Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: bnAVwA7ZpacV5ws+QAKyv9FI0Ymyw9ApA9x7J6gpfi4=
Subject key identifier: 3F:0F:51:27:0D:D3:4D:D8:F1:19:65:81:EC:79:4F:81:E2:BA:C7:6B
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 019D28846BBB4DD636B9E3D3122F9C51299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 108E
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=)
2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: QZzEKt5PkuM1Xb7iUSheDM2AfgAPqHgSZL3W8qEW98U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6b:bb:4d:d6:36:b9:e3:d3:12:2f:9c:51:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=3f0f51270dd34dd8f1196581ec794f81e2bac76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:75:eb:da:a6:88:e3:38:d2:c3:7a:6e:c7:
9b:fd:58:28:59:d6:6b:af:2c:3c:50:40:ff:3d:a4:
01:b2:91:b4:b7:31:ac:9c:16:af:2a:ba:50:fc:a6:
36:bb:82:f2:6d:05:06:8e:c9:98:f1:53:ef:fc:cd:
15:18:ac:8e:e7:c5:d4:19:60:42:fb:77:9d:4e:81:
52:15:18:3b:73:39:c4:77:6c:44:ec:74:4a:11:21:
af:09:a8:18:5f:18:2a:8d:5e:53:46:f9:6f:a1:df:
7a:85:68:51:db:34:5f:7b:27:16:cb:a1:4c:1e:a0:
3f:2f:02:d2:14:62:8c:44:74:f9:b4:75:48:5f:af:
6b:ef:5b:2b:af:1a:55:8a:22:d7:6c:5f:26:fc:13:
84:35:53:a7:26:0f:a9:d0:60:4a:ed:9d:69:27:9f:
57:28:f2:1d:c4:ec:71:71:2b:36:c9:ef:ef:34:0d:
fa:50:48:72:92:e4:55:70:ef:f5:50:ca:eb:77:95:
3f:7a:7b:43:3d:99:ac:54:0e:90:59:0e:a6:c4:9d:
6f:c8:fb:46:f8:8e:20:60:54:0b:58:6d:c8:d6:ee:
0c:fa:9b:01:7c:85:a5:50:6b:50:e7:b6:4c:62:91:
ee:1b:f8:d0:68:29:c6:28:00:3a:54:93:6f:67:c3:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:51:27:0D:D3:4D:D8:F1:19:65:81:EC:79:4F:81:E2:BA:C7:6B
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:8f:f7:7e:a1:dd:4a:bf:26:06:d7:fe:1a:41:45:ae:f9:
44:2f:36:d8:c0:48:8f:23:48:47:47:0a:13:90:c5:a7:38:cb:
7e:ab:5d:4f:80:7a:38:11:6a:6c:f5:55:9a:83:8c:c6:93:39:
01:06:6a:27:0a:bb:55:db:48:f5:15:8b:ec:b6:be:d2:41:35:
50:22:2b:d1:79:78:b6:81:ae:c0:bd:7f:23:01:8b:00:df:99:
04:66:af:0d:78:aa:ed:89:bb:a8:4d:dc:3d:21:b9:ca:e5:2a:
37:9e:0e:32:3f:85:67:63:a0:fa:a9:34:19:82:67:4d:28:87:
19:e3:95:e8:f9:21:b4:98:2a:1c:d9:69:47:d3:82:0a:bb:54:
12:e7:3b:de:3a:f4:91:63:a4:cf:e6:15:86:71:62:56:82:59:
13:5c:a5:b7:15:e9:96:ce:ac:81:74:90:31:30:9a:5a:72:63:
1b:e7:fe:53:68:bc:6e:86:9b:18:16:c0:e5:fb:c6:97:48:20:
6a:d2:d2:28:78:66:67:c4:8c:88:4f:f6:07:a0:c7:98:1d:b3:
05:5d:2a:f8:07:d6:df:c6:5f:ea:9a:f3:a2:b6:4e:98:71:09:
66:ea:35:5d:8b:7b:ef:cc:69:02:27:f2:98:82:66:72:ff:6e:
00:cd:72:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGu7TdY2uePTEi+cUSmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0
ZDVjZDUwHhcNMjYwMzI2MDUwMTAwWhcNMjYwMzI3MDUwMTAwWjAzMTEwLwYDVQQD
EygzZjBmNTEyNzBkZDM0ZGQ4ZjExOTY1ODFlYzc5NGY4MWUyYmFjNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmZ169qmiOM40sN6bseb/VgoWdZr
ryw8UED/PaQBspG0tzGsnBavKrpQ/KY2u4LybQUGjsmY8VPv/M0VGKyO58XUGWBC
+3edToFSFRg7cznEd2xE7HRKESGvCagYXxgqjV5TRvlvod96hWhR2zRfeycWy6FM
HqA/LwLSFGKMRHT5tHVIX69r71srrxpViiLXbF8m/BOENVOnJg+p0GBK7Z1pJ59X
KPIdxOxxcSs2ye/vNA36UEhykuRVcO/1UMrrd5U/entDPZmsVA6QWQ6mxJ1vyPtG
+I4gYFQLWG3I1u4M+psBfIWlUGtQ57ZMYpHuG/jQaCnGKAA6VJNvZ8NsFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8PUScN003Y8Rllgex5T4HiusdrMB8GA1UdIwQY
MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt
ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5
LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUruP936h
3Uq/JgbX/hpBRa75RC822MBIjyNIR0cKE5DFpzjLfqtdT4B6OBFqbPVVmoOMxpM5
AQZqJwq7VdtI9RWL7La+0kE1UCIr0Xl4toGuwL1/IwGLAN+ZBGavDXiq7Ym7qE3c
PSG5yuUqN54OMj+FZ2Og+qk0GYJnTSiHGeOV6PkhtJgqHNlpR9OCCrtUEuc73jr0
kWOkz+YVhnFiVoJZE1yltxXpls6sgXSQMTCaWnJjG+f+U2i8boabGBbA5fvGl0gg
atLSKHhmZ8SMiE/2B6DHmB2zBV0q+AfW38Zf6przorZOmHEJZuo1XYt778xpAify
mIJmcv9uAM1yGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:26 2026 by rpki-client