Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: 1vCx/HScnpfk5Sdg3jDixVlNGLBTulW2uYVkTvgVcMA=
Subject key identifier: 4C:96:CB:EE:11:9F:53:81:17:21:F8:DE:15:D8:4C:B7:34:E7:0A:07
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019CE47EC0479C03A4934ED4B0D04DC00F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 00:00:37 +0000
Manifest this update: Fri 13 Mar 2026 00:00:37 +0000
Manifest next update: Sat 14 Mar 2026 00:00:37 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: TtteZSO1rJZDGy+xtpzsJ1G72iXxnJQsuXAcV4yYGvA=)
2: j9BouMciNW9kiR4MYbw5nEI18Lk.roa (hash: 0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:c0:47:9c:03:a4:93:4e:d4:b0:d0:4d:c0:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Mar 13 00:00:37 2026 GMT
Not After : Mar 14 00:00:37 2026 GMT
Subject: CN=4c96cbee119f53811721f8de15d84cb734e70a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:0d:24:fb:fe:1c:b3:ea:78:02:38:ba:6e:
c8:a0:d8:00:ad:8d:29:dd:aa:19:0d:c3:98:15:30:
47:7c:89:46:a4:86:03:9f:70:fd:1f:f7:1d:20:10:
5b:3b:12:a7:d1:53:20:b0:b5:b3:00:26:fa:4f:2b:
cf:c5:5b:77:ca:72:7e:f5:02:dc:0d:3e:17:f5:e6:
32:07:1e:43:23:86:19:38:14:6c:f0:1b:8a:02:03:
16:d2:f8:fb:d4:91:63:5a:3a:f9:f0:21:f5:90:15:
0e:4f:a2:ca:f5:5c:11:85:0d:bd:f5:3a:d0:62:f9:
2e:15:03:3d:e9:6f:fc:8b:9e:4f:a7:84:68:12:d1:
08:4e:aa:e8:67:c1:ac:a7:e8:b1:55:ba:76:f1:24:
6d:38:97:fb:1e:9e:dc:57:1c:af:18:57:57:f3:14:
fe:23:f4:64:1a:ce:14:0d:d2:f4:b7:4c:c2:39:7f:
1a:ab:6d:84:f4:29:e6:eb:ac:8d:1c:f9:21:00:c7:
73:b1:f8:93:f8:77:20:52:74:77:ba:df:e5:01:ca:
0d:07:a0:c6:a1:26:39:33:60:52:9f:73:aa:89:ed:
40:e3:64:da:51:42:a0:f7:45:d6:6f:79:37:90:f4:
61:d7:97:1a:ea:0a:76:20:ad:fe:c5:59:eb:3f:0b:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:CB:EE:11:9F:53:81:17:21:F8:DE:15:D8:4C:B7:34:E7:0A:07
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:64:03:5e:30:29:57:c0:b5:44:b2:c9:f1:66:6c:a6:1e:
62:8c:1e:04:41:60:e4:79:92:28:57:ab:fb:d2:56:bd:8e:43:
e9:21:bf:11:a4:77:ad:20:63:6f:45:58:63:45:8a:92:15:9e:
b2:16:33:8f:a1:10:9c:52:2d:74:30:bd:cf:06:c4:f2:f7:1f:
e5:3f:19:15:7d:19:82:b2:ec:f0:05:5b:a2:e0:90:81:de:a3:
0c:44:61:42:57:29:b7:e4:11:11:0e:62:d4:1a:56:92:1f:8f:
a4:82:6e:79:da:26:59:22:86:9f:61:4d:63:1b:0d:4f:ec:dd:
ac:e0:38:b3:85:fb:65:8f:a9:b3:d4:87:c6:dc:27:15:68:af:
d1:32:39:1f:6b:e4:76:cb:b6:45:5c:93:ee:a0:ac:3f:53:9f:
3d:6a:a1:ae:9b:d3:23:db:32:09:47:cc:10:7b:82:b8:27:60:
d4:24:4f:79:aa:66:ac:92:c7:fd:82:48:b5:29:eb:34:3a:6e:
86:11:4f:ea:0a:ed:e0:db:36:15:a3:f3:06:75:88:04:db:29:
7e:53:ae:7e:9f:94:3e:9c:79:fc:71:e3:2c:b3:52:89:83:09:
cf:84:dc:5c:f9:ec:07:9c:f3:4b:2c:86:91:05:07:a7:f3:8b:
69:bb:92:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfsBHnAOkk07UsNBNwA9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx
YzU0MTAwHhcNMjYwMzEzMDAwMDM3WhcNMjYwMzE0MDAwMDM3WjAzMTEwLwYDVQQD
Eyg0Yzk2Y2JlZTExOWY1MzgxMTcyMWY4ZGUxNWQ4NGNiNzM0ZTcwYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2MNJPv+HLPqeAI4um7IoNgArY0p
3aoZDcOYFTBHfIlGpIYDn3D9H/cdIBBbOxKn0VMgsLWzACb6TyvPxVt3ynJ+9QLc
DT4X9eYyBx5DI4YZOBRs8BuKAgMW0vj71JFjWjr58CH1kBUOT6LK9VwRhQ299TrQ
YvkuFQM96W/8i55Pp4RoEtEITqroZ8Gsp+ixVbp28SRtOJf7Hp7cVxyvGFdX8xT+
I/RkGs4UDdL0t0zCOX8aq22E9Cnm66yNHPkhAMdzsfiT+HcgUnR3ut/lAcoNB6DG
oSY5M2BSn3Oqie1A42TaUUKg90XWb3k3kPRh15ca6gp2IK3+xVnrPwuYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyWy+4Rn1OBFyH43hXYTLc05woHMB8GA1UdIwQY
MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt
NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl
LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgb9kA14w
KVfAtUSyyfFmbKYeYoweBEFg5HmSKFer+9JWvY5D6SG/EaR3rSBjb0VYY0WKkhWe
shYzj6EQnFItdDC9zwbE8vcf5T8ZFX0ZgrLs8AVbouCQgd6jDERhQlcpt+QREQ5i
1BpWkh+PpIJuedomWSKGn2FNYxsNT+zdrOA4s4X7ZY+ps9SHxtwnFWiv0TI5H2vk
dsu2RVyT7qCsP1OfPWqhrpvTI9syCUfMEHuCuCdg1CRPeapmrJLH/YJItSnrNDpu
hhFP6grt4Ns2FaPzBnWIBNspflOufp+UPpx5/HHjLLNSiYMJz4TcXPnsB5zzSyyG
kQUHp/OLabuSAA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:37 2026 by rpki-client