Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: 3kwQ1Oxc7geeRRqsfS/PQ0L80lfeYwru+TC4kxPqLds=
Subject key identifier: 03:D7:90:D6:96:38:89:BA:A6:98:9C:DA:99:38:7B:0E:41:B1:EF:FA
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019E1DFE56B7D132F25B62CDC6E6A05CDFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: 0125
Signing time: Tue 12 May 2026 21:01:07 +0000
Manifest this update: Tue 12 May 2026 21:01:07 +0000
Manifest next update: Wed 13 May 2026 21:01:07 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: 5fIigFNfMMiqGFVnhqAEXsjTMMYNsaJsdwHulUpPKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:56:b7:d1:32:f2:5b:62:cd:c6:e6:a0:5c:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: May 12 21:01:07 2026 GMT
Not After : May 13 21:01:07 2026 GMT
Subject: CN=03d790d6963889baa6989cda99387b0e41b1effa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:0a:e5:ba:cf:da:fe:c7:99:68:45:b2:5f:
82:e0:34:47:36:04:75:a3:ec:c7:b7:41:8b:df:f2:
7d:8f:c5:2b:1f:bd:dd:89:55:60:6d:a3:c3:b8:2d:
f7:22:5b:3f:92:27:34:2e:b9:7c:57:fe:32:ea:46:
37:c9:4b:f5:e6:d4:c4:86:ff:07:3e:93:5b:c8:88:
a4:5f:66:7a:71:a3:c4:9d:68:d4:a9:f6:20:9d:12:
49:5a:eb:30:a3:de:99:76:1d:fb:7a:64:b8:59:10:
a4:c3:b7:76:81:28:8a:5a:79:4c:d8:53:d5:79:f2:
07:60:35:08:5b:13:54:09:c7:a8:5e:51:81:ae:26:
7f:ea:97:2f:8d:17:bc:e9:dc:0d:c4:3e:ba:d7:3f:
78:49:60:b1:09:d5:f3:c3:17:57:33:13:df:d3:9f:
1d:b5:ba:42:cc:0c:df:be:3a:bc:68:45:db:94:51:
9f:95:39:49:36:d7:ba:41:be:dd:0d:da:06:08:9f:
58:42:e5:e0:65:d9:06:02:5b:88:5e:17:f7:f4:0f:
98:49:3e:90:2b:c6:13:3b:5c:2a:4a:54:1f:84:a1:
48:db:d9:43:89:d8:38:71:06:b3:61:9b:f8:1c:47:
bc:9c:af:eb:e0:47:97:76:b3:87:52:69:56:ce:07:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:90:D6:96:38:89:BA:A6:98:9C:DA:99:38:7B:0E:41:B1:EF:FA
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ae:8a:2f:81:b7:12:31:5c:00:3f:e4:15:1f:9d:71:98:00:
8e:7a:cd:85:a8:04:54:ec:23:bc:af:c3:e6:24:c9:30:4c:92:
47:f5:46:48:10:e2:3a:6f:c8:2f:22:db:28:73:45:a0:4e:ab:
32:80:fa:0c:94:24:bf:cf:a9:f2:c3:a2:81:f5:ac:b2:49:33:
25:45:c4:fb:6f:f8:d7:d9:5c:28:ad:82:99:79:11:62:c7:9a:
81:66:1a:9f:92:93:aa:8f:1b:f6:52:6a:c5:9a:fc:3c:d5:6f:
62:78:b2:f5:0a:04:77:eb:d7:6d:93:14:6c:e4:57:2a:a2:0c:
d1:fb:7d:d0:5a:e6:8c:3a:87:a5:1d:99:f4:b9:8a:f5:53:b7:
51:2a:c2:ec:c9:e8:dc:23:3a:64:fb:18:5c:33:bc:81:15:e3:
2f:6a:7b:db:6f:ff:61:1a:7c:d9:0b:40:0a:36:45:c7:bb:f4:
74:4d:78:f7:cc:60:80:20:f5:25:59:80:96:c8:da:df:9d:67:
0d:96:a0:be:6f:05:62:36:e0:03:26:c9:bd:a0:ba:a2:8a:cd:
cc:fe:7d:e4:22:c0:88:95:8e:c4:26:c4:51:6d:dc:ec:01:90:
89:89:9e:64:5f:bb:d3:a8:e7:27:72:35:a0:73:b6:91:c1:97:
b6:57:2b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/la30TLyW2LNxuagXN+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz
NDhmNDYwHhcNMjYwNTEyMjEwMTA3WhcNMjYwNTEzMjEwMTA3WjAzMTEwLwYDVQQD
EygwM2Q3OTBkNjk2Mzg4OWJhYTY5ODljZGE5OTM4N2IwZTQxYjFlZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLgK5brP2v7HmWhFsl+C4DRHNgR1
o+zHt0GL3/J9j8UrH73diVVgbaPDuC33Ils/kic0Lrl8V/4y6kY3yUv15tTEhv8H
PpNbyIikX2Z6caPEnWjUqfYgnRJJWuswo96Zdh37emS4WRCkw7d2gSiKWnlM2FPV
efIHYDUIWxNUCceoXlGBriZ/6pcvjRe86dwNxD661z94SWCxCdXzwxdXMxPf058d
tbpCzAzfvjq8aEXblFGflTlJNte6Qb7dDdoGCJ9YQuXgZdkGAluIXhf39A+YST6Q
K8YTO1wqSlQfhKFI29lDidg4cQazYZv4HEe8nK/r4EeXdrOHUmlWzgcL4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPXkNaWOIm6ppic2pk4ew5Bse/6MB8GA1UdIwQY
MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt
YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx
LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK6KL4G3
EjFcAD/kFR+dcZgAjnrNhagEVOwjvK/D5iTJMEySR/VGSBDiOm/ILyLbKHNFoE6r
MoD6DJQkv8+p8sOigfWsskkzJUXE+2/419lcKK2CmXkRYseagWYan5KTqo8b9lJq
xZr8PNVvYniy9QoEd+vXbZMUbORXKqIM0ft90FrmjDqHpR2Z9LmK9VO3USrC7Mno
3CM6ZPsYXDO8gRXjL2p722//YRp82QtACjZFx7v0dE1498xggCD1JVmAlsja351n
DZagvm8FYjbgAybJvaC6oorNzP595CLAiJWOxCbEUW3c7AGQiYmeZF+706jnJ3I1
oHO2kcGXtlcrBQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:37 2026 by rpki-client