Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: c6LNf5WY98zFmuK3UqJ9OE4X2OA+d0W6rU2y9TrJU/E=
Subject key identifier: 30:F9:38:8E:27:1D:95:2E:02:ED:92:47:64:CB:F0:B5:CF:A3:8B:B7
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 019D3376511C7F6ED7E3606700E3E8F7A90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 05F9
Signing time: Sat 28 Mar 2026 08:01:25 +0000
Manifest this update: Sat 28 Mar 2026 08:01:25 +0000
Manifest next update: Sun 29 Mar 2026 08:01:25 +0000
Files and hashes: 1: 6_lDwO9S-PZTwYR6rqeMkPI69T0.roa (hash: neEGA+hYnP8CjWfiQmsokGNa6auT6dI2/F1+F88xPUc=)
2: HgKic6ekM35QFsoMboEVFjIB9NE.roa (hash: He9li/VbBorSL9OR08x2iT60v6rUZMCHaohd8CS+JJE=)
3: IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa (hash: paS2HrmO9LI/c37GN0LFXIStqUHvKAKZhc4SNlkMN68=)
4: L2JBwXn0_M5VePo6q3NCFb8xLnM.roa (hash: UZ+pSOfmFCdt9QWA2qepdtq6OMmO8+hZ5Y2AO5lO+NE=)
5: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: JAyS6scBHYZuTA8W7U6TXkd+DI30XaTbcgbe6y3ULtc=)
6: r93BFIAx7lK03ClWMKEgnNMRy3k.roa (hash: 4jsVxNS7oJ5jGPb+Oqg5cVDnCqMG9rPwVMnyLP528N4=)
7: tII-kyxxSugYobEeIbAgNDo451s.roa (hash: Lv7S4x6BZW4ZHs5wH+NnqBYKST4za7yZuPdbD8t6zpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:51:1c:7f:6e:d7:e3:60:67:00:e3:e8:f7:a9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Mar 28 08:01:25 2026 GMT
Not After : Mar 29 08:01:25 2026 GMT
Subject: CN=30f9388e271d952e02ed924764cbf0b5cfa38bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:f1:2f:0a:ab:69:9c:a4:02:55:15:d5:c9:
95:f0:f1:54:3d:17:5c:b7:b3:b6:fd:ff:06:15:6b:
68:54:2b:9f:43:ea:b5:6e:57:af:b0:29:ab:1d:92:
bb:6d:9f:ea:f8:27:8b:db:6d:e4:09:5a:ec:b1:c5:
03:95:7a:a8:e0:72:0a:a8:3c:e2:5b:ea:af:d1:d9:
70:be:31:48:14:17:5a:ce:b2:ae:21:fc:dc:db:af:
03:67:61:e2:09:ae:27:44:60:0d:2b:6e:06:91:d0:
40:90:fe:ad:b8:e6:6a:47:c8:d1:0d:47:d5:e5:cb:
97:f5:25:05:50:4c:16:79:f1:02:36:2e:f8:a9:80:
f2:e5:c3:d9:a9:fc:bf:2c:cd:9b:d7:58:66:84:9d:
ce:df:94:c1:68:05:71:22:af:f1:c9:ec:05:68:cf:
50:4f:b0:1c:4e:1a:4b:3e:15:e8:54:f8:77:26:8a:
25:3f:fa:10:0d:d6:fa:61:47:25:c7:4f:4d:7a:82:
69:e3:1c:ec:e9:b7:77:e7:cc:02:f8:20:34:67:71:
2f:e7:d8:29:02:59:4a:71:c0:8a:b0:dd:90:f8:46:
6f:60:a4:ee:5e:61:94:c3:2c:8e:8f:4e:33:a0:fe:
67:3c:32:56:92:3c:74:20:ea:48:be:02:98:28:64:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:38:8E:27:1D:95:2E:02:ED:92:47:64:CB:F0:B5:CF:A3:8B:B7
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b2:1b:df:89:ec:94:e9:0d:73:df:ff:1d:fe:a8:35:8e:fb:
b3:df:54:88:34:ed:a1:bd:0f:30:62:37:5e:e9:67:38:4c:d3:
8a:85:d4:f3:09:2d:b1:c8:97:10:e6:e8:5c:2b:1d:8f:00:26:
5b:8e:e5:c6:79:a8:14:11:5d:2f:07:b5:f5:40:c8:60:0f:f6:
82:37:30:4b:c1:ea:bb:db:83:af:1a:7c:26:c1:1f:01:49:4e:
7e:ce:b3:9b:d9:b1:f1:d3:f6:45:f4:b1:c8:96:3d:df:f3:48:
c9:51:22:c7:42:ca:78:8b:67:e5:42:81:20:0a:64:00:1f:a8:
08:96:ae:1b:ce:e6:c6:7a:4d:e8:65:e7:ec:b9:d2:d3:1b:c7:
95:5c:88:85:05:ec:a5:07:11:1d:33:79:ba:7f:0b:c4:d8:93:
28:cd:8b:13:cb:51:a1:9f:aa:0d:35:77:da:b9:bc:a9:ce:65:
dc:3f:35:b3:68:66:6e:7b:d1:a0:2f:96:79:8f:70:87:12:e8:
5b:c5:7b:e8:6e:ce:bf:05:88:63:a0:3e:46:ee:de:e3:99:23:
83:0c:eb:4b:a4:b4:b7:d8:ce:68:6f:c5:7f:6d:f5:e7:32:b0:
49:94:eb:77:56:50:7e:91:9c:9e:a9:58:11:54:5e:b9:40:fb:
d6:4c:2d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdlEcf27X42BnAOPo96kMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi
YjJlYzcwHhcNMjYwMzI4MDgwMTI1WhcNMjYwMzI5MDgwMTI1WjAzMTEwLwYDVQQD
EygzMGY5Mzg4ZTI3MWQ5NTJlMDJlZDkyNDc2NGNiZjBiNWNmYTM4YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcLxLwqraZykAlUV1cmV8PFUPRdc
t7O2/f8GFWtoVCufQ+q1blevsCmrHZK7bZ/q+CeL223kCVrsscUDlXqo4HIKqDzi
W+qv0dlwvjFIFBdazrKuIfzc268DZ2HiCa4nRGANK24GkdBAkP6tuOZqR8jRDUfV
5cuX9SUFUEwWefECNi74qYDy5cPZqfy/LM2b11hmhJ3O35TBaAVxIq/xyewFaM9Q
T7AcThpLPhXoVPh3JoolP/oQDdb6YUclx09NeoJp4xzs6bd358wC+CA0Z3Ev59gp
AllKccCKsN2Q+EZvYKTuXmGUwyyOj04zoP5nPDJWkjx0IOpIvgKYKGTYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD5OI4nHZUuAu2SR2TL8LXPo4u3MB8GA1UdIwQY
MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt
ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm
LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrIb34ns
lOkNc9//Hf6oNY77s99UiDTtob0PMGI3XulnOEzTioXU8wktsciXEOboXCsdjwAm
W47lxnmoFBFdLwe19UDIYA/2gjcwS8Hqu9uDrxp8JsEfAUlOfs6zm9mx8dP2RfSx
yJY93/NIyVEix0LKeItn5UKBIApkAB+oCJauG87mxnpN6GXn7LnS0xvHlVyIhQXs
pQcRHTN5un8LxNiTKM2LE8tRoZ+qDTV32rm8qc5l3D81s2hmbnvRoC+WeY9whxLo
W8V76G7OvwWIY6A+Ru7e45kjgwzrS6S0t9jOaG/Ff2315zKwSZTrd1ZQfpGcnqlY
EVReuUD71kwtnA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:18 2026 by rpki-client