Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
File: KxlTcbTPcLiOdz4bgHyyORYyOFs.mft (raw, json)
Hash identifier: k/BpnozgeJZh4kyfJLwwB9MqDOP7ZveygB0EouuU/48=
Subject key identifier: 70:E9:17:1E:05:B5:68:37:5D:CF:2D:2B:CB:7E:8E:55:F5:C4:BE:00
Authority key identifier: 2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B
Certificate issuer: /CN=2b195371b4cf70b88e773e1b807cb2391632385b
Certificate serial: 019D27726B753CD53A4ADA2BB0F7AE14E458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
Manifest number: 0168
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: KxlTcbTPcLiOdz4bgHyyORYyOFs.crl (hash: Qh/tfn5yxPRwmGwQTSD8lBtWlB21VNdu1MlUBmOiD5I=)
2: zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa (hash: kFXM7sahaxaI4pXMltbaQts/ViuuZYbtivX7x0d9V2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6b:75:3c:d5:3a:4a:da:2b:b0:f7:ae:14:e4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b195371b4cf70b88e773e1b807cb2391632385b
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=70e9171e05b568375dcf2d2bcb7e8e55f5c4be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:fc:86:a4:1b:a2:60:3b:59:92:af:e1:7a:
11:6e:3d:ac:34:95:77:54:32:01:3b:74:4a:fa:7a:
69:8e:7b:61:e3:1a:84:ef:38:91:f2:36:6d:fe:a9:
07:d9:6d:7b:d7:4f:c3:7e:85:b5:ae:bd:b3:b7:2f:
1a:75:4e:48:35:42:6b:24:e0:ae:94:89:8c:78:13:
4f:41:f8:8e:e9:a6:71:43:d9:da:9d:9a:e0:5b:6d:
45:63:4e:c4:2e:6e:0b:22:ac:42:06:95:53:32:db:
b9:2f:57:42:d8:f1:69:5b:c0:b2:42:c9:d2:17:84:
7b:1e:03:1f:d8:90:c9:4a:89:26:88:39:fe:06:87:
a7:fe:f9:33:2f:f0:e1:48:97:bd:11:ec:a4:a3:74:
cf:38:29:f0:6b:47:b1:c2:36:1e:6d:3b:e0:77:c0:
f0:b3:c8:a4:17:b6:e7:51:27:dc:97:01:5a:c8:7a:
21:33:5b:01:f6:34:1e:28:b5:d9:e7:41:7b:fa:d6:
4e:66:53:d9:af:68:2b:93:57:59:86:43:df:b4:27:
23:d4:95:b8:7f:2d:04:75:80:1e:05:ef:5f:4f:a7:
b0:1a:55:8a:39:0a:b2:e8:cf:1c:43:bf:24:ca:6d:
75:9e:3d:5b:1d:bb:56:85:9f:44:2c:eb:23:80:b9:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:17:1E:05:B5:68:37:5D:CF:2D:2B:CB:7E:8E:55:F5:C4:BE:00
X509v3 Authority Key Identifier:
keyid:2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0d:18:9d:31:f1:33:b8:5b:ac:45:38:eb:18:7a:4d:e7:e0:
c5:81:45:28:a4:e7:67:79:ab:ba:a4:8f:36:b1:94:f4:ab:bf:
9b:cd:1e:a3:a5:ba:63:84:81:5e:73:78:43:73:ed:81:8c:45:
5f:03:5b:1a:ed:e7:43:0b:d6:88:11:1b:48:93:55:e1:ff:b1:
9b:19:8a:4d:8f:c7:f3:10:76:20:a1:d8:ab:2e:e1:9e:bf:65:
9a:8f:a3:d1:d7:c9:3b:26:da:e3:79:8f:b6:1b:13:80:28:3a:
b3:0c:6d:ae:8c:d7:57:09:33:4f:70:f8:28:cc:94:6a:33:21:
ac:c2:2b:11:40:23:8d:af:b2:82:06:47:cb:f3:d1:f0:be:55:
8c:fa:44:59:d4:82:9b:de:cb:3f:97:db:0c:47:b6:1f:d2:8e:
e6:00:48:d7:76:7b:30:1d:d4:ca:23:b8:73:92:df:cf:8e:84:
7b:84:8a:7d:78:c5:7a:90:a8:21:33:b2:7e:f6:9b:f6:83:21:
09:c5:04:d1:8e:bb:06:9e:7a:02:d1:8d:af:f2:de:ae:96:45:
e6:d5:db:58:09:ae:a1:e1:09:df:10:cd:e6:b0:98:0c:33:67:
2f:14:b8:18:4b:16:5d:e4:a3:60:fa:15:46:9d:43:7d:53:0d:
c9:92:f3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncmt1PNU6StorsPeuFORYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTk1MzcxYjRjZjcwYjg4ZTc3M2UxYjgwN2NiMjM5MTYz
MjM4NWIwHhcNMjYwMzI2MDAwMTQzWhcNMjYwMzI3MDAwMTQzWjAzMTEwLwYDVQQD
Eyg3MGU5MTcxZTA1YjU2ODM3NWRjZjJkMmJjYjdlOGU1NWY1YzRiZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPD8hqQbomA7WZKv4XoRbj2sNJV3
VDIBO3RK+nppjnth4xqE7ziR8jZt/qkH2W1710/DfoW1rr2zty8adU5INUJrJOCu
lImMeBNPQfiO6aZxQ9nanZrgW21FY07ELm4LIqxCBpVTMtu5L1dC2PFpW8CyQsnS
F4R7HgMf2JDJSokmiDn+Boen/vkzL/DhSJe9Eeyko3TPOCnwa0exwjYebTvgd8Dw
s8ikF7bnUSfclwFayHohM1sB9jQeKLXZ50F7+tZOZlPZr2grk1dZhkPftCcj1JW4
fy0EdYAeBe9fT6ewGlWKOQqy6M8cQ78kym11nj1bHbtWhZ9ELOsjgLkzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDpFx4FtWg3Xc8tK8t+jlX1xL4AMB8GA1UdIwQY
MBaAFCsZU3G0z3C4jnc+G4B8sjkWMjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzIt
NWU0MDQxZDkzMDA4LzEvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzItNWU0MDQxZDkzMDA4
LzEvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA0YnTHx
M7hbrEU46xh6TefgxYFFKKTnZ3mruqSPNrGU9Ku/m80eo6W6Y4SBXnN4Q3PtgYxF
XwNbGu3nQwvWiBEbSJNV4f+xmxmKTY/H8xB2IKHYqy7hnr9lmo+j0dfJOyba43mP
thsTgCg6swxtrozXVwkzT3D4KMyUajMhrMIrEUAjja+yggZHy/PR8L5VjPpEWdSC
m97LP5fbDEe2H9KO5gBI13Z7MB3UyiO4c5Lfz46Ee4SKfXjFepCoITOyfvab9oMh
CcUE0Y67Bp56AtGNr/LerpZF5tXbWAmuoeEJ3xDN5rCYDDNnLxS4GEsWXeSjYPoV
Rp1DfVMNyZLzHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:07 2026 by rpki-client