Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: dK6TQx6iMYtCbAVwOL41futxFQ5JoeKjTbUYzpTLXvY=
Subject key identifier: EC:C5:DD:18:4B:EB:9A:C0:B8:D0:76:1B:FD:B8:D9:CA:F2:F7:5A:21
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019D0C68C366EF78F112E346B2B02B4D0C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0CDE
Signing time: Fri 20 Mar 2026 18:01:25 +0000
Manifest this update: Fri 20 Mar 2026 18:01:25 +0000
Manifest next update: Sat 21 Mar 2026 18:01:25 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: KgGt6SKaj+3jkURL8NXTQwKMtftQGvSRri4ydbzra/c=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:68:c3:66:ef:78:f1:12:e3:46:b2:b0:2b:4d:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Mar 20 18:01:25 2026 GMT
Not After : Mar 21 18:01:25 2026 GMT
Subject: CN=ecc5dd184beb9ac0b8d0761bfdb8d9caf2f75a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:08:51:0f:5f:01:a1:a5:04:b5:69:06:a0:
c3:da:23:6b:73:e5:ce:cf:0b:59:99:44:de:3a:02:
7d:8f:a5:cc:da:7b:59:2c:8d:58:76:e1:1b:eb:fa:
4f:f4:f6:61:16:fa:03:f5:2b:fd:74:a0:ca:4a:d8:
1e:42:f7:a4:78:84:2d:ff:63:50:fd:6b:a4:ee:6a:
ea:b8:b9:98:2e:84:d6:93:86:9d:ae:13:8c:ec:16:
48:7a:ea:79:ee:d9:9f:2b:c6:94:f8:12:73:02:86:
b5:60:9b:bd:99:e1:16:16:51:5e:e1:8f:a2:48:7d:
45:14:6a:74:0e:97:55:c1:8c:c2:50:39:3e:d6:20:
d5:6d:59:a6:39:5d:42:9b:80:6b:84:2f:9c:dc:ac:
b7:06:97:70:d3:f9:86:cf:e9:c2:51:d0:2b:50:6c:
c4:9d:17:10:25:c2:33:6b:22:81:58:63:d2:0c:a8:
c0:a7:7c:1c:cf:2b:87:29:69:83:2c:6f:73:4a:e8:
fb:af:80:16:c8:83:ce:23:82:c2:fe:0d:7d:e6:3d:
f8:65:09:4d:12:aa:12:eb:a0:f2:13:59:b5:d2:f0:
a1:45:b8:fe:98:ce:2a:21:7e:4c:41:cf:00:89:e6:
57:f9:d5:9b:c8:8d:8d:d6:a1:2f:04:1a:9b:3e:82:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:DD:18:4B:EB:9A:C0:B8:D0:76:1B:FD:B8:D9:CA:F2:F7:5A:21
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:4f:4a:0a:37:de:6a:ed:09:44:c1:5b:7a:b6:13:21:d8:
1e:8b:33:95:6b:b2:1f:58:19:97:9d:59:75:76:a8:11:36:66:
3f:31:7e:79:2c:ef:8e:c1:73:fa:de:68:54:9e:52:31:cd:cf:
d4:17:7b:7b:d1:e8:a8:55:52:d0:2a:8b:e5:78:e7:5a:87:12:
b1:02:65:0f:8a:a2:2c:90:7f:76:38:be:c7:47:0c:fe:5b:83:
50:91:b6:40:9c:fc:9c:11:51:5a:ae:d4:55:df:5b:91:ba:98:
88:83:46:d4:b6:67:26:91:da:4a:0b:80:09:70:c9:f8:79:96:
f0:ed:27:df:89:6a:c0:f5:8e:4c:92:f7:81:e1:7a:b8:50:cb:
3a:ed:95:7c:3f:de:c3:6a:46:10:c6:61:40:64:18:ec:79:54:
fe:ac:b0:e3:77:2b:cd:bf:06:e7:48:c6:49:5a:45:b6:e4:45:
8f:d8:71:ab:89:8a:89:77:21:93:a7:46:60:0f:64:29:50:af:
6c:a4:58:65:c7:3e:05:21:a9:b7:86:ad:da:59:5a:82:54:f6:
d4:02:ef:86:6a:18:c2:6e:96:80:aa:79:3f:ec:c7:1d:78:21:
02:af:d2:54:13:50:87:9c:e3:d6:08:fd:49:96:a6:44:77:28:
6b:bd:2b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0MaMNm73jxEuNGsrArTQxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjYwMzIwMTgwMTI1WhcNMjYwMzIxMTgwMTI1WjAzMTEwLwYDVQQD
EyhlY2M1ZGQxODRiZWI5YWMwYjhkMDc2MWJmZGI4ZDljYWYyZjc1YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2oIUQ9fAaGlBLVpBqDD2iNrc+XO
zwtZmUTeOgJ9j6XM2ntZLI1YduEb6/pP9PZhFvoD9Sv9dKDKStgeQvekeIQt/2NQ
/Wuk7mrquLmYLoTWk4adrhOM7BZIeup57tmfK8aU+BJzAoa1YJu9meEWFlFe4Y+i
SH1FFGp0DpdVwYzCUDk+1iDVbVmmOV1Cm4BrhC+c3Ky3Bpdw0/mGz+nCUdArUGzE
nRcQJcIzayKBWGPSDKjAp3wczyuHKWmDLG9zSuj7r4AWyIPOI4LC/g195j34ZQlN
EqoS66DyE1m10vChRbj+mM4qIX5MQc8AieZX+dWbyI2N1qEvBBqbPoIUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzF3RhL65rAuNB2G/242cry91ohMB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp5PSgo3
3mrtCUTBW3q2EyHYHoszlWuyH1gZl51ZdXaoETZmPzF+eSzvjsFz+t5oVJ5SMc3P
1Bd7e9HoqFVS0CqL5XjnWocSsQJlD4qiLJB/dji+x0cM/luDUJG2QJz8nBFRWq7U
Vd9bkbqYiING1LZnJpHaSguACXDJ+HmW8O0n34lqwPWOTJL3geF6uFDLOu2VfD/e
w2pGEMZhQGQY7HlU/qyw43crzb8G50jGSVpFtuRFj9hxq4mKiXchk6dGYA9kKVCv
bKRYZcc+BSGpt4at2llaglT21ALvhmoYwm6WgKp5P+zHHXghAq/SVBNQh5zj1gj9
SZamRHcoa70r3g==
-----END CERTIFICATE-----
Generated at Sat Mar 21 00:14:27 2026 by rpki-client