Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: ZVBjkPXXV6hSSGF2ljqB+NRGuN/kRt7NUmFRKyt4q64=
Subject key identifier: 21:30:2E:36:AD:28:F8:C6:A8:E3:E7:66:49:A0:D4:EA:6A:8D:61:EB
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 019D2772C2DAB9608DBFBAB4163A8BE58B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: Y0J7bnXXsrN8Gqpku6+hbod1+1DZlyCl6BjyKMDcA1Q=)
2: wgb1-iULWQz8zD4swlphbIF6xCw.roa (hash: 6+l6f6hi4vlzVRdz3OtcxpncvT0dUWv6vEKKsHWTOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c2:da:b9:60:8d:bf:ba:b4:16:3a:8b:e5:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=21302e36ad28f8c6a8e3e76649a0d4ea6a8d61eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:b8:22:d9:9b:ff:4d:04:13:30:50:32:37:
dd:91:ea:03:0e:57:50:48:03:82:3f:06:18:43:b0:
34:c4:53:b6:74:e7:a5:49:66:44:72:50:0b:10:f3:
57:32:84:3f:65:76:c2:3a:5e:78:0c:62:19:14:06:
b5:d0:f0:b8:05:3b:51:aa:ac:0c:3b:16:cd:db:f7:
6f:9e:58:d6:c5:fd:5c:a3:18:40:0d:16:8f:b9:a8:
19:9d:57:cd:c6:fd:69:99:8f:7c:88:fa:ba:7f:6e:
d9:b2:cb:75:bb:d3:d0:a2:f2:e4:aa:b1:35:1c:63:
8d:b4:b5:95:1c:d5:7e:a5:56:c3:8e:c8:56:9f:ae:
10:d3:c3:95:d0:83:a2:67:4d:43:64:a2:d1:78:cb:
0f:a6:98:71:ce:c3:ee:7f:9e:74:40:3d:19:99:11:
93:47:45:db:63:16:b3:24:84:01:c3:e0:b5:2b:56:
25:7c:16:35:54:4c:3b:00:ae:b8:4d:44:2e:09:ab:
00:a0:a3:cc:32:b9:4d:86:4d:b0:c6:9c:ab:e8:8e:
74:9b:cc:b4:11:8b:5e:21:07:21:58:c7:45:86:93:
fc:a0:43:60:ee:e9:ec:04:8f:94:1f:56:d2:31:f5:
a9:c7:a6:da:f3:d9:0a:f3:a8:93:d5:02:5d:dc:49:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:2E:36:AD:28:F8:C6:A8:E3:E7:66:49:A0:D4:EA:6A:8D:61:EB
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:5d:2a:68:dc:91:33:fe:73:f2:56:3f:4a:64:02:13:e8:
ae:cc:cd:6d:04:4f:26:df:a4:b2:33:82:ab:7c:a5:79:cc:5a:
d4:ce:33:25:7a:c8:38:00:8d:3c:34:de:c1:d8:de:9f:3e:ac:
4c:b0:ed:f9:37:98:0e:cb:7a:3c:e2:a2:5f:a7:4b:3b:ef:5e:
bc:04:46:ad:f6:11:91:4b:69:0e:9b:d7:e9:b5:c5:aa:b7:e7:
10:d9:07:51:da:49:b4:c9:da:31:54:b7:24:f0:87:a8:e1:77:
7e:d3:1a:c9:73:e9:f1:f1:4e:39:50:78:3c:04:df:a0:c0:83:
ce:f8:0b:51:3c:34:72:d0:77:2f:ec:a6:23:a4:d0:88:8a:a7:
02:46:9d:c8:f4:06:91:d3:b7:07:b7:65:b8:ec:a3:ee:f3:7d:
bd:85:a5:2b:84:87:67:c6:ab:7a:10:df:24:d0:9b:37:4a:61:
e4:97:35:94:76:85:50:30:3e:0f:fb:bc:7b:60:b4:89:c1:7a:
83:6c:2c:6c:ed:04:cc:c4:4d:13:16:0b:01:35:b2:06:4a:4b:
e9:75:71:0f:df:0e:28:96:ae:69:3d:32:35:24:9e:7b:26:fc:
59:34:5b:6e:d6:1e:ee:70:88:fc:e3:85:ee:ab:36:c0:9a:dd:
6b:23:37:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsLauWCNv7q0FjqL5YuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODJiZGZjOWIxYjI1MDAyMDM5MTIzNzc5ZmZhZjI0NzNm
ODUxYjcwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD
EygyMTMwMmUzNmFkMjhmOGM2YThlM2U3NjY0OWEwZDRlYTZhOGQ2MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+e4Itmb/00EEzBQMjfdkeoDDldQ
SAOCPwYYQ7A0xFO2dOelSWZEclALEPNXMoQ/ZXbCOl54DGIZFAa10PC4BTtRqqwM
OxbN2/dvnljWxf1coxhADRaPuagZnVfNxv1pmY98iPq6f27Zsst1u9PQovLkqrE1
HGONtLWVHNV+pVbDjshWn64Q08OV0IOiZ01DZKLReMsPpphxzsPuf550QD0ZmRGT
R0XbYxazJIQBw+C1K1YlfBY1VEw7AK64TUQuCasAoKPMMrlNhk2wxpyr6I50m8y0
EYteIQchWMdFhpP8oENg7unsBI+UH1bSMfWpx6ba89kK86iT1QJd3ElHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEwLjatKPjGqOPnZkmg1OpqjWHrMB8GA1UdIwQY
MBaAFJOCvfybGyUAIDkSN3n/ryRz+FG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYt
MjRiZjQwYzEzMDhmLzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYtMjRiZjQwYzEzMDhm
LzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIhdKmjc
kTP+c/JWP0pkAhPorszNbQRPJt+ksjOCq3ylecxa1M4zJXrIOACNPDTewdjenz6s
TLDt+TeYDst6POKiX6dLO+9evARGrfYRkUtpDpvX6bXFqrfnENkHUdpJtMnaMVS3
JPCHqOF3ftMayXPp8fFOOVB4PATfoMCDzvgLUTw0ctB3L+ymI6TQiIqnAkadyPQG
kdO3B7dluOyj7vN9vYWlK4SHZ8arehDfJNCbN0ph5Jc1lHaFUDA+D/u8e2C0icF6
g2wsbO0EzMRNExYLATWyBkpL6XVxD98OKJauaT0yNSSeeyb8WTRbbtYe7nCI/OOF
7qs2wJrdayM3Cg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:34 2026 by rpki-client