Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: eXUIsei7m94J71w6DFIb9EDw/wz2+pj8yXd72PtHrh4=
Subject key identifier: 3A:B3:19:05:74:5F:25:31:55:7A:F6:70:A8:DF:14:AF:0E:FA:4A:49
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 019D28F2296997971D0BB0658ED5B58A6674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 06A9
Signing time: Thu 26 Mar 2026 07:00:51 +0000
Manifest this update: Thu 26 Mar 2026 07:00:51 +0000
Manifest next update: Fri 27 Mar 2026 07:00:51 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: WLDyANkrmU93yPSi7cnt0dGtZFbuh7GsgW97T5TKSyk=)
2: g4xjb4e47FjJKWJTrcOzbEKGcYM.roa (hash: Vadq8UA+c7ZsdSe4j5kxXAgAyPf++4Wc9tdJZHjBAKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:29:69:97:97:1d:0b:b0:65:8e:d5:b5:8a:66:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Mar 26 07:00:51 2026 GMT
Not After : Mar 27 07:00:51 2026 GMT
Subject: CN=3ab31905745f2531557af670a8df14af0efa4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:5d:9a:e7:48:2b:86:97:bb:e9:15:0b:50:
ab:27:a9:f9:8a:81:c0:4e:90:9b:c6:f3:9e:28:6f:
9b:6f:d5:8a:ee:4d:ee:77:d2:bb:29:79:c9:32:b1:
76:ac:30:82:a7:e9:18:88:64:b7:db:46:06:d7:90:
bd:8d:8e:a6:71:46:2b:b6:e7:a9:33:a9:83:48:c1:
fe:a8:1c:b9:9c:67:c7:af:05:ee:17:ab:02:13:d2:
30:89:0b:35:7d:2c:74:59:3d:24:88:c6:f9:f9:f7:
0a:90:44:8b:bc:4f:3f:75:e4:a8:62:48:b3:bb:e9:
4a:de:ea:52:dc:a6:cd:42:1d:3a:4a:22:b5:cf:2c:
97:22:49:7c:5e:50:5b:48:1c:53:94:90:d1:04:30:
94:a8:97:08:e7:f1:df:cf:0e:b6:96:fb:f3:48:48:
16:56:73:da:fd:f7:06:e2:56:74:05:92:0f:0b:68:
20:ac:87:9f:23:ed:7b:83:d7:e9:16:6a:e8:94:8e:
6d:c0:52:b4:ee:68:1d:13:cb:ba:bd:02:d1:b7:92:
e2:83:5a:85:90:97:91:8f:cc:e0:f6:7f:d4:b1:f6:
ad:80:33:2b:88:ac:b6:24:fc:b5:5a:16:5c:6e:54:
41:ed:80:bf:39:79:8e:df:3a:4f:48:d8:7e:6c:cc:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:19:05:74:5F:25:31:55:7A:F6:70:A8:DF:14:AF:0E:FA:4A:49
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:23:12:35:d4:6b:4c:4c:88:5a:3d:20:b5:fb:e9:3e:79:
3b:19:1c:a8:b1:a1:d7:8f:dc:2a:09:56:79:f1:46:7d:7c:49:
82:96:cb:d5:82:e9:40:f5:a3:54:9b:66:df:94:ad:d4:61:3f:
f1:af:68:65:a9:21:c6:b6:77:e3:a0:ee:3e:fc:81:e3:7a:19:
cd:0d:64:f0:3c:9b:0b:7c:09:d8:a7:8f:60:ee:98:23:c8:66:
87:75:76:97:79:4c:cf:40:a7:f7:63:d1:d6:65:d4:45:e2:ac:
59:cd:09:a4:9e:4c:ad:09:92:46:b2:da:55:56:24:43:34:b9:
56:d8:3b:44:2d:52:ea:89:e9:71:3e:c9:ba:7a:0c:7f:60:c8:
73:e4:11:81:1e:f2:80:27:51:27:c4:56:17:83:ea:50:28:df:
2d:de:b8:6a:a6:e0:b9:e5:41:ee:59:04:40:b0:e9:8d:d2:c6:
3f:8f:9e:cf:90:f0:28:9f:23:b0:84:90:42:75:d3:aa:ac:aa:
d6:52:f3:d4:4b:42:a8:aa:42:2f:02:ed:bf:62:7c:7f:d1:cd:
33:c2:47:ae:92:b3:4d:07:f5:aa:41:06:e9:69:b9:31:b7:9f:
f7:b4:fa:6e:dc:68:f1:d9:f1:63:73:2f:77:fd:85:26:4d:e2:
54:c4:64:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8ilpl5cdC7BljtW1imZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk3YmM3MzMwZWE5OTkwMGY0ZmM5MTAzM2EzMzE3ZTU2
Zjc1ZTIwHhcNMjYwMzI2MDcwMDUxWhcNMjYwMzI3MDcwMDUxWjAzMTEwLwYDVQQD
EygzYWIzMTkwNTc0NWYyNTMxNTU3YWY2NzBhOGRmMTRhZjBlZmE0YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiytdmudIK4aXu+kVC1CrJ6n5ioHA
TpCbxvOeKG+bb9WK7k3ud9K7KXnJMrF2rDCCp+kYiGS320YG15C9jY6mcUYrtuep
M6mDSMH+qBy5nGfHrwXuF6sCE9IwiQs1fSx0WT0kiMb5+fcKkESLvE8/deSoYkiz
u+lK3upS3KbNQh06SiK1zyyXIkl8XlBbSBxTlJDRBDCUqJcI5/Hfzw62lvvzSEgW
VnPa/fcG4lZ0BZIPC2ggrIefI+17g9fpFmrolI5twFK07mgdE8u6vQLRt5Lig1qF
kJeRj8zg9n/UsfatgDMriKy2JPy1WhZcblRB7YC/OXmO3zpPSNh+bMx0vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqzGQV0XyUxVXr2cKjfFK8O+kpJMB8GA1UdIwQY
MBaAFCkZe8czDqmZAPT8kQM6Mxflb3XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjct
MzUwMDRhZjVjOTM1LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjctMzUwMDRhZjVjOTM1
LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjYjEjXU
a0xMiFo9ILX76T55OxkcqLGh14/cKglWefFGfXxJgpbL1YLpQPWjVJtm35St1GE/
8a9oZakhxrZ346DuPvyB43oZzQ1k8DybC3wJ2KePYO6YI8hmh3V2l3lMz0Cn92PR
1mXUReKsWc0JpJ5MrQmSRrLaVVYkQzS5Vtg7RC1S6onpcT7JunoMf2DIc+QRgR7y
gCdRJ8RWF4PqUCjfLd64aqbgueVB7lkEQLDpjdLGP4+ez5DwKJ8jsISQQnXTqqyq
1lLz1EtCqKpCLwLtv2J8f9HNM8JHrpKzTQf1qkEG6Wm5Mbef97T6btxo8dnxY3Mv
d/2FJk3iVMRkFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:56 2026 by rpki-client