Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: fxwM5lsjkcOyCehPp0saRdcN5aONr2etERmCA7is/Pw=
Subject key identifier: AF:5E:12:58:DA:4A:41:81:9A:F3:99:36:4C:C7:AC:67:8A:BD:6E:E1
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 019D265F96EE98219C97C77BA153020B1F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (hash: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw=)
2: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (hash: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: 80JI6wQtOpVevvhC5Mn2n/SrMt0/CUYb5RAb/ZD/dRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:96:ee:98:21:9c:97:c7:7b:a1:53:02:0b:1f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=af5e1258da4a41819af399364cc7ac678abd6ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:f6:a1:dd:5f:2d:13:d2:8a:19:49:49:e5:
65:2d:6b:5e:4b:d4:c1:9c:d0:3f:8a:8c:d4:82:1d:
ed:d4:e6:57:6f:4e:26:5e:28:a7:61:d2:9b:b4:03:
9e:d6:7f:05:94:88:97:98:84:e7:5f:13:ed:87:5a:
f3:4b:ab:32:49:31:75:ff:65:36:bd:0a:e4:9c:15:
48:9e:8c:ad:a1:95:95:74:18:f9:74:1e:8d:ab:f3:
7f:e7:69:09:e9:db:21:1a:d7:69:10:1a:dd:80:56:
b5:7c:cd:96:44:e3:1c:c1:89:6c:91:77:e2:72:35:
a0:8b:0c:9f:b7:7a:fb:a1:bd:6f:d3:f4:63:5a:59:
e7:3c:f5:de:53:8a:23:47:fe:e9:e5:9d:9a:a6:12:
28:df:b5:59:fb:db:e5:6c:61:7d:fb:21:4f:77:d7:
ad:dd:4a:cf:70:09:a5:cf:6b:3b:29:fd:01:9a:00:
ff:27:52:8d:1f:97:37:e7:a9:34:be:f1:a0:35:0d:
0a:cd:78:61:a7:d6:5e:a1:e7:bd:48:c2:8b:bf:c8:
8f:9a:7e:a3:f2:7e:c3:35:1c:d8:9d:55:aa:3a:55:
b5:0a:ed:71:81:c4:c7:5f:b2:fe:06:26:61:92:1d:
e8:e0:85:fd:c1:a8:4d:b1:8b:71:4b:fb:b7:a5:0e:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:12:58:DA:4A:41:81:9A:F3:99:36:4C:C7:AC:67:8A:BD:6E:E1
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:ab:82:54:6d:7f:85:c8:b0:02:b7:90:0e:f8:cf:28:85:
b7:04:0f:d8:93:be:45:d1:f6:d7:06:70:4f:2a:a2:3b:55:99:
2b:cd:d8:e7:4c:a9:70:09:bb:89:fc:84:86:41:e5:8f:44:06:
c5:5a:30:18:83:40:c4:41:34:86:ea:6f:ad:b5:4e:34:96:8c:
bb:3e:61:a1:e1:4c:ec:f1:7b:dc:fe:e5:80:40:19:a6:b9:8b:
49:3b:26:39:bf:0b:fa:93:30:95:24:93:28:f1:06:19:6c:76:
a8:dd:15:c2:fd:c9:46:01:d8:cc:ee:c9:97:ab:1b:a0:95:fb:
9c:9d:e4:7e:d4:4d:ad:b6:ce:5c:1b:1e:9a:df:13:bb:0b:56:
30:32:89:0c:b0:93:18:8a:12:d6:56:f2:d9:99:bd:25:e5:5c:
e3:c1:c6:1c:d8:8e:0c:20:1f:c8:4d:1b:6d:a8:68:d1:29:21:
06:d1:57:61:b7:8a:af:29:37:ee:57:d6:70:e6:59:8a:1a:58:
0a:b5:9d:e6:a4:be:dd:98:20:ea:e9:38:cf:a9:d5:d2:e4:ae:
ee:81:09:ac:75:d0:15:05:c3:a9:02:68:02:f8:14:4c:27:f8:
fc:d3:21:a7:35:6c:88:63:23:c9:1d:b2:32:ae:c9:00:df:8b:
32:a1:28:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX5bumCGcl8d7oVMCCx8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjYwMzI1MTkwMTMxWhcNMjYwMzI2MTkwMTMxWjAzMTEwLwYDVQQD
EyhhZjVlMTI1OGRhNGE0MTgxOWFmMzk5MzY0Y2M3YWM2NzhhYmQ2ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5H2od1fLRPSihlJSeVlLWteS9TB
nNA/iozUgh3t1OZXb04mXiinYdKbtAOe1n8FlIiXmITnXxPth1rzS6sySTF1/2U2
vQrknBVInoytoZWVdBj5dB6Nq/N/52kJ6dshGtdpEBrdgFa1fM2WROMcwYlskXfi
cjWgiwyft3r7ob1v0/RjWlnnPPXeU4ojR/7p5Z2aphIo37VZ+9vlbGF9+yFPd9et
3UrPcAmlz2s7Kf0BmgD/J1KNH5c356k0vvGgNQ0KzXhhp9Zeoee9SMKLv8iPmn6j
8n7DNRzYnVWqOlW1Cu1xgcTHX7L+BiZhkh3o4IX9wahNsYtxS/u3pQ6RMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9eEljaSkGBmvOZNkzHrGeKvW7hMB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoqrglRt
f4XIsAK3kA74zyiFtwQP2JO+RdH21wZwTyqiO1WZK83Y50ypcAm7ifyEhkHlj0QG
xVowGINAxEE0hupvrbVONJaMuz5hoeFM7PF73P7lgEAZprmLSTsmOb8L+pMwlSST
KPEGGWx2qN0Vwv3JRgHYzO7Jl6sboJX7nJ3kftRNrbbOXBsemt8TuwtWMDKJDLCT
GIoS1lby2Zm9JeVc48HGHNiODCAfyE0bbaho0SkhBtFXYbeKryk37lfWcOZZihpY
CrWd5qS+3Zgg6uk4z6nV0uSu7oEJrHXQFQXDqQJoAvgUTCf4/NMhpzVsiGMjyR2y
Mq7JAN+LMqEoeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:08 2026 by rpki-client