Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: qM8k8tYy99tCyJse9g5nrXX6sJPtTfakvauTNefcFNs=
Subject key identifier: 7D:E9:C2:4D:30:C8:A2:7F:90:6C:A9:10:81:02:5C:39:3A:E5:E9:2E
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019D2A3B4FEB1B3C307373D0CB4434B4C9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1329
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: fKvVor01qPV-ORu7n9y9qnaHTq4.roa (hash: 6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: HNCtSKXkmHGEzqot9QVCrPEAtcRiXcys2aS62AAUOYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4f:eb:1b:3c:30:73:73:d0:cb:44:34:b4:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=7de9c24d30c8a27f906ca91081025c393ae5e92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:0d:18:a9:2e:9d:6f:2a:a1:04:83:d0:af:
fd:ea:6b:03:00:78:c4:9b:44:fd:c3:cc:4e:99:6f:
bb:91:bf:c6:bc:e9:49:74:71:cc:f3:1f:6f:d1:0c:
3f:c2:40:19:25:ae:f2:c6:45:ee:bb:0e:0f:2c:57:
1d:63:10:42:59:be:ce:50:5f:f6:8e:91:25:49:64:
d3:67:ef:f8:50:8b:62:b4:43:8e:87:73:09:55:a7:
85:8b:4a:84:91:23:b3:aa:ff:f5:e6:e3:63:e8:5a:
32:2c:66:01:c9:34:2e:e2:c3:1b:67:cb:20:98:59:
55:de:0c:4a:84:8d:34:b7:4b:b0:bf:c2:b7:b7:46:
a3:c9:2a:0e:b5:75:42:2d:af:5d:3f:f7:e6:f4:22:
3f:27:49:b9:e4:46:5a:9e:5b:4e:21:72:70:7c:a9:
cf:4f:d7:3c:00:b5:d8:99:b9:a8:53:cd:94:d1:42:
8b:44:ed:22:f7:ee:97:04:0b:4b:6b:22:ca:bb:4b:
e1:48:15:d2:9d:6d:f8:08:30:84:f5:1d:96:8c:d8:
cc:54:4b:a7:b6:a6:c8:23:52:55:0c:46:2b:89:db:
2d:29:e7:ac:b1:4c:ab:4b:c9:fb:66:14:4f:38:f3:
0b:61:30:e0:bb:ad:c0:d8:ed:2e:61:f5:8c:5f:26:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:C2:4D:30:C8:A2:7F:90:6C:A9:10:81:02:5C:39:3A:E5:E9:2E
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:62:fb:22:ad:82:8d:6b:bb:72:d5:ba:80:b5:89:7e:24:
0d:67:8a:d7:1b:36:c5:bf:64:a9:8a:db:b6:d0:68:21:b7:37:
a7:15:a3:f8:f0:66:df:d1:88:7a:d1:ef:10:d0:e4:01:54:db:
5d:96:b7:23:c4:9f:7d:3a:e2:d3:96:34:c3:8b:c0:30:b1:8b:
34:72:ab:bc:ad:eb:f8:0b:90:97:00:ab:6f:30:41:5e:8c:27:
07:8f:14:f4:1e:3a:2f:36:91:1c:e2:a0:76:45:ed:33:4a:b9:
54:c6:f0:aa:47:92:d6:23:24:86:1c:54:32:18:13:35:f9:fa:
5d:a0:56:90:6d:5f:ba:89:db:ee:95:16:4a:4e:02:54:77:97:
0e:ff:6e:81:df:9b:79:5b:23:99:5a:64:af:79:c3:6b:52:77:
be:bd:80:1e:19:58:b0:8a:f4:43:75:05:5d:5b:f2:7d:cd:1d:
3e:df:ea:0a:76:98:34:3c:8a:f6:f7:b4:60:d2:94:da:96:84:
ab:5b:bc:52:33:e1:f9:4e:69:7c:e1:dc:56:f0:15:d2:80:1c:
3e:ec:c7:48:ce:a3:ba:f2:b2:58:81:49:1e:6e:61:1e:8d:7d:
3c:d8:86:80:38:f8:ca:bb:28:dc:57:6b:7f:77:ec:2c:dd:64:
d1:e1:af:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO0/rGzwwc3PQy0Q0tMm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjYwMzI2MTMwMDIzWhcNMjYwMzI3MTMwMDIzWjAzMTEwLwYDVQQD
Eyg3ZGU5YzI0ZDMwYzhhMjdmOTA2Y2E5MTA4MTAyNWMzOTNhZTVlOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TANGKkunW8qoQSD0K/96msDAHjE
m0T9w8xOmW+7kb/GvOlJdHHM8x9v0Qw/wkAZJa7yxkXuuw4PLFcdYxBCWb7OUF/2
jpElSWTTZ+/4UItitEOOh3MJVaeFi0qEkSOzqv/15uNj6FoyLGYByTQu4sMbZ8sg
mFlV3gxKhI00t0uwv8K3t0ajySoOtXVCLa9dP/fm9CI/J0m55EZanltOIXJwfKnP
T9c8ALXYmbmoU82U0UKLRO0i9+6XBAtLayLKu0vhSBXSnW34CDCE9R2WjNjMVEun
tqbII1JVDEYridstKeessUyrS8n7ZhRPOPMLYTDgu63A2O0uYfWMXyZ/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3pwk0wyKJ/kGypEIECXDk65ekuMB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ9i+yKt
go1ru3LVuoC1iX4kDWeK1xs2xb9kqYrbttBoIbc3pxWj+PBm39GIetHvENDkAVTb
XZa3I8SffTri05Y0w4vAMLGLNHKrvK3r+AuQlwCrbzBBXownB48U9B46LzaRHOKg
dkXtM0q5VMbwqkeS1iMkhhxUMhgTNfn6XaBWkG1fuonb7pUWSk4CVHeXDv9ugd+b
eVsjmVpkr3nDa1J3vr2AHhlYsIr0Q3UFXVvyfc0dPt/qCnaYNDyK9ve0YNKU2paE
q1u8UjPh+U5pfOHcVvAV0oAcPuzHSM6juvKyWIFJHm5hHo19PNiGgDj4yrso3Fdr
f3fsLN1k0eGv3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:58 2026 by rpki-client