Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: en6M6Uak9kEomPckS9Aw7WMk0+uiKfhk8QgJdIzq3RA=
Subject key identifier: A2:91:EC:30:74:A3:C1:0C:AD:4C:E1:F4:03:04:DD:ED:10:41:9D:9B
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 019D2AA9AA5A21AC20B6F8B27B0A63A6209C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0C38
Signing time: Thu 26 Mar 2026 15:00:55 +0000
Manifest this update: Thu 26 Mar 2026 15:00:55 +0000
Manifest next update: Fri 27 Mar 2026 15:00:55 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: Vx8OR4fHgtP9T1aliTjOWT3Ctye3k8/YomWY9DqWqCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:aa:5a:21:ac:20:b6:f8:b2:7b:0a:63:a6:20:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Mar 26 15:00:55 2026 GMT
Not After : Mar 27 15:00:55 2026 GMT
Subject: CN=a291ec3074a3c10cad4ce1f40304dded10419d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:ca:2a:58:6f:aa:16:4a:63:e7:e9:09:12:
e9:a2:31:1f:6f:44:96:56:c8:b0:14:5f:05:44:36:
cb:5c:0a:01:b9:f5:89:2d:8c:ca:e4:02:ee:b1:14:
84:54:89:70:e3:5d:ac:61:40:73:7e:d8:a4:a6:02:
e0:d5:c6:b2:b5:50:9a:7f:9d:02:16:46:fa:71:47:
a7:67:31:db:2d:84:d2:f9:b6:65:46:d4:53:bd:19:
12:91:7a:d0:45:07:56:6e:06:2d:af:ed:ac:42:ff:
df:81:82:da:f7:83:27:26:39:f9:a7:99:fd:a6:b7:
47:f0:be:9f:99:bf:06:d7:97:9f:bf:79:9f:88:d8:
f6:5f:7c:ee:51:78:23:b1:a0:94:d5:19:af:32:83:
06:11:38:a6:35:3b:41:72:f3:9d:11:10:8a:b4:58:
1d:5b:65:58:8f:f4:6c:9b:aa:43:d6:05:b2:61:74:
f2:83:c0:51:c7:53:b1:6b:f0:32:a5:4e:18:d2:e8:
d4:81:84:02:d4:02:0a:e1:55:3f:71:34:70:83:74:
1d:99:9a:13:b8:d6:c3:e9:38:c2:66:8f:16:97:32:
9f:89:60:02:61:ff:6a:0f:34:61:93:39:09:11:15:
3f:46:11:73:de:d3:52:e4:04:73:47:5a:32:c5:49:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:EC:30:74:A3:C1:0C:AD:4C:E1:F4:03:04:DD:ED:10:41:9D:9B
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:d6:93:59:f3:7b:b7:b5:ea:9b:31:b8:0d:ec:00:22:d0:
4f:ad:60:d6:dd:86:9f:62:c0:54:5f:15:f5:58:e1:63:5a:b8:
19:46:64:a4:0b:63:cb:9e:fe:2e:90:da:0b:82:47:27:33:78:
9c:9f:77:d7:1e:c6:99:ea:93:80:21:a6:6d:bf:ae:03:05:7b:
9b:52:bc:91:53:e6:9b:73:93:b7:26:f9:aa:48:e1:54:7e:f5:
49:09:40:a3:e8:c4:67:39:2a:a0:9b:b6:52:33:89:e1:ac:bb:
30:49:0d:22:b5:07:a6:6c:c2:4b:c7:68:23:36:97:21:5a:84:
6a:41:66:0f:3b:b4:90:43:a1:ad:23:a2:d9:8c:2a:37:e0:61:
96:70:7b:02:a5:96:9b:06:70:ba:a7:85:4c:80:c3:89:ef:a6:
0d:f3:3d:8e:3f:e6:56:ee:ee:b5:ce:ce:cf:21:e5:b2:cf:f6:
b1:f6:3a:64:a6:50:2d:da:3e:42:63:a8:45:6a:32:4d:4b:2d:
ba:59:1d:61:41:e1:4c:21:ca:77:5d:d5:0e:64:bb:39:7c:ef:
9c:33:ec:31:42:1f:95:5d:4e:e5:ee:a8:cb:09:fa:ca:95:98:
ec:8a:11:55:ce:5e:7f:ee:6b:d6:6b:66:fe:35:31:75:77:8c:
9e:d8:7f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqapaIawgtviyewpjpiCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTI3NWFkODljOTk3NmI1MTAzMGM1YmQyNTY3OTliNzky
NjU2MGMwHhcNMjYwMzI2MTUwMDU1WhcNMjYwMzI3MTUwMDU1WjAzMTEwLwYDVQQD
EyhhMjkxZWMzMDc0YTNjMTBjYWQ0Y2UxZjQwMzA0ZGRlZDEwNDE5ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZrKKlhvqhZKY+fpCRLpojEfb0SW
VsiwFF8FRDbLXAoBufWJLYzK5ALusRSEVIlw412sYUBzftikpgLg1caytVCaf50C
Fkb6cUenZzHbLYTS+bZlRtRTvRkSkXrQRQdWbgYtr+2sQv/fgYLa94MnJjn5p5n9
prdH8L6fmb8G15efv3mfiNj2X3zuUXgjsaCU1RmvMoMGETimNTtBcvOdERCKtFgd
W2VYj/Rsm6pD1gWyYXTyg8BRx1Oxa/AypU4Y0ujUgYQC1AIK4VU/cTRwg3QdmZoT
uNbD6TjCZo8WlzKfiWACYf9qDzRhkzkJERU/RhFz3tNS5ARzR1oyxUnccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKR7DB0o8EMrUzh9AME3e0QQZ2bMB8GA1UdIwQY
MBaAFCpSda2JyZdrUQMMW9JWeZt5JlYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQt
MTE1NjY5MGE0M2I1LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQtMTE1NjY5MGE0M2I1
LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE3Wk1nz
e7e16psxuA3sACLQT61g1t2Gn2LAVF8V9VjhY1q4GUZkpAtjy57+LpDaC4JHJzN4
nJ931x7GmeqTgCGmbb+uAwV7m1K8kVPmm3OTtyb5qkjhVH71SQlAo+jEZzkqoJu2
UjOJ4ay7MEkNIrUHpmzCS8doIzaXIVqEakFmDzu0kEOhrSOi2YwqN+BhlnB7AqWW
mwZwuqeFTIDDie+mDfM9jj/mVu7utc7OzyHlss/2sfY6ZKZQLdo+QmOoRWoyTUst
ulkdYUHhTCHKd13VDmS7OXzvnDPsMUIflV1O5e6oywn6ypWY7IoRVc5ef+5r1mtm
/jUxdXeMnth/Ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:45 2026 by rpki-client