fe:d0:ac:36:b8:62:d5:6d:7d:12:62:00:99:
b9:e7:a8:16:ea:c7:37:67:ba:9c:1b:5b:a9:ab:4d:
b5:5c:4c:20:3e:5e:25:fc:54:10:06:81:f7:95:4a:
fd:12:75:f0:be:59:09:14:28:5a:b4:4f:f0:0e:28:
0b:7b:39:78:98:f7:df:eb:75:ca:df:99:16:9d:a6:
84:79:fb:2f:2b:01:5d:06:f0:d1:1f:93:a7:f5:f4:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:83:22:32:06:6D:72:97:4D:1A:80:E5:F0:6F:94:DB:D9:D8:DE
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:0e:d5:31:a3:f2:44:d4:c9:77:60:f9:d6:5d:22:13:93:
25:6b:df:70:db:b9:1a:a5:72:1d:fb:87:32:1c:40:77:c7:c9:
01:a4:fa:81:d7:25:20:2d:47:51:8c:93:d4:0c:31:c7:8a:83:
fa:79:64:81:db:59:28:66:c5:74:b5:3a:d3:df:d6:8d:a1:66:
dd:60:45:a3:79:ac:e2:c7:b8:b4:d8:a0:03:41:8f:e7:71:0b:
84:0b:55:77:32:d5:f2:cc:7c:eb:01:02:e0:6a:88:f3:4a:eb:
f4:85:c0:90:08:99:9a:f5:7d:c7:0d:30:f7:fb:d9:88:d8:9a:
72:b2:3c:bc:17:e0:92:e3:f9:dd:35:04:c9:bf:0a:b9:18:d8:
5c:d1:d3:d9:fc:b2:31:b9:63:35:2d:82:57:68:80:ad:30:ed:
61:7c:a9:3c:37:2f:fb:65:82:4f:51:49:61:02:7d:36:b3:8e:
80:30:51:d4:79:59:b2:58:98:12:b2:c5:be:1c:19:9f:ac:64:
85:84:75:a8:95:21:aa:02:c4:16:05:c8:e1:78:57:c4:e7:ba:
f0:c0:26:ed:fc:83:67:8a:98:ad:a1:56:ef:54:d8:4d:27:3a:
41:cf:41:3e:6c:47:be:7d:60:ff:2c:ed:aa:15:78:8b:88:44:
81:59:c7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTeyWU1VcVTgobbkK0MsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4
MDc1MTgwHhcNMjYwMzI2MDQwMTI4WhcNMjYwMzI3MDQwMTI4WjAzMTEwLwYDVQQD
EyhiYTk3ODMyMjMyMDY2ZDcyOTc0ZDFhODBlNWYwNmY5NGRiZDlkOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB92ePpNoVchD/8K+O6TYlR2XS72
jwk2MSTEvnUaba64PVOOCbqVvVo5SSIw9pCqvOV7Qw8CYK+xxsYIF3PKi3hWlpNn
0zs8DzSTbl7jJOHz8cQOtg+A5JaqHgWP+Xg1pOwWdMAs8LPd8DUtN8cXi3BdSrgV
0ZtJGKzlUX/xI1oF+h8p6HchC0PmJUZolApnUBfXmmYDiywIZrRd3S5xeZtQMT4f
GP7QrDa4YtVtfRJiAJm556gW6sc3Z7qcG1upq021XEwgPl4l/FQQBoH3lUr9EnXw
vlkJFChatE/wDigLezl4mPff63XK35kWnaaEefsvKwFdBvDRH5On9fSX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqXgyIyBm1yl00agOXwb5Tb2djeMB8GA1UdIwQY
MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt
ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1
LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2EO1TGj
8kTUyXdg+dZdIhOTJWvfcNu5GqVyHfuHMhxAd8fJAaT6gdclIC1HUYyT1Awxx4qD
+nlkgdtZKGbFdLU609/WjaFm3WBFo3ms4se4tNigA0GP53ELhAtVdzLV8sx86wEC
4GqI80rr9IXAkAiZmvV9xw0w9/vZiNiacrI8vBfgkuP53TUEyb8KuRjYXNHT2fyy
MbljNS2CV2iArTDtYXypPDcv+2WCT1FJYQJ9NrOOgDBR1HlZsliYErLFvhwZn6xk
hYR1qJUhqgLEFgXI4XhXxOe68MAm7fyDZ4qYraFW71TYTSc6Qc9BPmxHvn1g/yzt
qhV4i4hEgVnH4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:44:15 2026 by rpki-client