Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: bsJr5SorMkSjoGDI2BGD1kEsUcb17LP+yqlDYGi5crg=
Subject key identifier: E7:49:A3:FD:81:C5:1B:90:A2:89:5B:B1:FA:3D:89:E4:D0:1B:52:C4
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019D37C054D089FD6D3FE624732F87AD5E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1330
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: fKvVor01qPV-ORu7n9y9qnaHTq4.roa (hash: 6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: d7Q0nZGeH8VuMiYAcvqevreEQigv9eClLQriCpIGIlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:54:d0:89:fd:6d:3f:e6:24:73:2f:87:ad:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=e749a3fd81c51b90a2895bb1fa3d89e4d01b52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:5c:81:dd:6d:89:5b:30:2c:37:4e:7a:f3:
fb:32:2a:73:a6:35:46:49:0c:7d:5f:74:69:89:16:
b7:f3:05:5b:13:fa:3d:af:8d:e6:b4:2d:af:d7:8d:
20:9c:29:2e:61:f6:bb:fb:e9:c1:53:cf:37:44:20:
7a:ce:9d:e1:a7:de:50:98:eb:a3:82:47:e2:ea:c8:
15:7a:b0:bd:65:59:e5:19:c7:51:a3:06:6d:c7:ca:
09:32:3a:e2:e5:85:55:58:08:60:5b:9c:2f:08:03:
03:f4:4f:48:39:c7:98:d2:7c:74:42:35:74:66:b6:
19:a3:cd:f5:90:cd:74:0e:f9:c6:49:3a:22:bc:ad:
80:f0:1b:f1:40:cb:a0:8f:26:5c:0a:6a:d1:48:ac:
3d:ce:04:22:b2:8f:2c:24:20:7b:45:d1:ed:88:db:
f7:a0:f2:91:81:63:54:07:93:2e:94:b6:9b:81:b0:
e1:e9:51:37:13:81:a3:82:ed:85:27:93:d5:77:a9:
67:08:5f:44:ba:34:67:70:fd:1f:59:9d:6d:bb:3a:
a7:b8:e3:c8:25:43:1d:0e:37:42:25:d4:da:20:93:
eb:b4:9a:6d:86:6f:1e:7e:74:f3:29:67:a0:9d:e6:
64:4e:81:56:80:68:1f:85:e8:f3:30:7f:3f:68:bf:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:A3:FD:81:C5:1B:90:A2:89:5B:B1:FA:3D:89:E4:D0:1B:52:C4
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4c:c1:a3:49:06:7f:1a:7d:1b:d6:c5:99:1f:c9:0f:ab:8a:
5c:7a:32:49:c3:01:af:2c:e9:7e:b2:70:3f:f7:46:e8:32:bd:
8b:b0:df:23:5a:94:dd:b9:0f:66:92:70:c0:4a:18:93:f4:34:
1e:03:0f:bd:06:fa:e1:1a:39:15:c8:6c:b0:aa:8a:74:e4:58:
e5:71:8b:3e:a3:15:af:a9:6f:c2:16:9e:62:42:ba:aa:6c:82:
d6:f5:98:91:4e:f0:7e:51:c0:53:d3:22:39:da:69:42:18:3a:
40:90:1b:8d:32:81:84:aa:60:4d:8f:86:d8:af:30:42:9a:73:
2a:fc:c5:94:7f:42:2d:87:3f:05:cb:db:23:f3:25:3b:22:cd:
86:82:32:cc:40:08:af:09:fb:be:38:d2:4c:00:e5:d1:a8:fc:
96:76:0f:cc:2a:20:d1:a7:2c:8a:10:bf:04:f4:3e:62:c0:e5:
a1:44:b3:dd:80:7c:cf:40:c1:2e:fe:c3:26:6f:9d:28:fe:55:
fd:a4:b6:ee:2f:47:31:1f:8d:79:49:ba:58:c0:42:ff:5f:ba:
7f:8a:1c:58:1e:58:8c:ed:a0:1c:8f:34:43:99:f6:1b:b4:a1:
17:bb:36:3b:5a:42:5a:64:78:ab:03:fd:ed:bb:b4:75:74:32:
90:20:6d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFTQif1tP+Ykcy+HrV5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjYwMzI5MDQwMDQ0WhcNMjYwMzMwMDQwMDQ0WjAzMTEwLwYDVQQD
EyhlNzQ5YTNmZDgxYzUxYjkwYTI4OTViYjFmYTNkODllNGQwMWI1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJxcgd1tiVswLDdOevP7MipzpjVG
SQx9X3RpiRa38wVbE/o9r43mtC2v140gnCkuYfa7++nBU883RCB6zp3hp95QmOuj
gkfi6sgVerC9ZVnlGcdRowZtx8oJMjri5YVVWAhgW5wvCAMD9E9IOceY0nx0QjV0
ZrYZo831kM10DvnGSToivK2A8BvxQMugjyZcCmrRSKw9zgQiso8sJCB7RdHtiNv3
oPKRgWNUB5MulLabgbDh6VE3E4Gjgu2FJ5PVd6lnCF9EujRncP0fWZ1tuzqnuOPI
JUMdDjdCJdTaIJPrtJpthm8efnTzKWegneZkToFWgGgfhejzMH8/aL+U0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdJo/2BxRuQoolbsfo9ieTQG1LEMB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUzBo0kG
fxp9G9bFmR/JD6uKXHoyScMBryzpfrJwP/dG6DK9i7DfI1qU3bkPZpJwwEoYk/Q0
HgMPvQb64Ro5FchssKqKdORY5XGLPqMVr6lvwhaeYkK6qmyC1vWYkU7wflHAU9Mi
OdppQhg6QJAbjTKBhKpgTY+G2K8wQppzKvzFlH9CLYc/BcvbI/MlOyLNhoIyzEAI
rwn7vjjSTADl0aj8lnYPzCog0acsihC/BPQ+YsDloUSz3YB8z0DBLv7DJm+dKP5V
/aS27i9HMR+NeUm6WMBC/1+6f4ocWB5YjO2gHI80Q5n2G7ShF7s2O1pCWmR4qwP9
7bu0dXQykCBtYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:43 2026 by rpki-client