Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: Sl/985jsVbbweZ/2GBFDmko1um+h62AWVLrrhUcdeEU=
Subject key identifier: C1:A7:21:47:E8:87:6E:7B:A1:9C:05:CB:E3:7A:A2:F0:8B:0A:F1:27
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 019D27A931AA84FC9C08A26DD73537F2C7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0BBF
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: /bWxzzGynwPd1ENqui3eWVFh8EspU4k07xEvq5D5xHo=)
2: l2v4PMgche6PmMtMOC23cD4fvMk.roa (hash: h7RmNWqQIkYYdlzGtKAOjEz+jTEWe9NjQLWfgzz+cDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:31:aa:84:fc:9c:08:a2:6d:d7:35:37:f2:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=c1a72147e8876e7ba19c05cbe37aa2f08b0af127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:f3:74:c3:e4:c1:6f:d5:f8:be:86:07:b6:
80:b0:42:19:4e:b2:32:87:7f:d9:ad:e4:5b:e9:fc:
9f:03:8c:6d:da:59:04:ad:5a:0d:b1:39:16:09:60:
f6:67:1d:d8:3a:45:3a:4e:0f:ad:a3:d3:8c:0e:2b:
19:7e:0d:bc:af:2d:12:0a:04:23:69:b9:38:ea:59:
e9:4d:63:0e:c4:41:cb:80:58:13:85:c8:74:72:44:
c9:06:c8:be:9e:64:b7:4d:72:f2:86:12:fc:37:4e:
a4:98:4a:0a:9b:f8:c4:5d:7d:19:5d:f0:fc:1d:20:
ac:34:80:10:e4:b5:05:bb:41:3a:c4:66:8d:3c:6c:
ff:8c:8d:be:a3:1c:c4:49:19:f8:ab:3f:0d:7b:c5:
d0:00:91:0e:b7:5f:a5:2a:b7:1a:a5:cb:f9:51:74:
fa:ae:83:d4:8c:81:c1:bc:99:27:9d:cd:e3:82:10:
d3:5a:93:d8:03:e0:bd:7b:38:a2:a1:b8:be:74:72:
80:98:1d:98:d0:bc:ae:0b:ed:5d:fc:71:d0:12:ad:
99:0e:b2:99:43:53:eb:30:52:93:24:40:84:e8:c8:
13:08:08:d9:7c:89:32:ab:5a:1a:b1:4e:c4:47:b5:
9a:47:98:55:30:66:0e:60:ec:30:75:f8:7b:b4:17:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:21:47:E8:87:6E:7B:A1:9C:05:CB:E3:7A:A2:F0:8B:0A:F1:27
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:36:70:e4:75:8f:91:88:bb:39:c2:a9:87:6d:67:3a:a0:dc:
41:35:9f:90:91:7e:59:48:ba:6a:a9:b8:23:7f:f5:a3:f0:39:
4e:1a:1c:f2:2f:b5:19:d0:06:6f:e0:7e:36:5d:fc:21:1c:eb:
09:66:4e:4f:2a:69:1d:d0:a0:dc:a2:3b:7d:21:40:2f:83:98:
4f:96:68:83:49:76:e6:9c:6c:7d:a8:12:4b:d6:e2:34:7e:53:
da:f0:71:0e:95:c8:ae:c9:da:00:b3:01:4f:fc:8e:b7:84:a8:
01:a2:10:81:a1:d4:f5:93:67:c9:2b:61:e2:78:27:4d:e0:22:
67:2a:17:0e:34:55:02:f7:bc:07:0a:af:02:91:77:93:ee:b0:
a5:5f:dc:d3:14:fc:51:f7:3d:79:3f:50:3a:e5:84:fe:43:77:
c8:48:42:a0:84:f6:4a:51:a2:35:db:9d:93:fb:ab:0d:bb:27:
86:94:d9:a5:3e:8d:c6:6b:25:90:ac:53:48:c1:4a:21:8e:ec:
87:44:1e:20:95:cb:89:a6:76:bc:04:47:b1:80:4c:65:db:11:
ce:64:10:75:55:ba:1d:fe:88:fc:af:fb:46:c1:9c:4a:d7:0c:
b7:32:42:eb:95:f1:55:14:99:07:99:e7:f9:8d:8b:6d:c8:58:
58:04:50:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqTGqhPycCKJt1zU38se1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODk2NDc4NTFlZmNkMTk4OTcyZWQzZDE0OWNjYmJkZTlj
NTVjMDAwHhcNMjYwMzI2MDEwMTMyWhcNMjYwMzI3MDEwMTMyWjAzMTEwLwYDVQQD
EyhjMWE3MjE0N2U4ODc2ZTdiYTE5YzA1Y2JlMzdhYTJmMDhiMGFmMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuTzdMPkwW/V+L6GB7aAsEIZTrIy
h3/ZreRb6fyfA4xt2lkErVoNsTkWCWD2Zx3YOkU6Tg+to9OMDisZfg28ry0SCgQj
abk46lnpTWMOxEHLgFgThch0ckTJBsi+nmS3TXLyhhL8N06kmEoKm/jEXX0ZXfD8
HSCsNIAQ5LUFu0E6xGaNPGz/jI2+oxzESRn4qz8Ne8XQAJEOt1+lKrcapcv5UXT6
roPUjIHBvJknnc3jghDTWpPYA+C9eziiobi+dHKAmB2Y0LyuC+1d/HHQEq2ZDrKZ
Q1PrMFKTJECE6MgTCAjZfIkyq1oasU7ER7WaR5hVMGYOYOwwdfh7tBe0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGnIUfoh257oZwFy+N6ovCLCvEnMB8GA1UdIwQY
MBaAFCmJZHhR780ZiXLtPRScy73pxVwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjVlODgtZDJmOS00ODdiLWJiOTIt
YTRjYjFjZmQwMGI4LzEvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjVlODgtZDJmOS00ODdiLWJiOTItYTRjYjFjZmQwMGI4
LzEvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTZw5HWP
kYi7OcKph21nOqDcQTWfkJF+WUi6aqm4I3/1o/A5Thoc8i+1GdAGb+B+Nl38IRzr
CWZOTyppHdCg3KI7fSFAL4OYT5Zog0l25pxsfagSS9biNH5T2vBxDpXIrsnaALMB
T/yOt4SoAaIQgaHU9ZNnySth4ngnTeAiZyoXDjRVAve8BwqvApF3k+6wpV/c0xT8
Ufc9eT9QOuWE/kN3yEhCoIT2SlGiNdudk/urDbsnhpTZpT6NxmslkKxTSMFKIY7s
h0QeIJXLiaZ2vARHsYBMZdsRzmQQdVW6Hf6I/K/7RsGcStcMtzJC65XxVRSZB5nn
+Y2LbchYWARQrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:14 2026 by rpki-client