Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: v5FOa3jwOM8MftXBaNOByQUGhYbX2baKMiQ/HR/47w4=
Subject key identifier: 1A:FF:12:B2:FA:AE:F4:72:6B:B6:FD:A7:92:8F:E6:BA:68:D1:AF:B7
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019D2E18E2839EF6694C73FC96A3693DBF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 07:01:15 +0000
Manifest this update: Fri 27 Mar 2026 07:01:15 +0000
Manifest next update: Sat 28 Mar 2026 07:01:15 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: ZA77gnqJc8aCs/FtsSV0w6CiIEV8W38CltB4RFxGIvE=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:18:e2:83:9e:f6:69:4c:73:fc:96:a3:69:3d:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Mar 27 07:01:15 2026 GMT
Not After : Mar 28 07:01:15 2026 GMT
Subject: CN=1aff12b2faaef4726bb6fda7928fe6ba68d1afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:0d:e2:08:7c:85:18:45:72:74:f6:bd:ee:
0a:fe:29:65:ec:1d:f1:59:b8:37:89:be:92:92:89:
f5:86:87:53:52:2f:f4:7b:cd:c2:26:27:ef:40:b0:
ac:08:f9:c8:95:cc:db:9c:ac:67:ec:6e:bf:07:a3:
2e:4b:e8:a6:85:99:3c:2d:b0:c7:79:fb:48:86:72:
24:f2:a0:12:88:72:b8:7f:e3:ca:82:eb:b2:d3:a9:
01:16:70:6d:0d:43:e2:34:fe:ff:26:72:78:5b:af:
4d:2f:81:94:ea:d3:70:1f:22:b5:fd:2d:96:f7:79:
31:29:6d:75:c5:22:11:ac:7f:11:bc:a2:a1:a7:5c:
4d:93:7f:63:49:e3:c1:3b:c8:26:73:97:4a:63:77:
8a:a5:07:69:e4:a1:d3:2d:f6:08:9e:ec:d7:27:bc:
1f:76:1c:b2:bd:73:3c:d1:42:0f:8f:4e:c8:13:cc:
6c:68:3b:5a:e1:e6:72:5d:50:67:ed:44:e6:3c:11:
64:1d:5f:1c:d1:14:ae:3a:97:a0:2e:8d:8a:3f:b2:
36:54:a2:5f:fe:f5:44:36:2a:19:c8:7e:2c:37:ad:
0f:8a:36:3e:f2:82:e8:2a:ef:9f:47:8d:c2:52:61:
0b:f4:f7:96:17:95:41:5d:f5:72:85:b6:5d:f2:68:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:12:B2:FA:AE:F4:72:6B:B6:FD:A7:92:8F:E6:BA:68:D1:AF:B7
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:71:96:0c:d8:50:7d:ca:cd:70:a6:10:e0:a9:1e:c0:ec:72:
a9:bf:23:54:2b:c6:7b:b2:b4:64:c8:85:45:64:19:a4:60:10:
67:b1:6a:e2:d5:9f:8b:59:9b:f4:e8:2b:aa:df:a1:5c:f5:8b:
e4:f0:e3:25:8c:8a:19:b0:40:da:b7:34:73:07:3e:79:7d:f5:
53:92:76:89:8a:86:36:f4:29:1b:a2:08:1e:f5:1a:aa:c7:dd:
c0:45:29:36:31:3a:ae:2e:16:c0:c4:1f:96:79:dc:02:1f:c1:
73:a5:34:f7:ca:5b:5a:e9:03:03:ab:a2:21:e2:b7:7c:2d:65:
62:08:5f:b9:8d:ba:6e:cd:f3:4b:5a:fa:40:a1:5a:1a:3e:c8:
66:92:81:40:e7:50:ca:65:d7:53:4b:8e:da:09:99:32:b8:a8:
df:b3:3a:30:82:9b:ec:60:85:14:c8:cd:cf:5a:4e:17:56:d8:
6c:6b:d7:63:52:93:26:0d:54:11:36:81:2c:e6:b4:c2:06:bf:
68:8d:36:e9:8a:41:36:3b:b0:91:a7:92:8a:8e:2c:7b:f3:c3:
d5:3a:b7:28:1e:08:d6:77:8b:72:95:da:aa:14:41:53:77:3e:
6b:b2:80:da:e5:02:df:71:df:f7:40:4b:ee:02:61:34:08:b4:
7b:fc:8a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0uGOKDnvZpTHP8lqNpPb8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3
YTI1NjYwHhcNMjYwMzI3MDcwMTE1WhcNMjYwMzI4MDcwMTE1WjAzMTEwLwYDVQQD
EygxYWZmMTJiMmZhYWVmNDcyNmJiNmZkYTc5MjhmZTZiYTY4ZDFhZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4MN4gh8hRhFcnT2ve4K/ill7B3x
Wbg3ib6Skon1hodTUi/0e83CJifvQLCsCPnIlczbnKxn7G6/B6MuS+imhZk8LbDH
eftIhnIk8qASiHK4f+PKguuy06kBFnBtDUPiNP7/JnJ4W69NL4GU6tNwHyK1/S2W
93kxKW11xSIRrH8RvKKhp1xNk39jSePBO8gmc5dKY3eKpQdp5KHTLfYInuzXJ7wf
dhyyvXM80UIPj07IE8xsaDta4eZyXVBn7UTmPBFkHV8c0RSuOpegLo2KP7I2VKJf
/vVENioZyH4sN60PijY+8oLoKu+fR43CUmEL9PeWF5VBXfVyhbZd8mivEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBr/ErL6rvRya7b9p5KP5rpo0a+3MB8GA1UdIwQY
MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt
OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz
LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHGWDNhQ
fcrNcKYQ4KkewOxyqb8jVCvGe7K0ZMiFRWQZpGAQZ7Fq4tWfi1mb9Ogrqt+hXPWL
5PDjJYyKGbBA2rc0cwc+eX31U5J2iYqGNvQpG6IIHvUaqsfdwEUpNjE6ri4WwMQf
lnncAh/Bc6U098pbWukDA6uiIeK3fC1lYghfuY26bs3zS1r6QKFaGj7IZpKBQOdQ
ymXXU0uO2gmZMrio37M6MIKb7GCFFMjNz1pOF1bYbGvXY1KTJg1UETaBLOa0wga/
aI026YpBNjuwkaeSio4se/PD1Tq3KB4I1neLcpXaqhRBU3c+a7KA2uUC33Hf90BL
7gJhNAi0e/yKvQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 11:12:30 2026 by rpki-client