Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: GKXUB8l7UgGBRQXVOywiAO8kgNaposr1Y+w8x/qrkgM=
Subject key identifier: 36:DB:38:21:D0:B0:F1:5E:67:35:E8:63:01:AB:A2:37:53:C6:67:DE
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 019D26280BA14DC3FF8766F1BC663710923C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 079F
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: U61N5/q24vTdIj1QBovD4yfWOulfv79+7APL2ycc7+A=)
2: xeHWs-7RIUG_PFunqf-5HW5QAFk.roa (hash: 4aUlYayA4jhd2ohdWDMeKTCA9ihSHArzD+F2fg4MdEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0b:a1:4d:c3:ff:87:66:f1:bc:66:37:10:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=36db3821d0b0f15e6735e86301aba23753c667de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:f6:ea:6d:5c:38:18:33:0f:45:93:32:fe:
7b:0e:cc:0f:41:2b:42:62:9e:6e:b0:16:0e:f6:9a:
98:be:e3:45:97:ec:7d:46:32:2c:e2:60:b4:9f:b4:
41:52:8d:52:a9:d3:75:1e:0a:9a:f3:50:5b:23:9b:
36:78:0c:5a:43:89:88:67:70:d3:67:9d:64:47:12:
e9:5e:70:5b:00:b8:d7:86:80:76:ac:33:b3:5f:e9:
aa:3b:d8:58:54:57:4f:0a:9c:46:48:77:97:34:65:
de:7b:19:55:30:8e:70:66:56:59:38:02:f7:76:9a:
0c:e7:1e:94:d5:1d:f1:54:e9:47:52:73:82:b8:60:
77:14:7d:73:cc:bd:f4:f2:87:46:ee:42:51:84:a1:
a7:48:3d:36:ff:ad:c7:3a:87:67:b0:3a:28:30:96:
7d:84:ac:24:ce:e0:87:83:59:2d:19:fd:c6:f6:05:
82:b3:b0:de:4b:a7:1d:b0:24:10:1f:0f:3b:e0:f1:
9b:cd:b7:00:2d:24:9d:f7:cd:70:6c:93:c5:c6:2c:
cb:9d:f3:6e:2c:c3:ff:e0:42:1b:81:e5:50:fc:34:
43:03:de:4b:83:57:92:74:b7:6b:95:b9:c4:00:57:
5c:ec:42:6a:2e:0a:bb:9b:05:42:ef:84:7e:d3:64:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:38:21:D0:B0:F1:5E:67:35:E8:63:01:AB:A2:37:53:C6:67:DE
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:79:4c:af:94:4b:50:19:ac:da:ca:89:19:8a:8c:95:6e:
91:fa:dd:a2:fb:1a:91:8f:94:0d:6d:e9:f7:08:96:83:1e:2b:
32:11:83:89:40:9b:fd:ab:5a:9f:ca:eb:fc:dd:8e:ec:9c:b6:
f7:97:f5:bc:56:d5:d2:25:a1:bc:45:c3:4d:a3:a4:ab:f9:5b:
78:0a:70:23:ee:41:a3:44:91:22:a0:21:57:d8:83:fd:eb:06:
67:41:ef:62:62:00:f8:71:c2:84:89:a8:e9:47:d8:34:d5:79:
9a:62:ac:9f:db:b5:86:b7:58:3e:c3:47:79:02:85:57:b4:af:
37:a3:e1:79:7c:11:44:b6:6e:5e:ea:fb:e3:8f:34:36:0b:97:
26:77:a9:01:c2:90:ba:8a:6f:74:98:13:2b:df:8b:f8:7b:84:
93:63:cf:5c:cb:8e:08:a4:60:ce:38:f0:2b:15:b1:29:05:ed:
95:be:72:f1:3a:bb:e5:d7:6e:7d:9e:cb:93:63:78:d7:63:21:
5e:2b:e1:4f:f0:06:03:64:e6:39:8f:63:51:af:93:f0:04:ec:
c2:6b:de:92:25:35:26:f3:c7:e0:5d:16:6c:2f:be:0e:75:70:
df:af:a3:2d:1c:d4:d2:11:70:50:98:41:52:d8:da:91:58:72:
d9:1a:b1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKAuhTcP/h2bxvGY3EJI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmJiNTRlMzc4MjZjMDM5MGIwNDM3OTI3OWY4ZTA2Y2Zm
M2EyMzQwHhcNMjYwMzI1MTgwMDUxWhcNMjYwMzI2MTgwMDUxWjAzMTEwLwYDVQQD
EygzNmRiMzgyMWQwYjBmMTVlNjczNWU4NjMwMWFiYTIzNzUzYzY2N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS326m1cOBgzD0WTMv57DswPQStC
Yp5usBYO9pqYvuNFl+x9RjIs4mC0n7RBUo1SqdN1Hgqa81BbI5s2eAxaQ4mIZ3DT
Z51kRxLpXnBbALjXhoB2rDOzX+mqO9hYVFdPCpxGSHeXNGXeexlVMI5wZlZZOAL3
dpoM5x6U1R3xVOlHUnOCuGB3FH1zzL308odG7kJRhKGnSD02/63HOodnsDooMJZ9
hKwkzuCHg1ktGf3G9gWCs7DeS6cdsCQQHw874PGbzbcALSSd981wbJPFxizLnfNu
LMP/4EIbgeVQ/DRDA95Lg1eSdLdrlbnEAFdc7EJqLgq7mwVC74R+02SDTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbbOCHQsPFeZzXoYwGrojdTxmfeMB8GA1UdIwQY
MBaAFCi7tU43gmwDkLBDeSefjgbP86I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZTcyOTYtZWM4Yy00MTYzLWE1NTQt
NzhjMDE3NzYyZjlmLzEvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZTcyOTYtZWM4Yy00MTYzLWE1NTQtNzhjMDE3NzYyZjlm
LzEvS0x1MVRqZUNiQU9Rc0VONUo1LU9Cc196b2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThx5TK+U
S1AZrNrKiRmKjJVukfrdovsakY+UDW3p9wiWgx4rMhGDiUCb/atan8rr/N2O7Jy2
95f1vFbV0iWhvEXDTaOkq/lbeApwI+5Bo0SRIqAhV9iD/esGZ0HvYmIA+HHChImo
6UfYNNV5mmKsn9u1hrdYPsNHeQKFV7SvN6PheXwRRLZuXur74480NguXJnepAcKQ
uopvdJgTK9+L+HuEk2PPXMuOCKRgzjjwKxWxKQXtlb5y8Tq75ddufZ7Lk2N412Mh
XivhT/AGA2TmOY9jUa+T8ATswmvekiU1JvPH4F0WbC++DnVw36+jLRzU0hFwUJhB
UtjakVhy2RqxpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:40 2026 by rpki-client