Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: PMetwS5uxI+Gp/Z7W41M/I4yuj8fYbXzXVpHAXv/fpU=
Subject key identifier: B4:3F:E6:73:3E:F0:DC:56:31:5A:04:D3:50:54:68:9A:87:A2:DD:94
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019D2696542F72D773E1EA77150077E0B973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 1011
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: WYAo2ckIA7+jxZGoVDaXXoB2cvocqUPya3sTNptT+C0=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:54:2f:72:d7:73:e1:ea:77:15:00:77:e0:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=b43fe6733ef0dc56315a04d35054689a87a2dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:ff:dd:00:49:33:73:aa:f5:ab:89:91:ef:
df:29:87:46:a7:3d:1b:31:ba:5c:fe:8a:66:29:34:
c5:8b:b8:05:97:e3:a1:1a:7b:7d:ba:93:ca:32:01:
6f:6f:c9:96:4b:43:83:d2:f1:3d:e8:9b:ef:cd:ff:
de:2e:73:e9:b6:78:80:ee:5b:a0:cd:52:b3:f7:d4:
d9:04:30:fe:27:9f:92:bf:38:57:2a:f3:af:4e:7e:
3a:45:5a:33:7b:84:fc:42:08:03:b1:f4:73:35:d1:
34:6d:d9:3c:7c:8b:5d:dc:89:ff:bc:57:69:75:9e:
74:1d:a4:f1:6c:2e:4d:ec:74:48:10:dc:d9:c2:05:
f6:e2:b0:ec:f3:8a:4e:80:32:96:40:96:60:28:d7:
2e:c7:27:90:33:f0:80:8e:1e:bd:98:1c:c4:22:a2:
60:57:81:90:9d:61:de:d2:95:61:35:bb:9a:be:28:
65:26:13:76:a2:4d:c4:1d:b9:28:75:cc:b4:65:92:
f7:eb:1c:62:5f:55:89:86:ba:59:e9:e2:90:61:c8:
ee:2d:ac:0a:23:54:d4:30:8c:fa:7c:34:74:d0:f2:
3a:89:a1:c8:73:f6:14:4d:e9:09:33:ed:5d:e0:5f:
aa:ac:d7:36:0c:d9:aa:c2:4e:15:db:d2:e2:f2:f0:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:E6:73:3E:F0:DC:56:31:5A:04:D3:50:54:68:9A:87:A2:DD:94
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:3f:94:1a:12:4e:0f:15:41:a2:cf:ae:cb:34:58:5a:8d:
4e:85:d6:f7:21:fd:87:b0:a1:72:4f:07:a9:19:57:cc:ac:89:
0f:cb:17:96:9b:dd:b9:ed:21:c0:a3:07:cf:0f:ea:f1:09:a7:
17:be:ed:f3:33:4d:83:20:ac:53:ba:51:eb:17:0a:c4:49:0d:
a5:20:1c:1d:77:b6:e8:17:66:8f:99:22:ee:df:25:97:8a:47:
de:57:f9:e2:8e:e4:38:9b:38:75:93:3b:ad:69:d3:d0:e1:6e:
af:3c:51:8c:bc:69:b6:3e:1c:e7:ec:b2:d5:12:35:f1:a0:e0:
2e:03:60:4c:dd:dd:b7:0a:8a:71:27:e9:de:1c:08:ba:21:71:
ff:61:d9:54:42:d7:de:ec:08:b9:47:a0:16:d0:f3:1c:e6:d9:
7e:ac:08:84:86:e5:22:62:2c:fa:3f:7b:72:ed:e1:79:3a:f1:
00:95:fd:67:a4:ba:77:c3:30:2f:bf:54:13:fc:f3:8b:76:e1:
7f:3a:3f:87:89:df:5b:7b:2d:d3:09:f0:0a:bd:65:42:7c:69:
cb:a4:86:b7:02:7d:51:a7:5f:51:9e:cb:52:11:bb:f3:41:30:
63:4d:53:7a:dd:b8:e6:2a:8f:f0:20:e1:49:b0:81:c8:6b:ef:
da:c1:31:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllQvctdz4ep3FQB34LlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk
NTYyYzIwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD
EyhiNDNmZTY3MzNlZjBkYzU2MzE1YTA0ZDM1MDU0Njg5YTg3YTJkZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h7/3QBJM3Oq9auJke/fKYdGpz0b
Mbpc/opmKTTFi7gFl+OhGnt9upPKMgFvb8mWS0OD0vE96Jvvzf/eLnPptniA7lug
zVKz99TZBDD+J5+SvzhXKvOvTn46RVoze4T8QggDsfRzNdE0bdk8fItd3In/vFdp
dZ50HaTxbC5N7HRIENzZwgX24rDs84pOgDKWQJZgKNcuxyeQM/CAjh69mBzEIqJg
V4GQnWHe0pVhNbuavihlJhN2ok3EHbkodcy0ZZL36xxiX1WJhrpZ6eKQYcjuLawK
I1TUMIz6fDR00PI6iaHIc/YUTekJM+1d4F+qrNc2DNmqwk4V29Li8vChhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ/5nM+8NxWMVoE01BUaJqHot2UMB8GA1UdIwQY
MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt
OWQzYTBmMjNjYmU3LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3
LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVY/lBoS
Tg8VQaLPrss0WFqNToXW9yH9h7Chck8HqRlXzKyJD8sXlpvdue0hwKMHzw/q8Qmn
F77t8zNNgyCsU7pR6xcKxEkNpSAcHXe26Bdmj5ki7t8ll4pH3lf54o7kOJs4dZM7
rWnT0OFurzxRjLxptj4c5+yy1RI18aDgLgNgTN3dtwqKcSfp3hwIuiFx/2HZVELX
3uwIuUegFtDzHObZfqwIhIblImIs+j97cu3heTrxAJX9Z6S6d8MwL79UE/zzi3bh
fzo/h4nfW3st0wnwCr1lQnxpy6SGtwJ9UadfUZ7LUhG780EwY01Tet245iqP8CDh
SbCByGvv2sExsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:43 2026 by rpki-client