Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File: K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier: naHp3Ag8nekv1yRgoUFQohNwI72zuce5vQhbFYYTqNk=
Subject key identifier: 54:0E:91:2A:C4:91:55:59:9B:0A:15:ED:76:38:3C:41:96:0E:E2:C9
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial: 019D26CD9748E1E23E5383847AF4EBB0639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number: 1294
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: IajIOki8N-Tfh1ubDWlzntjVI-4.roa (hash: LVVvbRrnTDOYtO0x8wssTk+uRYbqHCBuMGCLmMJuSJY=)
2: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: SYo49wHHERJT40MnG1db7pBICSj5CYxYqvC1NDeFyME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:97:48:e1:e2:3e:53:83:84:7a:f4:eb:b0:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=540e912ac49155599b0a15ed76383c41960ee2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:51:25:bc:e4:ad:4c:e5:b7:33:cd:b5:3a:
05:b3:cc:bc:95:66:14:26:e0:62:2e:ee:53:ec:21:
9f:30:cd:37:4c:f6:bc:02:41:df:d1:29:15:0f:7a:
19:d8:24:0d:17:6a:3f:88:20:7e:84:4e:d1:ca:6f:
b6:f8:41:b9:75:49:49:3a:5d:ca:60:ec:ff:9f:69:
86:e7:72:bd:22:d6:5f:48:a0:55:23:af:c8:15:35:
55:7b:01:f4:d8:f2:91:d0:1f:1f:ad:c3:02:25:0d:
4d:2b:a8:71:c7:dc:dd:7b:a4:c9:7c:f6:4c:93:c1:
b5:e3:b2:34:8f:e3:10:0d:33:36:db:9c:19:b8:61:
5b:dd:f6:05:ab:45:f2:aa:be:e8:cb:c9:96:10:3e:
6e:bc:a7:16:9b:ff:51:d4:f5:6f:d2:8c:df:7c:ea:
3c:da:e2:eb:0c:01:9e:fd:77:18:8d:3f:09:4f:77:
c1:a8:a2:c6:db:00:58:d3:af:b7:ef:18:5b:13:ec:
63:27:be:ea:6e:7c:8d:45:6b:1a:08:e9:f3:15:66:
8b:73:1c:f4:b6:a9:22:50:ee:fa:98:69:91:1a:17:
f5:a4:c5:01:6a:fa:22:ae:ea:fa:0e:8e:21:94:22:
72:36:c2:df:ab:65:08:27:4f:d5:4a:c0:ef:b0:20:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:91:2A:C4:91:55:59:9B:0A:15:ED:76:38:3C:41:96:0E:E2:C9
X509v3 Authority Key Identifier:
keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:f8:89:a6:c8:68:4f:a3:5b:7c:c3:6f:e2:28:1e:78:7d:
35:c7:bf:53:49:98:ea:1b:19:54:73:bb:a3:e3:18:71:8d:4d:
93:96:52:aa:26:41:53:be:06:a1:83:25:16:09:c3:3f:22:1d:
54:eb:df:b7:b9:18:5a:95:fb:97:94:6e:e4:60:93:1c:2a:74:
7f:b2:bc:d7:ca:13:ce:11:91:c9:41:c7:0f:d7:53:1e:1d:93:
10:06:26:ba:a6:9c:a8:6c:fb:b2:fa:d4:f0:c1:95:85:02:29:
24:f4:1c:f6:be:30:dd:5d:a7:b0:58:e9:2c:08:32:85:75:7b:
05:56:0b:09:58:ce:c1:8d:76:36:64:15:ca:3e:07:aa:7b:0a:
7c:6e:c5:41:31:9a:0d:b3:36:4a:aa:a4:c2:14:6d:e7:f6:0f:
ce:ae:19:ea:a6:83:99:4b:a4:ff:90:ef:dc:68:03:b3:e7:ae:
1a:0a:2a:3d:95:11:08:bc:70:48:86:64:6e:a3:9d:ea:0c:40:
71:b5:21:3d:9c:5e:2c:04:85:e8:41:82:f4:6b:c9:d4:98:cb:
64:57:03:2c:ae:8d:4c:5c:47:d9:24:fa:27:dd:b2:0c:68:3a:
cb:d1:ca:1e:fd:68:44:9f:14:38:81:d7:fd:f7:9d:6d:f0:33:
e7:8a:17:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzZdI4eI+U4OEevTrsGOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiODFjNzUzYjc3NjY1ZTdhNTlmOGU1MDgzMTRmMTU5MzU2
YzIyOGUwHhcNMjYwMzI1MjEwMTQwWhcNMjYwMzI2MjEwMTQwWjAzMTEwLwYDVQQD
Eyg1NDBlOTEyYWM0OTE1NTU5OWIwYTE1ZWQ3NjM4M2M0MTk2MGVlMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxRRJbzkrUzltzPNtToFs8y8lWYU
JuBiLu5T7CGfMM03TPa8AkHf0SkVD3oZ2CQNF2o/iCB+hE7Rym+2+EG5dUlJOl3K
YOz/n2mG53K9ItZfSKBVI6/IFTVVewH02PKR0B8frcMCJQ1NK6hxx9zde6TJfPZM
k8G147I0j+MQDTM225wZuGFb3fYFq0Xyqr7oy8mWED5uvKcWm/9R1PVv0ozffOo8
2uLrDAGe/XcYjT8JT3fBqKLG2wBY06+37xhbE+xjJ77qbnyNRWsaCOnzFWaLcxz0
tqkiUO76mGmRGhf1pMUBavoirur6Do4hlCJyNsLfq2UIJ0/VSsDvsCD9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQOkSrEkVVZmwoV7XY4PEGWDuLJMB8GA1UdIwQY
MBaAFCuBx1O3dmXnpZ+OUIMU8Vk1bCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmIt
NTg3YWVmNmRjMjg1LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmItNTg3YWVmNmRjMjg1
LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi34iabI
aE+jW3zDb+IoHnh9Nce/U0mY6hsZVHO7o+MYcY1Nk5ZSqiZBU74GoYMlFgnDPyId
VOvft7kYWpX7l5Ru5GCTHCp0f7K818oTzhGRyUHHD9dTHh2TEAYmuqacqGz7svrU
8MGVhQIpJPQc9r4w3V2nsFjpLAgyhXV7BVYLCVjOwY12NmQVyj4HqnsKfG7FQTGa
DbM2SqqkwhRt5/YPzq4Z6qaDmUuk/5Dv3GgDs+euGgoqPZURCLxwSIZkbqOd6gxA
cbUhPZxeLASF6EGC9GvJ1JjLZFcDLK6NTFxH2ST6J92yDGg6y9HKHv1oRJ8UOIHX
/fedbfAz54oXTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:55 2026 by rpki-client