Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: ffcYHCyQY/h2YbuPm1b+cPAWAzGbQz/2B2QEJT8fWmY=
Subject key identifier: 01:F4:2C:3F:0D:30:EE:56:A2:53:E0:7D:05:D4:ED:10:82:6B:D2:06
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019E1C10099463296354A444871A26A5F533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:01:13 +0000
Manifest this update: Tue 12 May 2026 12:01:13 +0000
Manifest next update: Wed 13 May 2026 12:01:13 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: MIqdU/Dg35OvcQyMtks++E1YRLaHpb3joJ/iXTsj39E=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:09:94:63:29:63:54:a4:44:87:1a:26:a5:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: May 12 12:01:13 2026 GMT
Not After : May 13 12:01:13 2026 GMT
Subject: CN=01f42c3f0d30ee56a253e07d05d4ed10826bd206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:5b:99:b3:ad:36:b7:02:c8:00:e9:f1:3e:
cb:e5:75:45:25:4d:66:16:2f:3f:85:48:e3:67:9e:
41:be:3e:76:81:81:2f:22:a2:df:c2:86:25:ae:18:
96:a5:df:65:6c:60:71:d1:a6:e3:9c:cb:e4:a4:aa:
8b:78:c1:96:d8:97:6c:d4:92:3c:fd:86:a2:8e:47:
c2:11:60:5b:51:59:23:13:aa:a1:30:a6:f2:d4:61:
8b:b7:2e:e3:a9:26:4b:cc:67:65:40:dd:b8:cf:8b:
0c:42:75:34:82:2c:17:c5:63:b3:1e:4d:45:52:91:
5f:b6:e6:b5:a2:09:25:52:f1:cc:c6:94:e5:49:f0:
38:20:f8:b9:41:e9:54:21:c3:58:fa:a0:c2:2b:e7:
84:5d:71:dc:d3:22:a8:af:7f:62:22:a9:3f:fd:d9:
dd:6f:c3:69:6b:06:5c:f4:5f:64:b6:a6:83:23:42:
a4:26:77:e3:52:1b:92:82:15:bb:9b:f4:0c:5d:2b:
ef:48:e9:b7:e5:9e:f2:8b:0d:4a:1c:53:14:02:39:
b9:92:c3:28:6f:99:ff:e8:0c:cc:f9:c1:bd:c8:a8:
87:6d:e8:a1:ac:99:2b:08:c7:6c:bf:62:77:59:d6:
fe:9a:bb:b2:e2:20:54:ba:78:89:73:51:91:55:ac:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:2C:3F:0D:30:EE:56:A2:53:E0:7D:05:D4:ED:10:82:6B:D2:06
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8b:19:f4:a4:ed:44:c8:06:a2:c6:d1:90:7e:a5:a4:65:5e:
99:41:12:82:e3:85:e6:54:cd:58:fa:cd:e7:94:19:11:12:74:
5f:5d:47:fe:9e:a1:6b:84:9f:96:e4:e2:a9:38:55:8c:bc:ab:
8d:77:a1:d9:af:df:b9:b7:40:a0:9e:bd:25:86:55:67:e5:24:
3b:93:f7:b4:19:28:95:4c:61:98:c9:21:f2:54:83:cf:03:19:
c2:97:0e:66:ed:ec:bf:9d:a5:67:ff:ab:5f:a4:07:61:5a:e1:
87:e9:c2:83:fd:1f:44:de:a8:b5:95:54:d8:fb:a6:5e:4e:0b:
43:e4:5d:cd:dc:ab:20:8b:4f:01:a5:1c:a7:49:58:99:bd:ab:
89:7c:34:f0:36:7b:a4:97:b0:42:d4:6c:ee:40:8b:e9:be:bf:
ef:38:a9:b7:77:5a:c5:c0:94:a6:42:ec:8b:ae:f7:0f:a7:fb:
db:1b:c7:3a:d8:5d:97:c1:d3:9a:11:27:a9:d4:60:46:00:aa:
d0:2d:a9:15:f4:03:ae:50:e7:90:95:bf:1d:1f:5a:fe:ff:80:
d7:78:93:83:ac:66:00:aa:bc:55:0c:fb:99:28:78:3a:4e:cd:
a2:bd:4c:5c:93:ec:e1:b0:7d:a1:d4:6e:f6:ff:65:43:0c:90:
a1:8c:3e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEAmUYyljVKREhxompfUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjYwNTEyMTIwMTEzWhcNMjYwNTEzMTIwMTEzWjAzMTEwLwYDVQQD
EygwMWY0MmMzZjBkMzBlZTU2YTI1M2UwN2QwNWQ0ZWQxMDgyNmJkMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z5bmbOtNrcCyADp8T7L5XVFJU1m
Fi8/hUjjZ55Bvj52gYEvIqLfwoYlrhiWpd9lbGBx0abjnMvkpKqLeMGW2Jds1JI8
/YaijkfCEWBbUVkjE6qhMKby1GGLty7jqSZLzGdlQN24z4sMQnU0giwXxWOzHk1F
UpFftua1ogklUvHMxpTlSfA4IPi5QelUIcNY+qDCK+eEXXHc0yKor39iIqk//dnd
b8NpawZc9F9ktqaDI0KkJnfjUhuSghW7m/QMXSvvSOm35Z7yiw1KHFMUAjm5ksMo
b5n/6AzM+cG9yKiHbeihrJkrCMdsv2J3Wdb+mruy4iBUuniJc1GRVazZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH0LD8NMO5WolPgfQXU7RCCa9IGMB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQosZ9KTt
RMgGosbRkH6lpGVemUESguOF5lTNWPrN55QZERJ0X11H/p6ha4SfluTiqThVjLyr
jXeh2a/fubdAoJ69JYZVZ+UkO5P3tBkolUxhmMkh8lSDzwMZwpcOZu3sv52lZ/+r
X6QHYVrhh+nCg/0fRN6otZVU2PumXk4LQ+RdzdyrIItPAaUcp0lYmb2riXw08DZ7
pJewQtRs7kCL6b6/7zipt3daxcCUpkLsi673D6f72xvHOthdl8HTmhEnqdRgRgCq
0C2pFfQDrlDnkJW/HR9a/v+A13iTg6xmAKq8VQz7mSh4Ok7Nor1MXJPs4bB9odRu
9v9lQwyQoYw+6A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:33 2026 by rpki-client