Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: Z5BtzfVA9VZOZZKi0oy7hTWSEmecRm4uDXsUnGcjxXo=
Subject key identifier: B1:39:C8:FB:FB:0E:40:D1:CC:41:64:96:88:3B:40:E4:91:6C:B9:C6
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019D27DFEAA51412D9EF8438D9ED2095CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0D2B
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: G0aRrlce4u2/lz6l+frtbDO+OryuEng2HzEBYkdo/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ea:a5:14:12:d9:ef:84:38:d9:ed:20:95:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=b139c8fbfb0e40d1cc416496883b40e4916cb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:b7:a1:bf:75:1b:88:52:90:f4:03:65:24:
1e:ec:35:46:6d:cd:fd:59:6a:c1:ac:68:a9:28:a9:
ce:e7:c9:8b:49:8d:74:42:0a:e7:e6:46:bc:d7:86:
e3:d5:b3:bd:e0:b5:ba:05:56:47:ef:09:a9:a9:43:
c4:70:21:a7:d0:ca:05:07:25:25:5c:c7:65:ab:e0:
e7:82:b2:f2:ab:5f:d5:30:4b:9b:cc:49:f0:d8:b2:
59:ec:51:56:f6:3c:06:4b:f5:39:a9:2f:e3:79:f6:
60:97:82:d8:53:88:5c:7c:47:07:ec:80:ad:0b:64:
9b:f9:92:b9:55:92:77:1b:ea:55:5c:c6:e8:da:33:
52:ea:fb:0c:9d:dd:79:52:2c:33:56:9a:dd:c2:af:
db:66:1f:9d:6d:a2:72:9b:33:41:8e:08:7e:6c:5d:
a3:75:fc:b5:e9:ff:b4:47:86:75:dd:ab:6e:f8:7e:
74:ac:59:55:83:af:5c:65:6f:1e:e6:46:43:db:98:
15:8f:ec:dc:bd:06:49:c3:77:7f:2b:84:46:b1:85:
4d:a0:5d:3a:57:bd:4a:b9:ba:de:3c:35:fe:43:e8:
55:00:ab:21:a5:fe:cc:0a:8a:86:b9:79:e4:ec:1d:
52:21:d1:6c:74:47:96:79:18:2c:9f:ac:a4:5a:9e:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:C8:FB:FB:0E:40:D1:CC:41:64:96:88:3B:40:E4:91:6C:B9:C6
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:7c:6b:99:e9:d3:40:6c:ae:03:dd:e3:21:44:00:92:d7:
88:4c:1b:e3:84:51:1d:26:de:ff:1b:52:5e:76:de:59:cb:6b:
68:2b:7f:43:41:1f:20:2b:03:2f:03:19:74:d4:c5:26:b5:f1:
88:eb:df:47:43:94:75:9f:74:b1:2a:6b:21:54:4d:71:78:cc:
01:6e:2e:a9:5f:cf:0b:d6:10:85:1d:f1:35:c8:4d:56:d8:7a:
47:6e:41:f9:8b:2a:59:1f:3e:3a:7a:07:47:a7:6d:40:02:39:
15:b3:cb:dc:f7:57:53:16:b5:3d:b8:11:41:5d:d3:f5:91:71:
5d:9d:2f:49:86:2b:ef:5f:f6:d2:75:20:7f:a5:3e:42:5e:c3:
6b:23:34:8b:f1:27:42:1a:ee:a9:7f:4b:74:db:bd:3d:6f:e5:
c5:b3:6a:69:e3:a6:e6:1b:e0:0b:cb:5f:29:95:42:87:34:a3:
c3:14:a8:50:d8:2e:5c:f0:3f:1f:ae:a4:76:85:c6:01:c0:7c:
ed:dc:45:9f:8d:07:8d:1c:a4:87:ea:1d:6c:82:a7:5a:cd:45:
c0:be:cd:0b:68:ad:54:bd:66:e0:f5:38:48:31:1a:dd:f1:99:
11:e5:51:d4:b4:47:f1:7a:ae:a2:00:dc:e9:ec:2c:d8:66:05:
ae:3d:89:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+qlFBLZ74Q42e0glc5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2
ODA0MTgwHhcNMjYwMzI2MDIwMTE5WhcNMjYwMzI3MDIwMTE5WjAzMTEwLwYDVQQD
EyhiMTM5YzhmYmZiMGU0MGQxY2M0MTY0OTY4ODNiNDBlNDkxNmNiOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZW3ob91G4hSkPQDZSQe7DVGbc39
WWrBrGipKKnO58mLSY10Qgrn5ka814bj1bO94LW6BVZH7wmpqUPEcCGn0MoFByUl
XMdlq+DngrLyq1/VMEubzEnw2LJZ7FFW9jwGS/U5qS/jefZgl4LYU4hcfEcH7ICt
C2Sb+ZK5VZJ3G+pVXMbo2jNS6vsMnd15UiwzVprdwq/bZh+dbaJymzNBjgh+bF2j
dfy16f+0R4Z13atu+H50rFlVg69cZW8e5kZD25gVj+zcvQZJw3d/K4RGsYVNoF06
V71KubrePDX+Q+hVAKshpf7MCoqGuXnk7B1SIdFsdEeWeRgsn6ykWp74ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE5yPv7DkDRzEFklog7QOSRbLnGMB8GA1UdIwQY
MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt
NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk
LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIR8a5np
00BsrgPd4yFEAJLXiEwb44RRHSbe/xtSXnbeWctraCt/Q0EfICsDLwMZdNTFJrXx
iOvfR0OUdZ90sSprIVRNcXjMAW4uqV/PC9YQhR3xNchNVth6R25B+YsqWR8+OnoH
R6dtQAI5FbPL3PdXUxa1PbgRQV3T9ZFxXZ0vSYYr71/20nUgf6U+Ql7DayM0i/En
QhruqX9LdNu9PW/lxbNqaeOm5hvgC8tfKZVChzSjwxSoUNguXPA/H66kdoXGAcB8
7dxFn40HjRykh+odbIKnWs1FwL7NC2itVL1m4PU4SDEa3fGZEeVR1LRH8XquogDc
6ews2GYFrj2Jxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:45 2026 by rpki-client