Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: Ua/Z3ga9xwI0dQwm++33x6B7jb1pWEUEgqeLvtcWm70=
Subject key identifier: 1B:02:F6:C8:68:FB:CA:D8:CC:81:57:35:BD:ED:7A:00:A1:63:44:37
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019D39AF1B48589E54DD3D6C86BB3C8792E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 0564
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: 8VOPo6llvPpJmluUXgu1SwxX/NYXYEtfvDj27HKcLgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1b:48:58:9e:54:dd:3d:6c:86:bb:3c:87:92:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=1b02f6c868fbcad8cc815735bded7a00a1634437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:ff:62:9f:6f:d6:07:80:e6:d0:b0:46:6b:
39:d3:64:26:56:c5:74:8f:3e:71:32:76:f1:ed:8b:
a5:87:f3:41:21:26:79:f5:1b:cd:75:78:8f:92:ce:
62:62:2a:96:b2:bd:5a:43:ed:89:06:fa:0b:e5:06:
0f:a7:ef:f6:04:a3:d2:32:06:d9:63:6a:ba:95:ec:
ad:49:ed:67:59:b2:c9:d6:18:91:36:ee:7b:ac:72:
44:2f:41:7e:92:68:1a:6a:0b:40:5d:75:1a:00:e9:
3f:d4:62:7d:a0:a0:e5:7a:0b:5d:8a:2a:91:d9:4a:
a5:44:31:f5:09:ce:d7:45:bd:97:fb:e3:c0:79:2d:
44:c0:37:b1:9b:b1:b7:43:08:45:9d:0c:ce:24:1b:
ff:00:25:79:87:e2:6c:30:72:9a:f4:5d:46:77:98:
88:d9:0e:ea:8e:02:02:ee:0f:f8:10:5f:bd:b8:86:
7c:cd:fd:ae:5f:7a:63:b3:79:a6:9a:fd:da:30:17:
15:ae:23:62:17:a2:4a:bd:44:c2:62:da:61:a6:57:
d2:39:3a:71:3a:c1:cc:7b:14:9b:0a:bc:78:74:6f:
85:6c:00:a2:df:15:28:4e:59:e7:0e:8c:aa:af:93:
52:91:97:b7:ed:d4:ba:a7:2a:3b:67:6d:bb:ad:ef:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:F6:C8:68:FB:CA:D8:CC:81:57:35:BD:ED:7A:00:A1:63:44:37
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:44:b5:ec:1b:6f:17:fa:9a:9c:ef:f5:11:cc:88:de:de:
9d:07:1f:38:08:89:74:b0:bc:2a:1d:58:f8:6c:d8:86:12:91:
c0:4c:74:42:86:03:b0:f3:e4:9e:37:b0:f9:66:84:fc:02:d3:
93:83:f1:ef:22:b9:64:0d:69:e0:cb:fe:a8:00:18:a9:d4:5d:
17:58:08:2a:53:59:99:34:7a:c1:49:82:f9:93:0e:fc:b0:e6:
c8:25:7f:fa:4d:ed:49:fd:e7:cc:03:9a:6f:bf:4e:e5:04:37:
e5:09:f0:89:76:0a:a5:c4:7f:28:d7:70:4f:0c:43:74:23:9c:
a2:1d:06:66:24:a2:37:6f:5c:df:e6:e0:15:13:ec:f8:80:f1:
ae:0c:42:fd:7d:b8:ff:2e:40:f0:34:e7:2d:c6:3d:4d:81:25:
e1:ad:ed:f3:ae:32:32:ec:22:f7:92:a8:e9:2f:af:59:c4:f1:
2c:06:e0:64:a4:40:34:dc:7d:19:16:ce:61:d5:7e:f1:ea:8d:
8a:d8:10:97:7c:36:39:cb:56:b1:f0:4c:72:e3:99:c7:d9:4f:
f5:eb:25:e6:61:76:e3:ae:5f:45:31:fc:9f:06:84:11:a8:21:
8c:77:7e:ff:9e:9f:3d:1c:cf:68:b9:b4:9c:ff:c7:8a:9e:ae:
8e:ce:ac:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rxtIWJ5U3T1shrs8h5LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1
YmJiYTgwHhcNMjYwMzI5MTMwMTEwWhcNMjYwMzMwMTMwMTEwWjAzMTEwLwYDVQQD
EygxYjAyZjZjODY4ZmJjYWQ4Y2M4MTU3MzViZGVkN2EwMGExNjM0NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD//Yp9v1geA5tCwRms502QmVsV0
jz5xMnbx7Yulh/NBISZ59RvNdXiPks5iYiqWsr1aQ+2JBvoL5QYPp+/2BKPSMgbZ
Y2q6leytSe1nWbLJ1hiRNu57rHJEL0F+kmgaagtAXXUaAOk/1GJ9oKDlegtdiiqR
2UqlRDH1Cc7XRb2X++PAeS1EwDexm7G3QwhFnQzOJBv/ACV5h+JsMHKa9F1Gd5iI
2Q7qjgIC7g/4EF+9uIZ8zf2uX3pjs3mmmv3aMBcVriNiF6JKvUTCYtphplfSOTpx
OsHMexSbCrx4dG+FbACi3xUoTlnnDoyqr5NSkZe37dS6pyo7Z227re+l1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsC9sho+8rYzIFXNb3tegChY0Q3MB8GA1UdIwQY
MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt
NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi
LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlApEtewb
bxf6mpzv9RHMiN7enQcfOAiJdLC8Kh1Y+GzYhhKRwEx0QoYDsPPknjew+WaE/ALT
k4Px7yK5ZA1p4Mv+qAAYqdRdF1gIKlNZmTR6wUmC+ZMO/LDmyCV/+k3tSf3nzAOa
b79O5QQ35QnwiXYKpcR/KNdwTwxDdCOcoh0GZiSiN29c3+bgFRPs+IDxrgxC/X24
/y5A8DTnLcY9TYEl4a3t864yMuwi95Ko6S+vWcTxLAbgZKRANNx9GRbOYdV+8eqN
itgQl3w2OctWsfBMcuOZx9lP9esl5mF2465fRTH8nwaEEaghjHd+/56fPRzPaLm0
nP/Hip6ujs6s7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:21 2026 by rpki-client