Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
File: kH4Am_EKApaltVx9KxYjSr2P9f8.mft (raw, json)
Hash identifier: Z2xdSKTqgbxcSGaDo5/KjE5Mrw08PqhkvgDfgu/rDx8=
Subject key identifier: FE:EA:C6:69:D2:DB:B6:45:FB:FE:A9:49:2A:46:A2:67:7C:30:D3:75
Authority key identifier: 90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF
Certificate issuer: /CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff
Certificate serial: 019D31F4F280A6A36E75ABB4699321CE43E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
Manifest number: CC
Signing time: Sat 28 Mar 2026 01:00:29 +0000
Manifest this update: Sat 28 Mar 2026 01:00:29 +0000
Manifest next update: Sun 29 Mar 2026 01:00:29 +0000
Files and hashes: 1: Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa (hash: 9Qv3oDioBW3X+4WvVAkRPhv8k9qZnHux4lp0b9HREa0=)
2: kH4Am_EKApaltVx9KxYjSr2P9f8.crl (hash: aD+jHkpye5qhMvVZrTqdgKYJa+4sBa4N/A0dLJfpMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:f2:80:a6:a3:6e:75:ab:b4:69:93:21:ce:43:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff
Validity
Not Before: Mar 28 01:00:29 2026 GMT
Not After : Mar 29 01:00:29 2026 GMT
Subject: CN=feeac669d2dbb645fbfea9492a46a2677c30d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:3a:82:e4:4f:c8:d4:4d:cb:1b:ec:61:55:
cf:14:4e:30:21:f2:34:c8:22:cb:c6:de:71:71:5e:
3d:bf:05:fb:f4:fe:af:cc:af:b6:b9:04:bc:a0:f5:
fa:38:a3:c9:02:36:f4:9b:22:e3:c2:a4:24:fa:8a:
0d:56:f7:7e:18:4c:bc:72:1c:88:33:bf:66:9b:98:
41:91:2f:a9:e8:93:1b:e2:1e:6d:95:1c:ba:f1:8c:
12:aa:4c:de:a4:4d:1c:e5:8a:df:83:08:63:18:04:
ba:b1:a8:d8:cb:10:cc:12:17:55:7a:4c:e0:44:de:
47:bb:73:0b:bf:a3:88:04:39:5a:68:10:75:4e:b6:
23:4e:31:55:ea:7c:03:5e:36:2f:9c:59:44:79:f2:
6d:ce:f8:01:36:75:d4:44:47:d7:a5:c2:cb:9a:5d:
39:20:a9:2b:97:c5:13:68:f7:bc:e8:b0:4c:25:30:
86:ff:c1:f5:70:32:bf:71:83:d3:ac:b5:f6:84:c4:
f6:b7:04:5c:a6:54:4c:6e:ce:54:de:66:ad:dd:bc:
60:ff:6e:f3:5f:ed:85:1f:cf:80:4b:85:30:3d:c8:
d5:2a:7c:26:4d:60:3b:ac:57:a6:59:89:2f:c1:06:
7e:80:25:af:74:6d:c9:7e:95:5c:93:4c:4c:1e:bd:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:C6:69:D2:DB:B6:45:FB:FE:A9:49:2A:46:A2:67:7C:30:D3:75
X509v3 Authority Key Identifier:
keyid:90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:a2:be:4f:23:e3:63:d8:07:35:25:53:85:a1:9d:87:20:
3d:86:72:eb:1c:d8:47:ad:50:68:b8:70:80:78:d3:6b:79:58:
50:66:21:6f:20:c2:bc:bb:07:17:0d:0e:76:3f:05:ee:cf:de:
4e:56:15:33:02:f1:5c:5f:b3:96:2e:61:3c:2c:b7:be:49:6c:
f6:39:03:36:c5:13:d1:ac:30:8e:f2:59:b0:4a:fd:7e:c6:5a:
ad:5c:c6:ca:64:a1:2e:16:1f:67:0f:5f:07:f0:cb:5c:5a:16:
d3:55:d6:e5:a1:27:56:ee:d2:40:05:cb:25:ad:f4:72:7f:89:
6b:00:b8:93:c8:9d:71:74:73:91:f6:aa:7f:a0:a4:05:de:99:
f9:dc:78:92:91:55:18:56:4e:c3:1a:56:d9:ad:94:86:e0:5e:
f1:18:67:62:4f:9b:d1:c8:93:ed:82:28:78:09:98:a2:1c:6e:
a7:e3:32:c4:ed:97:32:ac:a8:79:27:20:a8:3f:f6:7f:aa:2b:
5f:cd:35:4d:99:90:09:68:b9:3d:f3:e1:c2:f3:cb:f9:8e:18:
d2:69:92:30:3a:2c:54:c6:47:7f:d5:20:05:f5:19:9f:6a:bd:
cb:bf:65:aa:50:aa:95:22:01:be:56:ad:74:29:40:72:49:a6:
c1:9f:99:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9PKApqNudau0aZMhzkPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2UwMDliZjEwYTAyOTZhNWI1NWM3ZDJiMTYyMzRhYmQ4
ZmY1ZmYwHhcNMjYwMzI4MDEwMDI5WhcNMjYwMzI5MDEwMDI5WjAzMTEwLwYDVQQD
EyhmZWVhYzY2OWQyZGJiNjQ1ZmJmZWE5NDkyYTQ2YTI2NzdjMzBkMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks86guRPyNRNyxvsYVXPFE4wIfI0
yCLLxt5xcV49vwX79P6vzK+2uQS8oPX6OKPJAjb0myLjwqQk+ooNVvd+GEy8chyI
M79mm5hBkS+p6JMb4h5tlRy68YwSqkzepE0c5YrfgwhjGAS6sajYyxDMEhdVekzg
RN5Hu3MLv6OIBDlaaBB1TrYjTjFV6nwDXjYvnFlEefJtzvgBNnXUREfXpcLLml05
IKkrl8UTaPe86LBMJTCG/8H1cDK/cYPTrLX2hMT2twRcplRMbs5U3mat3bxg/27z
X+2FH8+AS4UwPcjVKnwmTWA7rFemWYkvwQZ+gCWvdG3JfpVck0xMHr30JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7qxmnS27ZF+/6pSSpGomd8MNN1MB8GA1UdIwQY
MBaAFJB+AJvxCgKWpbVcfSsWI0q9j/X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0g0QW1fRUtBcGFsdFZ4OUt4WWpTcjJQOWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82Yzk2MTQtNTYyZC00MmRiLTg2MDkt
NDUyZWVhOGI1ZWFjLzEva0g0QW1fRUtBcGFsdFZ4OUt4WWpTcjJQOWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82Yzk2MTQtNTYyZC00MmRiLTg2MDktNDUyZWVhOGI1ZWFj
LzEva0g0QW1fRUtBcGFsdFZ4OUt4WWpTcjJQOWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7eivk8j
42PYBzUlU4WhnYcgPYZy6xzYR61QaLhwgHjTa3lYUGYhbyDCvLsHFw0Odj8F7s/e
TlYVMwLxXF+zli5hPCy3vkls9jkDNsUT0awwjvJZsEr9fsZarVzGymShLhYfZw9f
B/DLXFoW01XW5aEnVu7SQAXLJa30cn+JawC4k8idcXRzkfaqf6CkBd6Z+dx4kpFV
GFZOwxpW2a2UhuBe8RhnYk+b0ciT7YIoeAmYohxup+MyxO2XMqyoeScgqD/2f6or
X801TZmQCWi5PfPhwvPL+Y4Y0mmSMDosVMZHf9UgBfUZn2q9y79lqlCqlSIBvlat
dClAckmmwZ+Zag==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:06 2026 by rpki-client