Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
File: K94VUTok977ZjoTw4zigbGcObzY.mft (raw, json)
Hash identifier: zjEgMf6NiFDYlqyHBlWJL7Wmp9u/WZr2HEiqcF86SQw=
Subject key identifier: 14:F8:46:85:C1:D4:71:D4:05:D4:C4:EF:EA:F5:2C:8E:61:86:C5:29
Authority key identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36
Certificate issuer: /CN=2bde15513a24f7bed98e84f0e338a06c670e6f36
Certificate serial: 019D2772D3D6D94388E67BD38C356A322299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
Manifest number: 0148
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: K94VUTok977ZjoTw4zigbGcObzY.crl (hash: sfc87yaOKH3RJGRaU1XUhjtHyRmr5TT0KaT013wMMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d3:d6:d9:43:88:e6:7b:d3:8c:35:6a:32:22:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bde15513a24f7bed98e84f0e338a06c670e6f36
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=14f84685c1d471d405d4c4efeaf52c8e6186c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:dd:92:5c:13:31:03:d2:70:10:5e:83:41:
d1:13:85:dc:91:d7:31:a6:ea:15:4a:43:a0:35:f1:
eb:1a:d4:2b:fb:af:0c:05:e3:d4:27:e8:bb:65:1c:
47:83:34:1a:28:20:b7:2b:76:27:9e:0d:9d:e5:9c:
13:9c:16:83:48:50:e4:ab:c0:74:51:51:9f:50:c1:
4f:ee:c1:09:2a:91:57:15:d0:9c:c7:56:18:7d:48:
eb:66:3d:e8:eb:92:46:e1:d0:54:84:e3:51:7f:dd:
4b:aa:1e:bd:63:3c:7b:70:fa:8e:a5:b0:9b:99:74:
22:6d:93:35:63:73:d2:ab:f6:ea:6c:e7:b2:6e:90:
46:88:14:7a:6c:d4:e7:13:37:1b:e8:f4:ba:e8:82:
ea:bc:4f:cd:9f:90:cf:86:70:26:5d:d5:ec:1f:1d:
52:92:e3:d7:c6:b6:78:36:a5:b5:34:87:6c:72:a6:
38:f6:96:e8:9f:85:59:e2:ce:2d:95:1c:35:ef:f1:
2e:52:38:b4:bc:87:47:74:4a:e0:b2:72:d2:50:14:
c1:94:07:bc:0f:7d:2d:79:cc:0a:33:02:f4:d5:ce:
e7:f6:16:5d:03:55:73:32:6d:2f:2b:b3:14:61:5f:
54:b6:a0:b6:40:76:cb:b1:24:a8:3b:4c:87:01:56:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:46:85:C1:D4:71:D4:05:D4:C4:EF:EA:F5:2C:8E:61:86:C5:29
X509v3 Authority Key Identifier:
keyid:2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:04:19:bb:f7:55:18:41:e2:31:0c:fc:dc:27:ad:b1:48:47:
12:9e:61:95:68:2a:59:8f:93:43:45:94:18:cf:e3:cc:14:9b:
a6:ce:73:3b:b3:1a:0c:6c:54:55:69:b3:d8:e8:57:f8:28:c2:
e2:fc:33:53:c5:c6:8b:b9:86:89:4e:0c:31:5a:56:9c:45:0f:
b2:6c:10:b0:73:aa:30:2e:98:70:69:2c:3d:b0:64:6c:83:1e:
0e:b9:eb:06:92:07:42:38:44:4c:aa:8b:b8:ff:9a:67:c9:40:
2c:7a:e4:2a:ce:65:44:37:1f:cb:55:6d:ac:23:cf:17:b0:cf:
0c:62:2c:30:b0:c9:b0:73:91:0f:c2:21:6e:22:19:9a:29:a0:
55:59:7e:d5:9b:fa:47:e3:83:6a:64:26:6d:65:31:87:13:f6:
38:c7:35:61:54:55:ad:da:07:eb:b6:e2:a0:56:02:7a:5c:e1:
54:01:0c:d1:cf:bf:26:dc:9b:0b:ca:36:b2:35:eb:4d:a6:28:
3e:4e:38:d5:ee:0d:6a:68:b6:28:e4:29:74:e9:33:db:e6:de:
6b:5e:79:86:48:b9:b8:0d:33:45:5d:60:47:77:7f:93:90:20:
83:f5:99:7b:b6:25:6b:5b:e9:0c:aa:19:11:10:cd:d7:e0:ef:
c7:37:70:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nctPW2UOI5nvTjDVqMiKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZGUxNTUxM2EyNGY3YmVkOThlODRmMGUzMzhhMDZjNjcw
ZTZmMzYwHhcNMjYwMzI2MDAwMjA5WhcNMjYwMzI3MDAwMjA5WjAzMTEwLwYDVQQD
EygxNGY4NDY4NWMxZDQ3MWQ0MDVkNGM0ZWZlYWY1MmM4ZTYxODZjNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kXdklwTMQPScBBeg0HRE4Xckdcx
puoVSkOgNfHrGtQr+68MBePUJ+i7ZRxHgzQaKCC3K3Ynng2d5ZwTnBaDSFDkq8B0
UVGfUMFP7sEJKpFXFdCcx1YYfUjrZj3o65JG4dBUhONRf91Lqh69Yzx7cPqOpbCb
mXQibZM1Y3PSq/bqbOeybpBGiBR6bNTnEzcb6PS66ILqvE/Nn5DPhnAmXdXsHx1S
kuPXxrZ4NqW1NIdscqY49pbon4VZ4s4tlRw17/EuUji0vIdHdErgsnLSUBTBlAe8
D30tecwKMwL01c7n9hZdA1VzMm0vK7MUYV9UtqC2QHbLsSSoO0yHAVZsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT4RoXB1HHUBdTE7+r1LI5hhsUpMB8GA1UdIwQY
MBaAFCveFVE6JPe+2Y6E8OM4oGxnDm82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQt
NGQ3ZGY0MGMwZjVjLzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQtNGQ3ZGY0MGMwZjVj
LzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAQZu/dV
GEHiMQz83CetsUhHEp5hlWgqWY+TQ0WUGM/jzBSbps5zO7MaDGxUVWmz2OhX+CjC
4vwzU8XGi7mGiU4MMVpWnEUPsmwQsHOqMC6YcGksPbBkbIMeDrnrBpIHQjhETKqL
uP+aZ8lALHrkKs5lRDcfy1VtrCPPF7DPDGIsMLDJsHORD8IhbiIZmimgVVl+1Zv6
R+ODamQmbWUxhxP2OMc1YVRVrdoH67bioFYCelzhVAEM0c+/JtybC8o2sjXrTaYo
Pk441e4Nami2KOQpdOkz2+bea155hki5uA0zRV1gR3d/k5Agg/WZe7Yla1vpDKoZ
ERDN1+DvxzdwNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:57 2026 by rpki-client