Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: Dbc2CqAcMdFtSCmsUmgeu3u/RChUu7OXNUQbptA8XOY=
Subject key identifier: A1:E0:0F:AB:95:71:A5:EE:E7:4A:C9:01:A1:0B:FD:05:3B:6E:28:E2
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 019D2772BAB568E35142837C93FA4FD626D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: 1rx9/kbTFdZ2Khsq072SlT6awTwot3aWNhf7G6uJZv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ba:b5:68:e3:51:42:83:7c:93:fa:4f:d6:26:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=a1e00fab9571a5eee74ac901a10bfd053b6e28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:f7:e4:1d:20:42:1c:70:55:47:a3:af:ae:
c9:47:18:1c:16:a0:46:cc:5d:8e:95:bc:3d:2d:85:
98:4b:54:39:84:3e:76:ca:2e:43:74:93:dc:a9:9b:
3a:48:57:ac:c0:e3:e1:0c:5a:d2:eb:9c:02:a4:b9:
91:f0:77:2a:76:88:c9:75:6c:c1:9a:ea:17:a2:b0:
12:bb:93:89:fb:a8:12:bd:83:ac:4a:26:06:d5:b2:
41:d2:41:5e:8d:d9:13:ed:0d:62:c9:7e:05:a6:db:
76:70:34:f2:55:ae:76:01:5a:6e:ed:56:8a:f2:6c:
de:ed:c2:c9:85:84:71:07:ea:f0:3d:bd:92:76:a5:
56:3a:5b:1e:32:30:10:f2:e5:f4:35:1b:39:a1:33:
73:b6:66:1e:80:cb:a8:22:37:0c:ac:46:36:44:fd:
0b:48:f6:f6:b1:95:d0:9a:e3:86:3b:70:b3:74:ce:
e7:4a:74:b1:02:e6:46:03:ac:eb:61:35:65:27:da:
a9:44:28:1d:a0:df:56:64:52:fc:d2:b5:5d:53:ff:
eb:5e:b4:bd:c8:e1:c9:8d:94:e1:d8:75:13:98:f5:
82:9e:fa:ff:dc:7f:42:ce:e1:3d:33:73:6d:f1:9d:
f0:03:ca:98:b2:02:97:aa:b5:91:21:57:8a:1c:54:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:0F:AB:95:71:A5:EE:E7:4A:C9:01:A1:0B:FD:05:3B:6E:28:E2
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:bd:db:0a:0d:9f:98:84:79:72:b8:5e:ed:c8:79:97:9d:
ff:2f:68:4d:7f:6f:6c:15:7f:34:ed:ae:39:bf:70:cf:5a:d7:
d4:2f:0e:73:2c:ef:bc:43:e3:0e:55:5e:aa:f4:88:3c:b5:7b:
78:ff:4c:03:d2:0a:cc:94:35:48:08:8e:c4:27:c1:d6:08:29:
49:1e:e4:5d:7e:b9:05:fc:d8:c1:3d:14:7d:fb:33:02:2a:a1:
46:9a:c8:c8:55:6b:dc:d8:2e:37:48:0b:1e:f6:7b:42:5a:b2:
78:ee:b6:6d:b6:f6:b8:b6:77:4a:16:05:40:35:9d:f5:45:53:
9d:fb:65:18:ef:99:c7:2e:58:1e:2b:42:14:84:54:72:80:40:
e2:6e:e8:08:39:1f:03:c3:a4:7b:e2:1c:5e:e8:60:f5:0a:09:
bf:6d:9f:76:10:1d:68:b4:39:ef:0e:1f:95:1b:8b:c1:2b:9b:
18:d8:1b:1f:9a:b1:f4:b4:f0:36:f5:ca:28:85:0c:50:ff:0a:
10:0b:4f:d4:92:5d:3b:94:9b:dc:a6:3f:40:25:42:0c:6b:24:
0a:49:ea:ff:1f:08:4b:67:6f:0b:b3:73:e6:61:53:6a:ad:dd:
e8:40:8d:88:61:54:f6:01:de:3f:c8:03:4e:b6:b9:fa:fa:4f:
6e:95:6e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrq1aONRQoN8k/pP1ibUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDYxNWU2MDA2YTg2MWY2NmNmNzMwN2QzMGZjOTM1MGM3
NmY3ZGUwHhcNMjYwMzI2MDAwMjAzWhcNMjYwMzI3MDAwMjAzWjAzMTEwLwYDVQQD
EyhhMWUwMGZhYjk1NzFhNWVlZTc0YWM5MDFhMTBiZmQwNTNiNmUyOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLb35B0gQhxwVUejr67JRxgcFqBG
zF2Olbw9LYWYS1Q5hD52yi5DdJPcqZs6SFeswOPhDFrS65wCpLmR8HcqdojJdWzB
muoXorASu5OJ+6gSvYOsSiYG1bJB0kFejdkT7Q1iyX4Fptt2cDTyVa52AVpu7VaK
8mze7cLJhYRxB+rwPb2SdqVWOlseMjAQ8uX0NRs5oTNztmYegMuoIjcMrEY2RP0L
SPb2sZXQmuOGO3CzdM7nSnSxAuZGA6zrYTVlJ9qpRCgdoN9WZFL80rVdU//rXrS9
yOHJjZTh2HUTmPWCnvr/3H9CzuE9M3Nt8Z3wA8qYsgKXqrWRIVeKHFRsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHgD6uVcaXu50rJAaEL/QU7bijiMB8GA1UdIwQY
MBaAFCgGFeYAaoYfZs9zB9MPyTUMdvfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEt
YWU5MmI2YWUxYmZlLzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEtYWU5MmI2YWUxYmZl
LzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtu92woN
n5iEeXK4Xu3IeZed/y9oTX9vbBV/NO2uOb9wz1rX1C8OcyzvvEPjDlVeqvSIPLV7
eP9MA9IKzJQ1SAiOxCfB1ggpSR7kXX65BfzYwT0UffszAiqhRprIyFVr3NguN0gL
HvZ7QlqyeO62bbb2uLZ3ShYFQDWd9UVTnftlGO+Zxy5YHitCFIRUcoBA4m7oCDkf
A8Oke+IcXuhg9QoJv22fdhAdaLQ57w4flRuLwSubGNgbH5qx9LTwNvXKKIUMUP8K
EAtP1JJdO5Sb3KY/QCVCDGskCknq/x8IS2dvC7Nz5mFTaq3d6ECNiGFU9gHeP8gD
Tra5+vpPbpVuZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:07 2026 by rpki-client