
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: 9COzqbnGk+iYVChDkYlnitqu+bfkYT3HZdyJgPUbm9o=
Subject key identifier: C6:4B:07:8C:AF:CF:AC:D1:20:CD:E8:C5:04:67:A6:60:79:0E:65:92
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 019CE3DA3A2DC5A8C9FAC6C7B664392CF35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0C93
Signing time: Thu 12 Mar 2026 21:00:55 +0000
Manifest this update: Thu 12 Mar 2026 21:00:55 +0000
Manifest next update: Fri 13 Mar 2026 21:00:55 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: RyrQlDUdePCLSFQrgid4Ue6Z7z578djUkiZETF2hz6A=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:3a:2d:c5:a8:c9:fa:c6:c7:b6:64:39:2c:f3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Mar 12 21:00:55 2026 GMT
Not After : Mar 13 21:00:55 2026 GMT
Subject: CN=c64b078cafcfacd120cde8c50467a660790e6592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:e9:71:e1:24:ae:2a:22:c1:85:6c:28:53:
c1:0c:c0:f2:9b:6a:19:21:50:76:9f:84:53:01:87:
ce:3a:45:6f:0b:b1:08:18:5e:69:e4:d0:a1:a9:f5:
1a:ee:fd:33:b7:3a:fb:be:00:bb:8d:85:ed:2e:dd:
4e:7b:36:54:88:82:25:c5:b0:57:94:45:22:6e:7e:
62:4e:7f:4a:fc:71:ef:7c:e9:06:94:f8:07:9c:82:
8a:46:54:74:63:6d:23:0e:22:45:b7:bf:b8:d6:cd:
cc:e0:98:d6:c9:22:38:b4:f1:83:b4:94:32:3c:15:
70:cd:8b:e2:d2:57:3e:33:22:2e:f6:14:63:a0:08:
cc:55:b2:1d:dd:11:74:7d:35:bb:da:93:2f:0e:e8:
a2:99:0c:33:de:c6:44:4a:67:c5:87:c2:94:fc:38:
c9:93:14:88:63:fc:ab:d0:25:85:68:6b:82:45:d9:
96:95:5d:62:b6:02:29:54:b5:d5:f7:71:a6:44:cf:
de:d8:d9:ce:80:99:45:25:e6:31:d9:d7:bf:5a:41:
9b:93:b5:bb:be:6b:b4:73:ac:64:9d:11:93:2a:07:
94:0e:e2:70:ab:c0:df:17:42:b3:b1:d3:82:ee:84:
de:23:c0:bf:30:d2:9a:64:26:f9:09:b1:67:0e:26:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:07:8C:AF:CF:AC:D1:20:CD:E8:C5:04:67:A6:60:79:0E:65:92
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:35:e2:90:36:58:59:5a:85:de:ea:91:0a:bd:db:d0:85:
01:28:5c:54:7c:6c:0f:5c:97:bc:bb:d1:ff:00:e1:cd:35:92:
89:71:09:47:3e:d0:94:46:be:00:73:d8:0e:ba:50:f5:d6:29:
32:50:c0:17:b4:e4:40:4c:03:4b:b6:e1:61:0e:26:9a:4b:7d:
05:78:29:2c:dc:d2:e9:a3:d0:1e:bf:7b:19:d7:4e:3d:c1:1f:
cc:18:8b:98:39:11:1f:6c:31:da:d5:0e:ff:81:9b:41:76:46:
22:36:6f:07:40:b8:fa:7a:1f:d5:ff:a1:56:ba:9f:7c:a8:57:
c6:40:66:a7:15:73:45:49:19:8c:c8:3b:c9:fd:fa:bb:8e:3c:
19:a8:26:a1:ef:17:25:cc:46:64:20:3a:a6:ea:16:8f:8d:99:
cd:0c:5a:e4:46:bd:1b:3f:49:ae:f3:72:05:35:45:fd:48:19:
27:24:f4:73:77:b2:a5:be:21:53:49:9d:fb:6f:8d:c7:28:a8:
0b:49:8d:08:57:b9:25:6b:7f:82:35:af:16:91:0c:38:a3:57:
f9:59:b8:8d:96:9c:80:b2:49:7a:f1:d3:69:f1:19:77:a8:55:
b0:62:14:82:a7:8d:cc:46:cc:de:0b:93:62:3c:6a:3d:aa:76:
e7:9f:de:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2jotxajJ+sbHtmQ5LPNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5
ZDcxNDIwHhcNMjYwMzEyMjEwMDU1WhcNMjYwMzEzMjEwMDU1WjAzMTEwLwYDVQQD
EyhjNjRiMDc4Y2FmY2ZhY2QxMjBjZGU4YzUwNDY3YTY2MDc5MGU2NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04rpceEkrioiwYVsKFPBDMDym2oZ
IVB2n4RTAYfOOkVvC7EIGF5p5NChqfUa7v0ztzr7vgC7jYXtLt1OezZUiIIlxbBX
lEUibn5iTn9K/HHvfOkGlPgHnIKKRlR0Y20jDiJFt7+41s3M4JjWySI4tPGDtJQy
PBVwzYvi0lc+MyIu9hRjoAjMVbId3RF0fTW72pMvDuiimQwz3sZESmfFh8KU/DjJ
kxSIY/yr0CWFaGuCRdmWlV1itgIpVLXV93GmRM/e2NnOgJlFJeYx2de/WkGbk7W7
vmu0c6xknRGTKgeUDuJwq8DfF0KzsdOC7oTeI8C/MNKaZCb5CbFnDiaI/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZLB4yvz6zRIM3oxQRnpmB5DmWSMB8GA1UdIwQY
MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt
MDkwZmUzZGEyNDMzLzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz
LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKso14pA2
WFlahd7qkQq929CFAShcVHxsD1yXvLvR/wDhzTWSiXEJRz7QlEa+AHPYDrpQ9dYp
MlDAF7TkQEwDS7bhYQ4mmkt9BXgpLNzS6aPQHr97GddOPcEfzBiLmDkRH2wx2tUO
/4GbQXZGIjZvB0C4+nof1f+hVrqffKhXxkBmpxVzRUkZjMg7yf36u448Gagmoe8X
JcxGZCA6puoWj42ZzQxa5Ea9Gz9JrvNyBTVF/UgZJyT0c3eypb4hU0md+2+Nxyio
C0mNCFe5JWt/gjWvFpEMOKNX+Vm4jZacgLJJevHTafEZd6hVsGIUgqeNzEbM3guT
YjxqPap255/eTQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:52 2026 by rpki-client