Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
File: kZ7Nu3kI36w6rapeSRbyhchQzLc.mft (raw, json)
Hash identifier: /aTJeITzSVaiwqNvedTvJW02hUinqK6s9ZRaIXnxZtU=
Subject key identifier: 60:0F:40:30:B8:A8:72:CF:DD:66:0B:13:73:EC:A8:8D:D7:7B:EC:65
Authority key identifier: 91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
Certificate issuer: /CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Certificate serial: 019D27A94773C771ED65038D4D411F27C392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
Manifest number: 01F7
Signing time: Thu 26 Mar 2026 01:01:38 +0000
Manifest this update: Thu 26 Mar 2026 01:01:38 +0000
Manifest next update: Fri 27 Mar 2026 01:01:38 +0000
Files and hashes: 1: kZ7Nu3kI36w6rapeSRbyhchQzLc.crl (hash: ENX2NA0jP9/rdoY/8SAV7alrTsunAZBWA416dL6fD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:47:73:c7:71:ed:65:03:8d:4d:41:1f:27:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Validity
Not Before: Mar 26 01:01:38 2026 GMT
Not After : Mar 27 01:01:38 2026 GMT
Subject: CN=600f4030b8a872cfdd660b1373eca88dd77bec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:38:57:60:a8:bf:75:bd:24:c8:51:5d:df:
24:74:95:1d:ca:42:77:c7:c5:e8:02:2a:bd:89:e7:
3c:82:c7:8d:2c:37:40:90:e2:61:ab:34:06:88:44:
f2:81:12:91:c8:c0:fa:67:a2:fb:c6:c1:8c:d1:b7:
c5:ed:ca:76:0e:b8:80:ce:9d:f9:9b:a0:5a:c3:f4:
7b:e4:df:f6:2c:78:ca:73:3e:99:52:19:67:02:de:
36:43:98:e9:6d:be:3a:00:2a:8d:21:3d:4d:0d:af:
e9:7c:fa:39:9a:c6:5c:cc:ba:fa:32:7c:59:1a:41:
da:0d:7e:20:25:aa:ac:fd:be:d0:90:30:15:ef:6e:
6f:95:d0:a8:27:bd:24:ab:63:2b:03:f6:31:4d:23:
21:1a:73:af:51:8b:73:9b:72:40:33:23:5a:01:dd:
04:b0:08:87:3c:00:7d:eb:29:8c:64:90:89:41:f6:
de:e4:43:c3:d7:98:20:03:cc:75:6c:1a:e7:61:66:
fc:d6:73:85:c5:db:88:2c:16:ed:96:8e:64:36:f2:
3c:22:2d:c7:8d:cf:01:0e:45:40:bb:6b:65:90:ec:
2f:81:aa:71:51:d8:47:bc:57:93:35:12:ff:fa:9f:
b0:6a:1a:a1:51:47:26:f0:63:b8:89:f7:39:ef:6c:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:40:30:B8:A8:72:CF:DD:66:0B:13:73:EC:A8:8D:D7:7B:EC:65
X509v3 Authority Key Identifier:
keyid:91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:31:53:e2:23:88:80:f8:26:24:1b:f0:d8:97:6f:2e:d8:
5f:dc:f1:8d:87:98:24:e8:10:7f:4a:f9:7e:d8:0b:99:5b:1d:
17:48:f3:d6:b7:d3:6b:ff:a2:77:b8:a4:02:b6:bf:69:ed:74:
00:15:0d:ad:79:e3:35:c0:db:4f:cf:86:e1:3f:0b:14:7f:1a:
00:f5:39:d6:fe:80:56:c6:75:9c:65:04:58:76:a6:a7:bd:b0:
5c:ab:2e:ed:8a:23:78:0e:19:15:2d:32:ae:4d:f1:af:58:a5:
c7:ed:d9:ca:2c:0e:68:8b:a7:89:8c:94:d3:96:4d:80:50:ab:
6f:63:05:f5:ba:5b:6d:c0:b5:e5:8e:0e:1f:93:0f:a1:1c:c9:
80:70:f8:20:f0:bf:d7:85:e8:46:37:2f:f0:a8:0f:32:bf:9a:
8e:68:93:d4:20:f9:28:47:e6:b2:bb:d9:11:a4:ad:d1:21:81:
60:31:71:08:1b:ca:ff:3c:a8:1a:5f:5a:e3:7b:f7:7d:f2:73:
24:22:45:a2:95:95:7f:e5:52:6a:47:24:0d:72:be:dc:6f:9c:
15:c9:9d:a7:f3:a5:21:2d:8d:ec:f7:cd:08:ef:79:9c:b5:55:
dd:c5:05:0a:f4:24:cf:c1:5b:f2:fa:09:2f:8a:1e:76:ea:a1:
eb:7a:a3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqUdzx3HtZQONTUEfJ8OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOWVjZGJiNzkwOGRmYWMzYWFkYWE1ZTQ5MTZmMjg1Yzg1
MGNjYjcwHhcNMjYwMzI2MDEwMTM4WhcNMjYwMzI3MDEwMTM4WjAzMTEwLwYDVQQD
Eyg2MDBmNDAzMGI4YTg3MmNmZGQ2NjBiMTM3M2VjYTg4ZGQ3N2JlYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX04V2Cov3W9JMhRXd8kdJUdykJ3
x8XoAiq9iec8gseNLDdAkOJhqzQGiETygRKRyMD6Z6L7xsGM0bfF7cp2DriAzp35
m6Baw/R75N/2LHjKcz6ZUhlnAt42Q5jpbb46ACqNIT1NDa/pfPo5msZczLr6MnxZ
GkHaDX4gJaqs/b7QkDAV725vldCoJ70kq2MrA/YxTSMhGnOvUYtzm3JAMyNaAd0E
sAiHPAB96ymMZJCJQfbe5EPD15ggA8x1bBrnYWb81nOFxduILBbtlo5kNvI8Ii3H
jc8BDkVAu2tlkOwvgapxUdhHvFeTNRL/+p+wahqhUUcm8GO4ifc572w5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAPQDC4qHLP3WYLE3PsqI3Xe+xlMB8GA1UdIwQY
MBaAFJGezbt5CN+sOq2qXkkW8oXIUMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAt
ZDUwMzI3N2Q3NDA2LzEva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAtZDUwMzI3N2Q3NDA2
LzEva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbgxU+Ij
iID4JiQb8NiXby7YX9zxjYeYJOgQf0r5ftgLmVsdF0jz1rfTa/+id7ikAra/ae10
ABUNrXnjNcDbT8+G4T8LFH8aAPU51v6AVsZ1nGUEWHamp72wXKsu7YojeA4ZFS0y
rk3xr1ilx+3ZyiwOaIuniYyU05ZNgFCrb2MF9bpbbcC15Y4OH5MPoRzJgHD4IPC/
14XoRjcv8KgPMr+ajmiT1CD5KEfmsrvZEaSt0SGBYDFxCBvK/zyoGl9a43v3ffJz
JCJFopWVf+VSakckDXK+3G+cFcmdp/OlIS2N7PfNCO95nLVV3cUFCvQkz8Fb8voJ
L4oeduqh63qjlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:05 2026 by rpki-client