Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: htem4VuEQS34jjX/oRa7NWdv9s3D9bE6vZk73EZGdxE=
Subject key identifier: E6:8A:11:32:D8:45:B8:78:D5:4A:FD:B6:18:93:D2:A4:64:97:71:E8
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019D29CE3506A8E188C33B57F3538E60905D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 099E
Signing time: Thu 26 Mar 2026 11:01:12 +0000
Manifest this update: Thu 26 Mar 2026 11:01:12 +0000
Manifest next update: Fri 27 Mar 2026 11:01:12 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: tWEFLKr7Wie6nANPDwov3eScBIxpaA/L4COiwqySUC0=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:35:06:a8:e1:88:c3:3b:57:f3:53:8e:60:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Mar 26 11:01:12 2026 GMT
Not After : Mar 27 11:01:12 2026 GMT
Subject: CN=e68a1132d845b878d54afdb61893d2a4649771e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:73:4e:ec:2c:87:2f:a3:f9:de:0b:a7:cf:
4e:0c:4f:e3:d7:55:0d:13:f0:8f:92:21:6a:12:e4:
cd:10:63:46:29:b8:91:d1:03:d0:12:06:97:51:38:
f5:c1:f2:2f:4d:2b:76:86:fa:03:18:75:51:a9:ec:
14:bd:df:cf:33:b8:7c:f4:0d:70:1e:c1:c0:e3:08:
f4:57:7a:0a:d2:bf:49:bd:9c:ef:7f:89:26:8c:7a:
70:4e:78:99:b0:0d:9d:79:18:fc:17:e6:5c:d5:9e:
c3:56:de:0a:84:20:d1:cf:b2:6e:60:75:bd:03:7c:
b5:83:91:29:8c:1d:be:a5:8c:3d:fd:6f:bb:fb:f5:
23:51:f1:48:3e:bd:47:26:b3:e6:a4:04:37:d1:6d:
cb:f4:c6:35:0c:93:e3:a5:73:55:3b:74:62:ac:4d:
b4:b0:0a:b0:89:6b:50:30:50:a4:67:44:e7:5d:4e:
d6:fd:bc:b7:bd:cb:ed:61:14:1a:ea:6b:d5:1b:db:
9a:79:4c:a2:70:01:b0:ac:a8:6a:cb:5f:2f:22:19:
26:47:9c:1d:26:93:41:ed:34:c0:4b:f2:c2:c9:b2:
f7:59:f7:b2:f4:db:b3:16:72:7a:82:97:a0:62:03:
c9:7c:7c:0a:aa:35:78:84:5d:4a:81:06:7b:e3:3f:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:11:32:D8:45:B8:78:D5:4A:FD:B6:18:93:D2:A4:64:97:71:E8
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:e8:7b:2a:fe:aa:42:1d:c4:d9:62:74:a4:b0:42:88:c8:
a6:af:64:7f:26:37:cc:9d:af:3a:5b:f1:67:b7:f1:83:c1:0c:
e8:1d:d3:5d:0f:c0:06:aa:46:d0:69:d9:97:4f:93:9c:3f:e6:
a2:7c:f5:61:5a:31:cd:4d:67:db:55:5e:6a:03:20:06:e3:68:
f2:80:0d:18:6d:c9:54:21:90:6d:88:51:3e:44:37:e1:2f:bc:
39:8f:50:06:42:58:4e:95:f5:bc:23:4f:81:d9:65:81:ef:6d:
56:f2:1e:8c:b3:b8:c5:d2:93:c8:db:af:f7:45:53:e7:cf:46:
3d:74:ca:af:0b:9c:d4:a9:07:bf:68:3f:48:f0:14:95:5d:c4:
77:e9:45:ed:2f:da:89:ca:f9:fb:a8:a7:6f:60:86:d3:39:3e:
16:fc:a2:31:8e:1d:8a:06:c0:97:80:cc:98:f9:15:9a:1c:2c:
71:ab:2d:03:1e:f3:bd:23:3b:31:be:ea:c1:a8:3f:70:1b:80:
c1:f0:16:56:88:f3:a0:86:a9:22:50:ab:fc:90:75:ca:45:87:
be:7b:d4:47:b5:b8:ab:41:54:dc:61:e1:4e:dc:8d:97:4a:7b:
34:8f:75:2c:8b:c8:75:1a:ad:38:b5:ba:d1:5b:45:e7:c2:d7:
d4:d8:17:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pzjUGqOGIwztX81OOYJBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjYwMzI2MTEwMTEyWhcNMjYwMzI3MTEwMTEyWjAzMTEwLwYDVQQD
EyhlNjhhMTEzMmQ4NDViODc4ZDU0YWZkYjYxODkzZDJhNDY0OTc3MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXpzTuwshy+j+d4Lp89ODE/j11UN
E/CPkiFqEuTNEGNGKbiR0QPQEgaXUTj1wfIvTSt2hvoDGHVRqewUvd/PM7h89A1w
HsHA4wj0V3oK0r9JvZzvf4kmjHpwTniZsA2deRj8F+Zc1Z7DVt4KhCDRz7JuYHW9
A3y1g5EpjB2+pYw9/W+7+/UjUfFIPr1HJrPmpAQ30W3L9MY1DJPjpXNVO3RirE20
sAqwiWtQMFCkZ0TnXU7W/by3vcvtYRQa6mvVG9uaeUyicAGwrKhqy18vIhkmR5wd
JpNB7TTAS/LCybL3Wfey9NuzFnJ6gpegYgPJfHwKqjV4hF1KgQZ74z/JCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOaKETLYRbh41Ur9thiT0qRkl3HoMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqjo
eyr+qkIdxNlidKSwQojIpq9kfyY3zJ2vOlvxZ7fxg8EM6B3TXQ/ABqpG0GnZl0+T
nD/monz1YVoxzU1n21VeagMgBuNo8oANGG3JVCGQbYhRPkQ34S+8OY9QBkJYTpX1
vCNPgdllge9tVvIejLO4xdKTyNuv90VT589GPXTKrwuc1KkHv2g/SPAUlV3Ed+lF
7S/aicr5+6inb2CG0zk+FvyiMY4digbAl4DMmPkVmhwscastAx7zvSM7Mb7qwag/
cBuAwfAWVojzoIapIlCr/JB1ykWHvnvUR7W4q0FU3GHhTtyNl0p7NI91LIvIdRqt
OLW60VtF58LX1NgXdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:18 2026 by rpki-client