Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: XeDSwGVhOVPTSnFwsl1A/TMOWhG36NKmciuBkvpCD1A=
Subject key identifier: BE:61:B8:E9:F3:68:48:42:CA:6E:16:70:2E:FE:5D:CD:27:76:9D:46
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019D26CD58D6E6C3B79B4F9A08088F8C2AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 7cQqXDwayIqtak0e3v0vvhozoY4RuEcNGR+oSm1f3y8=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:58:d6:e6:c3:b7:9b:4f:9a:08:08:8f:8c:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=be61b8e9f3684842ca6e16702efe5dcd27769d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:4e:af:82:3a:e6:af:34:2b:96:37:7f:5a:
54:7a:72:88:23:b5:af:d4:3c:a5:1a:00:4c:66:82:
d3:c8:b8:7f:62:a1:09:78:0a:dd:da:c8:36:e7:c3:
9d:1f:4e:ba:10:be:51:ca:92:7c:15:f0:52:db:36:
92:69:7c:d0:04:7d:bb:21:47:c5:75:84:6c:4a:25:
71:27:53:94:45:98:0c:9d:3b:5a:24:c6:dd:1d:04:
b2:ff:58:81:56:39:40:d3:72:4f:63:f1:c0:36:5b:
df:36:64:4f:69:f5:2f:08:ef:8d:c2:27:82:b2:1d:
d5:86:fd:a9:7a:ba:a4:74:5b:36:21:e8:50:3e:61:
6f:ba:49:a5:ac:31:57:83:42:1f:44:48:91:a2:bf:
6a:83:d4:75:4e:e3:7b:b3:c5:56:99:1c:07:f2:ad:
67:ce:f5:3e:36:b2:29:3d:8a:5f:ff:48:bc:5b:12:
8b:e5:93:dd:e7:c8:4b:52:5e:12:9e:f3:62:c2:7f:
de:9c:76:91:78:ab:8e:53:8d:83:b6:49:8a:38:92:
02:76:4f:2f:c4:c6:e2:23:86:e2:d0:3c:f8:6e:92:
16:90:65:d6:d8:82:2d:26:e6:73:cc:f0:5e:ba:04:
9d:00:22:50:5d:6f:a0:38:36:e7:02:1e:78:03:c9:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:B8:E9:F3:68:48:42:CA:6E:16:70:2E:FE:5D:CD:27:76:9D:46
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ff:bf:03:66:a8:3b:6e:e6:1f:07:50:21:d3:3f:3f:18:64:
e7:35:3e:e5:b6:ed:c8:d0:50:52:90:bf:90:f2:e9:22:fa:5b:
c3:4a:ae:a1:57:66:3d:bd:c0:fa:15:a2:a7:43:92:7a:98:84:
0d:cc:9a:6f:69:03:6c:d8:54:50:88:38:b3:f7:62:d1:ba:18:
63:72:ab:ca:99:94:7a:d1:12:0a:be:2f:73:04:18:3a:84:f1:
ef:ee:6a:d0:5c:9e:9b:00:d1:47:10:6b:ff:57:af:2b:bb:a9:
e7:8e:65:3d:31:1a:17:ec:f6:c4:77:a2:ed:22:e1:4d:c2:e5:
d3:ce:4b:10:1f:36:7b:36:24:93:f1:ef:21:4f:bf:44:64:ae:
9c:0f:de:aa:33:f8:c8:97:33:5d:d0:be:a4:53:81:bf:27:52:
0e:34:ea:ee:aa:e5:69:e1:fd:e6:73:7e:a3:69:0a:f2:d1:89:
4b:67:f6:c5:19:49:3f:27:d2:f0:14:87:b0:52:7a:8d:0d:ef:
d5:20:3b:af:33:43:b2:51:58:ff:0a:0f:57:b5:ba:0d:7f:19:
7e:ae:12:8c:a1:e9:23:ba:df:77:8f:01:d0:0e:37:2b:64:2e:
a4:1e:4f:3b:cc:d8:e0:a8:18:37:3c:c9:f9:9f:e3:38:56:5e:
b9:57:07:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVjW5sO3m0+aCAiPjCrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm
NmM3M2IwHhcNMjYwMzI1MjEwMTI0WhcNMjYwMzI2MjEwMTI0WjAzMTEwLwYDVQQD
EyhiZTYxYjhlOWYzNjg0ODQyY2E2ZTE2NzAyZWZlNWRjZDI3NzY5ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoJOr4I65q80K5Y3f1pUenKII7Wv
1DylGgBMZoLTyLh/YqEJeArd2sg258OdH066EL5RypJ8FfBS2zaSaXzQBH27IUfF
dYRsSiVxJ1OURZgMnTtaJMbdHQSy/1iBVjlA03JPY/HANlvfNmRPafUvCO+NwieC
sh3Vhv2perqkdFs2IehQPmFvukmlrDFXg0IfREiRor9qg9R1TuN7s8VWmRwH8q1n
zvU+NrIpPYpf/0i8WxKL5ZPd58hLUl4SnvNiwn/enHaReKuOU42DtkmKOJICdk8v
xMbiI4bi0Dz4bpIWkGXW2IItJuZzzPBeugSdACJQXW+gODbnAh54A8m4gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5huOnzaEhCym4WcC7+Xc0ndp1GMB8GA1UdIwQY
MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt
NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx
LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv+/A2ao
O27mHwdQIdM/Pxhk5zU+5bbtyNBQUpC/kPLpIvpbw0quoVdmPb3A+hWip0OSepiE
Dcyab2kDbNhUUIg4s/di0boYY3KrypmUetESCr4vcwQYOoTx7+5q0FyemwDRRxBr
/1evK7up545lPTEaF+z2xHei7SLhTcLl085LEB82ezYkk/HvIU+/RGSunA/eqjP4
yJczXdC+pFOBvydSDjTq7qrlaeH95nN+o2kK8tGJS2f2xRlJPyfS8BSHsFJ6jQ3v
1SA7rzNDslFY/woPV7W6DX8Zfq4SjKHpI7rfd48B0A43K2QupB5PO8zY4KgYNzzJ
+Z/jOFZeuVcHgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:08 2026 by rpki-client