Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
File: KJXdKTdOKsyr5NiuxD9Np80SBfM.mft (raw, json)
Hash identifier: jZk/CEiF8m7iJMbWRyBwbhh1GpscwORFMQxRtzo/8rc=
Subject key identifier: A9:AC:3A:79:DA:DC:B5:CD:EE:8D:D2:6C:C8:C9:16:13:82:38:BD:B6
Authority key identifier: 28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
Certificate issuer: /CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Certificate serial: 019E1C46C49C68AA9B896D3BA8D1696508D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
Manifest number: 1B
Signing time: Tue 12 May 2026 13:01:00 +0000
Manifest this update: Tue 12 May 2026 13:01:00 +0000
Manifest next update: Wed 13 May 2026 13:01:00 +0000
Files and hashes: 1: KJXdKTdOKsyr5NiuxD9Np80SBfM.crl (hash: Y1nDScF97hr5/g47nnK+sShW6VBzKZcudsnmC3VJgHs=)
2: l29f1pwR90G9hmQYKMzdnPcuWRI.asa (hash: RNcM3GXoyy5iuqkZ/xhWwSNrSjX/280dh47k+2z7ykw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:c4:9c:68:aa:9b:89:6d:3b:a8:d1:69:65:08:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Validity
Not Before: May 12 13:01:00 2026 GMT
Not After : May 13 13:01:00 2026 GMT
Subject: CN=a9ac3a79dadcb5cdee8dd26cc8c916138238bdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:e6:c4:8c:d5:2a:a5:62:3a:fa:fb:f5:0c:
8d:28:59:d6:45:d2:bd:53:eb:54:63:c7:e0:8e:e3:
6c:ef:ab:bf:4e:8e:c9:03:74:b7:c8:54:c2:bf:7b:
24:9e:01:1d:c4:38:88:34:23:aa:12:ba:9f:5c:00:
36:b4:8d:85:63:93:dd:63:3b:0b:71:21:8d:5b:11:
e9:13:95:a6:47:82:6a:82:08:73:c4:31:d5:3d:9f:
1b:d4:df:b0:e4:02:c1:f8:63:aa:03:a0:5f:66:c1:
e3:d8:e6:97:80:f5:80:2a:30:26:c5:27:30:8d:f6:
7e:7a:ec:33:ab:98:0b:16:60:f7:df:ef:4e:b1:3a:
d9:db:27:0d:f7:e4:14:d7:a5:11:b5:7e:c4:8f:ca:
99:53:be:e3:e9:de:d7:a5:a0:8b:13:54:4b:85:d2:
52:a9:01:f9:37:29:35:e5:45:07:06:95:cc:da:12:
ad:58:fd:20:7a:64:ee:6c:1f:5c:8f:43:2b:62:f3:
cb:c8:14:f9:05:61:63:bf:dc:22:fa:d0:a6:fb:d9:
39:f8:e9:5c:9d:45:c9:66:d4:11:8d:d1:ad:35:ec:
96:4b:f5:36:e4:d4:3a:d0:4f:68:cc:cf:4a:be:b9:
d9:42:74:91:cb:f9:48:0f:aa:de:5c:0b:28:d1:0d:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:3A:79:DA:DC:B5:CD:EE:8D:D2:6C:C8:C9:16:13:82:38:BD:B6
X509v3 Authority Key Identifier:
keyid:28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fd:16:bd:b4:36:12:04:7b:4b:80:ea:b2:20:54:ce:c7:3e:
24:78:dc:bd:64:25:d6:ef:1a:59:81:d8:ca:62:d3:3e:e9:9b:
c8:01:14:48:eb:8b:40:ba:34:c3:d9:29:ab:a4:36:13:b5:b9:
76:b3:19:91:2c:9f:ac:ae:41:e7:1a:21:95:cf:a5:81:1c:5f:
3f:cb:71:0a:75:75:eb:d5:89:88:c0:67:f0:68:9f:91:ba:68:
8e:a7:f0:e2:aa:2d:5b:dd:a7:63:0c:28:9e:7c:c3:c6:d1:aa:
58:3d:04:cb:56:ad:a0:1e:8a:77:cf:0e:a4:36:f5:80:df:0d:
09:c1:44:f7:13:78:03:f7:99:d2:ca:8e:de:c0:82:62:aa:09:
29:a5:69:1c:34:fb:58:d3:e4:83:c3:4a:9a:82:f4:57:1a:27:
ca:c1:d8:7f:d8:6d:88:f0:ec:fe:1f:5f:54:f0:29:8e:6a:0e:
a5:15:b1:1f:ba:96:09:72:f8:b4:3b:cd:e1:41:06:15:bf:e9:
ce:54:d6:5a:be:21:3b:3b:de:36:6b:8d:8b:35:d5:a7:1b:03:
5d:e5:61:dc:a8:0d:02:9f:dc:bc:d7:2e:86:ad:fd:18:79:b6:
08:81:c3:54:2b:c8:53:62:d1:9a:94:ca:c5:69:90:98:62:7e:
a1:d4:14:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRsScaKqbiW07qNFpZQjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVkZDI5Mzc0ZTJhY2NhYmU0ZDhhZWM0M2Y0ZGE3Y2Qx
MjA1ZjMwHhcNMjYwNTEyMTMwMTAwWhcNMjYwNTEzMTMwMTAwWjAzMTEwLwYDVQQD
EyhhOWFjM2E3OWRhZGNiNWNkZWU4ZGQyNmNjOGM5MTYxMzgyMzhiZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzjmxIzVKqViOvr79QyNKFnWRdK9
U+tUY8fgjuNs76u/To7JA3S3yFTCv3skngEdxDiINCOqErqfXAA2tI2FY5PdYzsL
cSGNWxHpE5WmR4JqgghzxDHVPZ8b1N+w5ALB+GOqA6BfZsHj2OaXgPWAKjAmxScw
jfZ+euwzq5gLFmD33+9OsTrZ2ycN9+QU16URtX7Ej8qZU77j6d7XpaCLE1RLhdJS
qQH5Nyk15UUHBpXM2hKtWP0gemTubB9cj0MrYvPLyBT5BWFjv9wi+tCm+9k5+Olc
nUXJZtQRjdGtNeyWS/U25NQ60E9ozM9KvrnZQnSRy/lID6reXAso0Q3eBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmsOnna3LXN7o3SbMjJFhOCOL22MB8GA1UdIwQY
MBaAFCiV3Sk3TirMq+TYrsQ/TafNEgXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYZEtUZE9Lc3lyNU5pdXhEOU5wODBTQmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMzg4M2YtYzA1Ny00MWZkLWExNWUt
YWM3ZWY5ZTg0YWI2LzEvS0pYZEtUZE9Lc3lyNU5pdXhEOU5wODBTQmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMzg4M2YtYzA1Ny00MWZkLWExNWUtYWM3ZWY5ZTg0YWI2
LzEvS0pYZEtUZE9Lc3lyNU5pdXhEOU5wODBTQmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev0WvbQ2
EgR7S4DqsiBUzsc+JHjcvWQl1u8aWYHYymLTPumbyAEUSOuLQLo0w9kpq6Q2E7W5
drMZkSyfrK5B5xohlc+lgRxfP8txCnV169WJiMBn8Gifkbpojqfw4qotW92nYwwo
nnzDxtGqWD0Ey1atoB6Kd88OpDb1gN8NCcFE9xN4A/eZ0sqO3sCCYqoJKaVpHDT7
WNPkg8NKmoL0VxonysHYf9htiPDs/h9fVPApjmoOpRWxH7qWCXL4tDvN4UEGFb/p
zlTWWr4hOzveNmuNizXVpxsDXeVh3KgNAp/cvNcuhq39GHm2CIHDVCvIU2LRmpTK
xWmQmGJ+odQUkg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:46 2026 by rpki-client