Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: Bjd4l1KRtt/WCge91t1NLwvuakYEXzpXy8+CM4c7fdA=
Subject key identifier: 91:BF:70:35:3C:48:92:6E:30:E6:94:7C:37:45:F4:99:BF:52:B2:73
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019D29CDEA9FD6A87A38EC56DD1845CF81E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 154B
Signing time: Thu 26 Mar 2026 11:00:53 +0000
Manifest this update: Thu 26 Mar 2026 11:00:53 +0000
Manifest next update: Fri 27 Mar 2026 11:00:53 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: UtBKpzF6GOfLuejVIHlLGa/KoQsDCtbZ+kj/eufh5IA=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ea:9f:d6:a8:7a:38:ec:56:dd:18:45:cf:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Mar 26 11:00:53 2026 GMT
Not After : Mar 27 11:00:53 2026 GMT
Subject: CN=91bf70353c48926e30e6947c3745f499bf52b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:bd:21:5b:05:53:43:7d:57:5d:bb:09:68:
82:0a:43:9d:dc:28:fb:6f:da:8b:5b:07:6f:ef:68:
22:c0:e0:e7:67:b8:20:a2:fb:74:2c:e7:9e:17:f5:
7d:55:e3:06:7f:09:a6:cf:41:05:83:ca:ff:19:20:
28:0f:22:6d:97:df:1d:78:74:65:20:65:ff:08:ce:
9b:aa:44:53:8d:5a:71:09:31:47:c7:cd:a0:f2:18:
25:d3:25:f6:d7:22:bb:ea:7d:86:0a:7e:8b:dd:dd:
24:19:98:f4:56:86:c4:4c:01:64:12:28:3a:9e:a1:
04:8f:90:8b:1e:a5:5e:06:83:89:37:07:cd:57:95:
78:a3:1a:c6:91:45:80:fe:04:04:a2:82:f1:57:36:
4f:b4:14:35:3f:7e:05:fd:eb:c5:8d:fc:bd:16:27:
e4:18:a5:c1:bd:81:c2:3c:be:cf:5c:61:a0:a4:f8:
d9:d9:00:1f:5c:3c:cb:2a:a5:26:7d:a4:1b:28:f4:
9a:c6:93:6c:62:54:e8:43:5c:04:d8:e0:cc:36:38:
45:ba:f1:9f:99:73:da:3e:41:c5:7e:0f:fe:c6:38:
9e:45:cd:3a:36:c9:23:d3:98:93:5e:a2:4a:41:6a:
d6:03:e7:86:43:1b:bb:87:e1:bd:43:62:3b:08:f5:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:70:35:3C:48:92:6E:30:E6:94:7C:37:45:F4:99:BF:52:B2:73
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6c:98:a6:3d:5c:bf:a8:94:9a:80:f1:b1:c9:f2:20:bb:b7:
b5:1d:7f:e1:85:b5:db:fe:7c:25:8a:de:cc:f1:87:e9:53:da:
2c:16:78:4f:89:fc:7e:cf:09:78:17:b1:3c:7f:cd:32:9c:dc:
a1:ae:a4:0e:9f:d1:d4:22:54:8a:0b:57:e1:0e:22:8b:09:eb:
d4:02:9b:23:f8:19:1d:22:86:44:55:d5:98:4c:69:77:e0:e9:
2d:6c:95:21:ac:3b:1b:89:5a:32:3c:04:62:c9:23:32:65:5e:
74:d1:d5:c7:bd:37:84:d9:6a:93:e4:a1:73:a7:ff:b1:77:a0:
2f:7f:83:fa:9b:e5:57:63:9e:b7:62:a8:9d:14:13:a3:57:8d:
c2:82:fd:e0:5e:34:19:e3:84:4a:43:7b:ac:47:58:d5:18:02:
1c:f7:49:e4:01:de:41:06:6e:1d:1e:e3:13:cc:fc:90:5b:2f:
ec:80:c2:48:92:72:78:32:c1:c6:4c:c2:21:ec:ec:7b:b3:78:
4e:e6:4b:25:2a:12:c3:fc:cc:9a:20:b0:a4:56:75:0e:7b:77:
53:ae:5f:6f:52:ea:2a:7a:bd:30:a9:95:fb:15:a7:9c:fd:70:
8b:fd:69:e0:d3:41:3c:23:aa:84:68:91:29:7a:3b:04:95:ea:
1b:7b:49:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzeqf1qh6OOxW3RhFz4HiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjYwMzI2MTEwMDUzWhcNMjYwMzI3MTEwMDUzWjAzMTEwLwYDVQQD
Eyg5MWJmNzAzNTNjNDg5MjZlMzBlNjk0N2MzNzQ1ZjQ5OWJmNTJiMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBC9IVsFU0N9V127CWiCCkOd3Cj7
b9qLWwdv72giwODnZ7ggovt0LOeeF/V9VeMGfwmmz0EFg8r/GSAoDyJtl98deHRl
IGX/CM6bqkRTjVpxCTFHx82g8hgl0yX21yK76n2GCn6L3d0kGZj0VobETAFkEig6
nqEEj5CLHqVeBoOJNwfNV5V4oxrGkUWA/gQEooLxVzZPtBQ1P34F/evFjfy9Fifk
GKXBvYHCPL7PXGGgpPjZ2QAfXDzLKqUmfaQbKPSaxpNsYlToQ1wE2ODMNjhFuvGf
mXPaPkHFfg/+xjieRc06Nskj05iTXqJKQWrWA+eGQxu7h+G9Q2I7CPWTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG/cDU8SJJuMOaUfDdF9Jm/UrJzMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGyYpj1c
v6iUmoDxscnyILu3tR1/4YW12/58JYrezPGH6VPaLBZ4T4n8fs8JeBexPH/NMpzc
oa6kDp/R1CJUigtX4Q4iiwnr1AKbI/gZHSKGRFXVmExpd+DpLWyVIaw7G4laMjwE
YskjMmVedNHVx703hNlqk+Shc6f/sXegL3+D+pvlV2Oet2KonRQTo1eNwoL94F40
GeOESkN7rEdY1RgCHPdJ5AHeQQZuHR7jE8z8kFsv7IDCSJJyeDLBxkzCIezse7N4
TuZLJSoSw/zMmiCwpFZ1Dnt3U65fb1LqKnq9MKmV+xWnnP1wi/1p4NNBPCOqhGiR
KXo7BJXqG3tJvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:59 2026 by rpki-client