Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: AsoPNDQzNcfVEHjajd0zkdAApk+7oUvZn5BydMoAOEY=
Subject key identifier: 7E:D0:2B:DE:13:4C:6F:DA:62:B3:CF:FE:38:83:3A:04:41:13:49:DE
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019D26CD23E52DCA80D56A3C8B5C92805243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 184E
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: XVuvQsUd0yaBTN0L1BI51kMTo3MlYwBpDYXrKHg2TMs=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:23:e5:2d:ca:80:d5:6a:3c:8b:5c:92:80:52:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=7ed02bde134c6fda62b3cffe38833a04411349de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:b5:43:b7:45:cc:ea:28:c7:41:c4:bb:74:
67:0d:ad:79:67:2a:27:51:4d:44:2f:a4:4b:36:e3:
c2:9f:71:ff:13:10:58:53:60:9e:9e:ae:c2:d1:e8:
61:25:6d:6a:13:eb:e1:5e:83:0e:6e:14:41:33:74:
8e:8a:a8:80:1f:c7:86:7b:76:02:70:f4:d1:22:6c:
bc:1c:12:50:f1:a9:7c:c7:59:98:3e:8f:e5:3e:d8:
c6:68:99:05:f9:88:30:b2:26:4b:14:23:c1:08:e9:
19:85:ba:48:7b:de:2e:28:8e:be:70:e8:fd:b6:33:
66:5a:97:50:cb:cf:91:b7:81:a7:4a:d4:3d:e0:f8:
85:2e:9a:6d:d2:bd:a7:c3:63:52:a0:3e:01:b0:e4:
62:97:55:ce:5e:f5:75:2f:f5:92:d0:e3:74:79:35:
75:78:d2:23:79:42:c7:2c:cb:f0:e4:2c:a1:7e:d2:
91:ef:ed:7f:04:3d:65:28:78:e3:0c:da:3a:e0:cb:
63:14:e2:14:ba:00:32:33:04:36:1a:c0:c2:bd:f5:
6f:b3:22:79:1d:d7:4d:06:d3:bc:e3:07:94:b1:c5:
07:d3:18:c0:0a:45:6e:b4:4b:c6:51:47:63:be:a6:
32:a9:fa:77:4a:f6:89:da:60:df:cb:0d:d4:96:56:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:2B:DE:13:4C:6F:DA:62:B3:CF:FE:38:83:3A:04:41:13:49:DE
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:44:61:47:c9:59:21:fc:85:fc:75:b4:05:de:5d:bf:5e:
ac:e4:19:52:20:bf:e4:8a:54:d6:16:dd:fc:6f:9f:0f:7a:fa:
a6:df:97:51:eb:27:cc:95:7d:ca:82:9e:8f:48:b9:b3:dc:de:
e8:de:cc:c2:33:44:4f:55:19:17:f5:10:9b:31:9e:3c:f8:d3:
aa:b4:1b:d5:64:11:29:02:4d:07:8c:67:cd:9a:82:08:61:67:
91:75:34:f8:6a:0b:97:a4:46:ab:be:22:83:08:6b:1f:df:7c:
93:3b:bd:c2:2c:58:ec:ef:e7:8a:d0:19:ae:05:88:6a:8c:64:
09:6e:35:3d:bd:e3:6d:59:08:a0:62:3b:85:1c:22:8d:ee:6e:
2a:57:39:12:80:1a:75:1a:90:3e:50:ab:3c:51:ad:36:ca:b6:
a6:19:0d:e2:68:20:05:be:04:27:a1:bb:47:ed:68:af:13:8e:
8d:6a:25:b6:8a:75:f1:c9:46:34:77:7e:01:b8:b8:9f:83:c2:
ca:04:01:c1:73:d8:5a:81:48:4c:0c:d0:e6:bc:52:12:4a:cd:
e5:1d:a8:b7:f0:b5:37:2c:d8:6e:f4:06:0f:1d:82:15:eb:a6:
c9:e1:f1:1e:24:bd:43:70:d2:cd:4b:20:5c:99:b1:3d:08:0d:
fa:97:7a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSPlLcqA1Wo8i1ySgFJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjYwMzI1MjEwMTExWhcNMjYwMzI2MjEwMTExWjAzMTEwLwYDVQQD
Eyg3ZWQwMmJkZTEzNGM2ZmRhNjJiM2NmZmUzODgzM2EwNDQxMTM0OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN61Q7dFzOoox0HEu3RnDa15Zyon
UU1EL6RLNuPCn3H/ExBYU2Cenq7C0ehhJW1qE+vhXoMObhRBM3SOiqiAH8eGe3YC
cPTRImy8HBJQ8al8x1mYPo/lPtjGaJkF+YgwsiZLFCPBCOkZhbpIe94uKI6+cOj9
tjNmWpdQy8+Rt4GnStQ94PiFLppt0r2nw2NSoD4BsORil1XOXvV1L/WS0ON0eTV1
eNIjeULHLMvw5CyhftKR7+1/BD1lKHjjDNo64MtjFOIUugAyMwQ2GsDCvfVvsyJ5
HddNBtO84weUscUH0xjACkVutEvGUUdjvqYyqfp3SvaJ2mDfyw3UllYyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7QK94TTG/aYrPP/jiDOgRBE0neMB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQxEYUfJ
WSH8hfx1tAXeXb9erOQZUiC/5IpU1hbd/G+fD3r6pt+XUesnzJV9yoKej0i5s9ze
6N7MwjNET1UZF/UQmzGePPjTqrQb1WQRKQJNB4xnzZqCCGFnkXU0+GoLl6RGq74i
gwhrH998kzu9wixY7O/nitAZrgWIaoxkCW41Pb3jbVkIoGI7hRwije5uKlc5EoAa
dRqQPlCrPFGtNsq2phkN4mggBb4EJ6G7R+1orxOOjWoltop18clGNHd+Abi4n4PC
ygQBwXPYWoFITAzQ5rxSEkrN5R2ot/C1NyzYbvQGDx2CFeumyeHxHiS9Q3DSzUsg
XJmxPQgN+pd6Tg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:41 2026 by rpki-client