Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: osxWR6Ze1Ruf9YvBO1eZL7rNVpJ06EsB7/LG4xUH2hE=
Subject key identifier: AF:BA:8C:D1:4D:0C:47:73:C4:5E:40:44:A5:B8:72:25:17:CC:D2:A1
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019D2771BF30E23FD9A62EA6845F07928B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 08E6
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa (hash: lqA/RuUKuPMddo9q5IetsxxRlSYvHTaYbQoeU6IOKZM=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: jm7vM14yCtBq8xBuW9+jhkoEN4pWr0FVV/q/83qsI18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bf:30:e2:3f:d9:a6:2e:a6:84:5f:07:92:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=afba8cd14d0c4773c45e4044a5b8722517ccd2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:ca:94:c1:75:5e:ed:e3:80:b4:9e:fa:0a:
7b:b9:63:12:52:17:52:e2:69:15:99:28:0e:c7:49:
60:8b:9c:d8:a8:d0:5d:75:56:f6:d2:f4:90:02:89:
b6:5d:ee:0e:e0:90:7d:5e:36:d1:85:38:a9:a0:c1:
9b:f1:11:03:a2:4c:a1:fa:ab:ae:8c:45:a7:2d:f7:
4f:56:df:7c:d7:6a:d3:fc:a9:20:8b:d0:24:d2:c1:
c4:6d:39:8a:b6:a3:70:e8:3f:ad:6d:a3:fb:f7:0e:
72:ab:f0:17:cd:58:c5:e2:d3:66:4b:b7:ff:c5:cf:
92:f4:c3:06:9a:a5:e8:65:ae:05:a3:ce:92:e2:5a:
3e:c0:7c:a9:b0:c4:03:db:b9:ef:4e:c9:c2:79:86:
3d:de:d2:72:64:f2:33:fb:3a:1e:45:75:bb:24:b4:
4b:94:2b:22:36:46:54:2d:e7:0a:4e:e8:fb:9f:23:
0c:9c:02:33:90:27:1c:3e:cd:80:51:41:a2:4e:bb:
9b:0b:10:7a:c3:e8:49:bb:b7:99:1e:dd:4b:fc:33:
68:53:22:17:68:22:56:d3:09:5d:10:8d:f4:0e:f4:
53:1a:77:ed:2d:48:29:04:63:d5:39:ea:ff:42:b9:
1f:4b:7e:a8:9c:2c:82:a6:f0:b2:40:a0:d1:c2:e7:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:8C:D1:4D:0C:47:73:C4:5E:40:44:A5:B8:72:25:17:CC:D2:A1
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:1c:34:4f:51:f8:b1:74:40:a1:b4:38:95:0d:7a:d7:bf:
98:b8:fb:f1:05:2c:e7:64:19:cf:50:71:2c:bf:61:79:bf:40:
b9:b5:8f:76:33:69:14:a4:d8:7e:57:4c:1a:21:fe:53:c4:e1:
a9:9b:8f:78:82:1f:41:76:54:0c:fe:30:ec:0e:a4:ae:b7:7e:
5b:cd:ab:bd:ba:7d:41:06:56:40:f9:38:6a:e8:ce:d7:33:5c:
cc:bc:eb:97:4a:27:6f:bf:70:8b:6b:99:58:42:c4:8d:00:26:
23:5a:07:c1:3e:47:6b:8e:f0:57:c0:91:09:c4:7f:32:8c:d0:
a4:57:0f:e8:b6:ba:5d:3d:52:9c:6f:e4:88:8d:70:9f:94:2b:
45:9e:12:9b:f4:6a:c4:83:da:b1:4a:69:9b:4c:84:44:32:05:
bf:60:e5:7a:f5:dd:07:fa:cc:98:1f:1c:82:cf:c6:8e:2f:82:
1b:3a:d9:35:6d:63:15:07:b2:28:9e:4d:d5:5c:6c:40:0c:44:
fb:56:58:04:c2:5f:8b:c4:05:b6:53:51:76:55:cb:7f:35:37:
5d:26:29:6c:ab:9b:67:a2:03:ce:2d:a1:e7:3b:fa:ea:e1:00:
53:5f:ba:b7:dd:ac:73:c8:c0:37:a3:1e:6d:3d:ba:5d:40:1e:
2e:be:09:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncb8w4j/Zpi6mhF8HkouOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj
OThjN2UwHhcNMjYwMzI2MDAwMDU5WhcNMjYwMzI3MDAwMDU5WjAzMTEwLwYDVQQD
EyhhZmJhOGNkMTRkMGM0NzczYzQ1ZTQwNDRhNWI4NzIyNTE3Y2NkMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBbKlMF1Xu3jgLSe+gp7uWMSUhdS
4mkVmSgOx0lgi5zYqNBddVb20vSQAom2Xe4O4JB9XjbRhTipoMGb8REDokyh+quu
jEWnLfdPVt9812rT/Kkgi9Ak0sHEbTmKtqNw6D+tbaP79w5yq/AXzVjF4tNmS7f/
xc+S9MMGmqXoZa4Fo86S4lo+wHypsMQD27nvTsnCeYY93tJyZPIz+zoeRXW7JLRL
lCsiNkZULecKTuj7nyMMnAIzkCccPs2AUUGiTrubCxB6w+hJu7eZHt1L/DNoUyIX
aCJW0wldEI30DvRTGnftLUgpBGPVOer/QrkfS36onCyCpvCyQKDRwueN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+6jNFNDEdzxF5ARKW4ciUXzNKhMB8GA1UdIwQY
MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt
YjI0OGNmYTk2YTY5LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5
LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnYcNE9R
+LF0QKG0OJUNete/mLj78QUs52QZz1BxLL9heb9AubWPdjNpFKTYfldMGiH+U8Th
qZuPeIIfQXZUDP4w7A6krrd+W82rvbp9QQZWQPk4aujO1zNczLzrl0onb79wi2uZ
WELEjQAmI1oHwT5Ha47wV8CRCcR/MozQpFcP6La6XT1SnG/kiI1wn5QrRZ4Sm/Rq
xIPasUppm0yERDIFv2DlevXdB/rMmB8cgs/Gji+CGzrZNW1jFQeyKJ5N1VxsQAxE
+1ZYBMJfi8QFtlNRdlXLfzU3XSYpbKubZ6IDzi2h5zv66uEAU1+6t92sc8jAN6Me
bT26XUAeLr4JUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:14 2026 by rpki-client