Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: cRu4T765u1OzxeUoReLeDXULTgQ5itoXrrIj2C+MrTc=
Subject key identifier: 0B:EE:F6:96:C3:61:84:32:A4:F5:E2:B5:72:A5:0C:E8:B2:22:7C:CA
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019D2A04FFA1993BA3211B62F732A983DAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:01:03 +0000
Manifest this update: Thu 26 Mar 2026 12:01:03 +0000
Manifest next update: Fri 27 Mar 2026 12:01:03 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: bMKv9d2EwJQwHXWOKJlJg521HjP9xvQ9gUqM8q7LNvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ff:a1:99:3b:a3:21:1b:62:f7:32:a9:83:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Mar 26 12:01:03 2026 GMT
Not After : Mar 27 12:01:03 2026 GMT
Subject: CN=0beef696c3618432a4f5e2b572a50ce8b2227cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:9f:59:56:62:cb:be:31:1d:26:6a:2e:63:
2e:bb:16:5b:c7:c1:fd:1a:36:f2:f5:fe:3a:b8:76:
b8:7b:70:ec:95:a3:30:b0:91:d1:44:5a:52:25:13:
8a:07:ca:ed:2d:04:40:b3:1d:c1:2d:b2:df:6d:3c:
b3:88:48:b7:48:87:22:fc:c6:a3:3e:70:60:b4:45:
5a:13:48:03:94:da:c1:9d:61:f1:98:4b:9f:4b:6d:
e4:db:84:ce:64:1a:8a:5f:41:d9:9a:96:4b:51:5c:
6c:5e:6e:f1:1b:8e:06:4b:00:c3:79:b0:21:c3:61:
bd:11:00:4c:b9:59:fa:4f:32:18:44:d5:51:3c:40:
0f:b5:84:a7:a1:b7:ff:95:28:25:5d:9d:00:74:af:
5b:44:88:0c:ad:64:79:ff:1b:24:d3:4d:06:be:ff:
65:17:1e:27:93:7e:c4:4f:22:d8:66:ea:96:7d:f4:
a2:ef:75:07:9c:ea:44:41:aa:c5:d8:6c:97:cb:0f:
f6:2a:cd:7f:e5:ce:be:b2:3d:f3:36:ff:e2:7b:e4:
1e:f7:d0:e5:69:c9:81:87:e1:8b:7b:c7:bb:0d:ae:
0b:80:ff:05:96:f1:34:34:16:e4:53:ba:41:ff:af:
90:e5:79:a1:f8:2e:b5:e6:b3:43:d0:51:a9:dd:82:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:F6:96:C3:61:84:32:A4:F5:E2:B5:72:A5:0C:E8:B2:22:7C:CA
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:d5:01:45:23:64:43:0e:ed:99:d0:94:06:f6:79:7a:14:
5e:c9:03:89:32:f8:3a:bd:0d:96:f3:7d:4d:d7:05:81:24:a1:
bc:e9:1c:c0:e0:cc:6d:e7:c3:37:67:d8:b5:bf:17:6b:73:19:
f0:d1:42:21:c9:b9:9b:99:5f:ea:74:5e:d5:f3:f8:fe:a4:b3:
5a:eb:ba:25:13:09:55:f7:04:c6:94:c0:f3:65:d6:4e:0e:12:
fc:6c:f1:95:56:7f:e8:73:44:74:24:cc:85:9a:b2:f2:aa:0f:
03:ff:65:5c:4b:ed:93:24:21:9a:90:13:41:16:a6:bc:53:0d:
61:ab:d7:25:92:40:f3:27:5f:68:3d:6e:46:35:14:6b:00:07:
25:e9:bb:f5:d1:00:07:f0:8f:43:48:94:3d:5c:34:cd:11:f5:
6e:b1:ef:b3:48:22:47:fe:17:28:27:66:e6:80:b2:b4:77:d5:
aa:15:55:ce:3e:d4:93:61:a5:61:b5:0c:ba:0e:2e:0c:93:e9:
52:4e:34:b4:aa:6a:77:2d:15:59:02:23:c9:87:71:26:66:7f:
de:a5:e5:0c:03:3b:41:39:98:ba:66:ac:78:2f:c2:1e:22:31:
e1:5f:e3:e9:8b:ac:f1:34:d1:fc:20:d2:ec:ce:49:c4:89:27:
84:3d:72:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBP+hmTujIRti9zKpg9roMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk
OTY3MDgwHhcNMjYwMzI2MTIwMTAzWhcNMjYwMzI3MTIwMTAzWjAzMTEwLwYDVQQD
EygwYmVlZjY5NmMzNjE4NDMyYTRmNWUyYjU3MmE1MGNlOGIyMjI3Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvafWVZiy74xHSZqLmMuuxZbx8H9
Gjby9f46uHa4e3DslaMwsJHRRFpSJROKB8rtLQRAsx3BLbLfbTyziEi3SIci/Maj
PnBgtEVaE0gDlNrBnWHxmEufS23k24TOZBqKX0HZmpZLUVxsXm7xG44GSwDDebAh
w2G9EQBMuVn6TzIYRNVRPEAPtYSnobf/lSglXZ0AdK9bRIgMrWR5/xsk000Gvv9l
Fx4nk37ETyLYZuqWffSi73UHnOpEQarF2GyXyw/2Ks1/5c6+sj3zNv/ie+Qe99Dl
acmBh+GLe8e7Da4LgP8FlvE0NBbkU7pB/6+Q5Xmh+C615rND0FGp3YIppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvu9pbDYYQypPXitXKlDOiyInzKMB8GA1UdIwQY
MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It
ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj
LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5fVAUUj
ZEMO7ZnQlAb2eXoUXskDiTL4Or0NlvN9TdcFgSShvOkcwODMbefDN2fYtb8Xa3MZ
8NFCIcm5m5lf6nRe1fP4/qSzWuu6JRMJVfcExpTA82XWTg4S/GzxlVZ/6HNEdCTM
hZqy8qoPA/9lXEvtkyQhmpATQRamvFMNYavXJZJA8ydfaD1uRjUUawAHJem79dEA
B/CPQ0iUPVw0zRH1brHvs0giR/4XKCdm5oCytHfVqhVVzj7Uk2GlYbUMug4uDJPp
Uk40tKpqdy0VWQIjyYdxJmZ/3qXlDAM7QTmYumaseC/CHiIx4V/j6Yus8TTR/CDS
7M5JxIknhD1ylw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:12 2026 by rpki-client