Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: xj5ycI0FbwfbYtbfuWYrbIqt0qKlfHcgRgjwMx91pvs=
Subject key identifier: 76:19:88:68:FD:4B:4A:ED:E1:BE:26:78:9B:9E:11:F4:58:07:FB:23
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 019D25F13A693493CD8C9AE632C1D2722858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1764
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa (hash: z9RT/9Jkq4vz3VK737R/u9nIymh4paqLKc/5slB5Igw=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: mIaR+NFo2MiNuKQM/b4+g51tQ2QmKtl9D7Z5c5IYRVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3a:69:34:93:cd:8c:9a:e6:32:c1:d2:72:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=76198868fd4b4aede1be26789b9e11f45807fb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:33:f7:63:5f:b0:07:ad:64:e5:31:67:40:
e6:23:0f:6f:75:62:66:95:fc:92:0e:88:3a:23:f0:
8f:de:96:28:09:e0:67:80:01:fd:cf:c3:6c:9a:cb:
85:a0:2d:c2:d9:35:34:62:4c:72:92:ed:f9:45:a7:
b1:3e:1a:f4:19:6f:cf:9a:ba:9c:7e:29:f6:ef:d2:
d9:09:5b:96:1b:13:ac:f0:39:21:ad:f5:fc:bf:9e:
21:e0:48:17:a7:33:52:24:cb:10:af:b0:c6:b3:1f:
02:bf:5e:94:d6:3d:80:16:05:47:d4:6e:c9:2d:04:
ef:c5:43:cf:06:8e:5a:21:87:c6:44:b3:5f:bb:c5:
81:86:cb:02:de:6b:49:82:2a:1d:0a:75:57:f0:64:
6a:b6:53:12:4e:2b:11:73:fc:51:fd:83:de:0d:29:
c6:5a:5c:cf:bd:47:a7:e7:ea:48:a7:79:48:87:f9:
7e:a1:3e:68:24:5c:7f:aa:0a:32:6f:d5:56:41:57:
59:01:fe:82:0c:e6:df:a6:ae:2e:25:50:bb:87:fe:
8a:ac:9d:f4:36:b6:89:8b:ad:da:72:5e:c7:01:48:
8d:8b:39:14:c2:77:f4:5c:5e:88:1a:32:07:c4:f3:
88:41:36:df:a8:e7:92:d9:bb:4c:0f:06:43:4a:7b:
98:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:19:88:68:FD:4B:4A:ED:E1:BE:26:78:9B:9E:11:F4:58:07:FB:23
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:05:03:a9:a2:d1:0e:1d:4e:ff:bc:ad:25:90:dc:25:32:05:
74:02:70:5e:34:eb:71:7d:9b:bf:08:70:76:96:32:4b:87:69:
30:bc:aa:ad:1f:e8:12:6c:ad:bd:4e:20:a8:00:15:35:02:c5:
76:9d:e9:16:1b:fa:ea:f5:a8:4f:77:b2:ff:c9:e8:7b:2e:8f:
44:07:6a:7c:1e:2d:5a:82:1e:fb:89:49:84:1d:e9:e4:bd:89:
ec:16:2d:5c:c5:12:d1:af:a4:b2:17:32:1a:cb:1c:32:6d:1e:
5c:20:b2:36:8f:bd:ca:40:5e:cc:e6:f2:a3:6b:27:9b:d6:a6:
0a:4b:9f:e5:e9:35:df:70:89:ad:e2:8c:1b:15:01:80:ac:7d:
70:8d:bd:a7:d6:72:ef:70:c9:c7:7a:e8:47:a7:33:b5:c0:f6:
42:c6:3a:49:8f:89:3f:fc:50:40:e0:bf:c4:e5:a8:dd:cc:88:
c4:60:5a:fb:30:51:ce:74:2b:e3:8d:6e:09:42:75:1d:0a:21:
6e:38:86:a8:de:76:f9:4f:d3:eb:8b:b1:c5:f9:27:9d:62:bd:
40:0a:88:23:6f:ed:e9:4b:81:3f:07:12:d9:80:10:32:63:08:
fd:ad:92:ea:13:d7:c6:47:7c:70:80:6d:65:0d:6f:5a:10:e8:
d6:10:be:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8TppNJPNjJrmMsHScihYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOWYwNzY5YzYzODgzNTczZjI3MDNkNzY2NDYyNTcwYWY1
NTkwZjMwHhcNMjYwMzI1MTcwMDU5WhcNMjYwMzI2MTcwMDU5WjAzMTEwLwYDVQQD
Eyg3NjE5ODg2OGZkNGI0YWVkZTFiZTI2Nzg5YjllMTFmNDU4MDdmYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEQz92NfsAetZOUxZ0DmIw9vdWJm
lfySDog6I/CP3pYoCeBngAH9z8NsmsuFoC3C2TU0Ykxyku35RaexPhr0GW/Pmrqc
fin279LZCVuWGxOs8DkhrfX8v54h4EgXpzNSJMsQr7DGsx8Cv16U1j2AFgVH1G7J
LQTvxUPPBo5aIYfGRLNfu8WBhssC3mtJgiodCnVX8GRqtlMSTisRc/xR/YPeDSnG
WlzPvUen5+pIp3lIh/l+oT5oJFx/qgoyb9VWQVdZAf6CDObfpq4uJVC7h/6KrJ30
NraJi63acl7HAUiNizkUwnf0XF6IGjIHxPOIQTbfqOeS2btMDwZDSnuY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYZiGj9S0rt4b4meJueEfRYB/sjMB8GA1UdIwQY
MBaAFJKfB2nGOINXPycD12ZGJXCvVZDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGIt
NWQ4MDY5YzRhNjU3LzEva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGItNWQ4MDY5YzRhNjU3
LzEva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgUDqaLR
Dh1O/7ytJZDcJTIFdAJwXjTrcX2bvwhwdpYyS4dpMLyqrR/oEmytvU4gqAAVNQLF
dp3pFhv66vWoT3ey/8noey6PRAdqfB4tWoIe+4lJhB3p5L2J7BYtXMUS0a+kshcy
GsscMm0eXCCyNo+9ykBezObyo2snm9amCkuf5ek133CJreKMGxUBgKx9cI29p9Zy
73DJx3roR6cztcD2QsY6SY+JP/xQQOC/xOWo3cyIxGBa+zBRznQr441uCUJ1HQoh
bjiGqN52+U/T64uxxfknnWK9QAqII2/t6UuBPwcS2YAQMmMI/a2S6hPXxkd8cIBt
ZQ1vWhDo1hC+/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:49 2026 by rpki-client