Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: 6YNb1w4EXurQWNTv59NMzSy+WKsBRQMwPgMeQ3qstSA=
Subject key identifier: 79:3B:C1:87:E7:AC:31:8B:42:89:68:4F:77:7C:43:30:AA:2F:F9:44
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 019D38D2E62A306FE55DCA795D681F8B3D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 169A
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: gCOu/TbAhmj6KtWwQ3yJ772Jo+Ur8OJ2bZnk1m0C1Gw=)
2: Va7ccuyr1gwIPxh57e6tKLedSCw.roa (hash: Href7Vt90sb2zBKLkX06zqhinA47HJQXH9/GsT7Lagw=)
3: lyFAZNxDoVB_4-IZx9taISL-h1Y.roa (hash: kzhZQdnTTMEyyH8y5o2LcLLVtV/D0+7gimOZT6GoW+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e6:2a:30:6f:e5:5d:ca:79:5d:68:1f:8b:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=793bc187e7ac318b4289684f777c4330aa2ff944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:10:2a:19:09:43:06:0c:2e:42:37:cd:14:
57:e0:af:b8:4e:da:fa:83:76:f0:8b:4e:c4:76:1f:
bc:bb:e4:c7:fd:f0:1c:a0:2f:0a:8b:3c:61:d1:74:
9d:89:3b:a8:b8:06:6e:23:62:85:a6:48:ba:84:1a:
93:8e:96:0b:fd:65:cc:ff:d1:79:c1:25:c3:43:7c:
ef:df:87:91:e5:0d:30:f8:4f:51:b3:58:32:b0:94:
22:2f:44:61:db:e4:e7:aa:11:ec:be:ba:83:df:0e:
13:4c:d7:9c:ab:95:49:cc:88:80:ba:eb:da:23:0b:
fe:d5:ae:17:34:8a:20:cd:b1:05:d2:e8:39:05:86:
74:dd:8d:0d:1d:3b:a7:f7:96:60:fb:63:63:68:29:
b3:b8:77:a8:ca:97:e9:7c:0f:2f:d6:13:6a:6a:85:
42:4a:93:ee:61:3d:b3:78:8c:91:83:c6:3e:e2:26:
21:cf:2a:24:09:d4:31:2e:5e:ea:b1:c8:45:ef:fb:
06:c0:1d:b3:d4:68:01:4f:b7:3a:82:ca:82:a0:9c:
d7:e1:e4:6c:20:57:49:6c:5b:09:3d:a3:73:5c:fc:
96:a5:14:51:d3:3c:a7:fe:93:fb:2b:1a:c9:a7:c8:
26:5a:bc:14:23:35:f0:44:10:59:63:83:1e:04:f5:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3B:C1:87:E7:AC:31:8B:42:89:68:4F:77:7C:43:30:AA:2F:F9:44
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:05:a8:79:a0:ee:fc:97:63:b2:37:f0:d9:3a:81:fa:f5:9f:
09:18:d6:a6:05:c8:9a:2b:74:34:3d:6b:53:5b:7b:5d:9d:76:
04:7e:2c:2e:73:cf:ba:0b:43:d1:28:b1:52:8e:46:b1:a6:76:
fe:e5:7a:02:ee:72:10:fb:f2:9a:1c:61:56:d5:77:b3:4a:c9:
b0:05:a5:9e:61:2a:4c:c7:3b:dd:e0:86:51:1a:e3:80:bc:9e:
f3:b0:92:b4:60:98:4f:bc:d0:7d:47:37:b8:3f:30:c9:22:7a:
b3:ed:38:c0:ff:67:13:26:c6:9b:70:b7:9e:cb:3f:c8:cd:1c:
d8:83:b8:89:59:3a:d0:5d:c8:d1:f7:2f:de:fe:77:28:dc:72:
3b:66:60:9f:23:5c:f4:04:a2:81:8f:6a:c2:e4:e3:c1:4e:cf:
ad:a0:3a:12:62:0c:a8:0c:d7:5a:8d:41:d6:70:25:41:5c:be:
26:62:21:41:8d:a6:fb:4c:c8:97:ab:b2:b9:1d:31:59:ff:f0:
4c:50:0f:cf:9f:5a:83:2a:3d:84:45:8e:c8:a5:3d:fa:9c:0b:
21:25:22:da:2d:1a:de:b1:c7:af:78:f6:e5:fb:e1:49:dc:23:
ca:bf:9e:c1:21:bb:8d:9d:56:d9:3f:51:b5:1c:9b:be:fe:6c:
21:5e:c5:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040uYqMG/lXcp5XWgfiz2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl
YzE4OWMwHhcNMjYwMzI5MDkwMDM4WhcNMjYwMzMwMDkwMDM4WjAzMTEwLwYDVQQD
Eyg3OTNiYzE4N2U3YWMzMThiNDI4OTY4NGY3NzdjNDMzMGFhMmZmOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwioQKhkJQwYMLkI3zRRX4K+4Ttr6
g3bwi07Edh+8u+TH/fAcoC8Kizxh0XSdiTuouAZuI2KFpki6hBqTjpYL/WXM/9F5
wSXDQ3zv34eR5Q0w+E9Rs1gysJQiL0Rh2+TnqhHsvrqD3w4TTNecq5VJzIiAuuva
Iwv+1a4XNIogzbEF0ug5BYZ03Y0NHTun95Zg+2NjaCmzuHeoypfpfA8v1hNqaoVC
SpPuYT2zeIyRg8Y+4iYhzyokCdQxLl7qschF7/sGwB2z1GgBT7c6gsqCoJzX4eRs
IFdJbFsJPaNzXPyWpRRR0zyn/pP7KxrJp8gmWrwUIzXwRBBZY4MeBPWOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk7wYfnrDGLQoloT3d8QzCqL/lEMB8GA1UdIwQY
MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt
MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk
LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQWoeaDu
/Jdjsjfw2TqB+vWfCRjWpgXImit0ND1rU1t7XZ12BH4sLnPPugtD0SixUo5GsaZ2
/uV6Au5yEPvymhxhVtV3s0rJsAWlnmEqTMc73eCGURrjgLye87CStGCYT7zQfUc3
uD8wySJ6s+04wP9nEybGm3C3nss/yM0c2IO4iVk60F3I0fcv3v53KNxyO2ZgnyNc
9ASigY9qwuTjwU7PraA6EmIMqAzXWo1B1nAlQVy+JmIhQY2m+0zIl6uyuR0xWf/w
TFAPz59agyo9hEWOyKU9+pwLISUi2i0a3rHHr3j25fvhSdwjyr+ewSG7jZ1W2T9R
tRybvv5sIV7FEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:16 2026 by rpki-client