Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: UGvbiFaJ4UJoBk5Yst+txRuBvD6qrF1/8skA4mjlVSI=
Subject key identifier: F4:29:80:8F:EA:19:0C:E7:10:49:5B:0D:97:9D:82:4E:C5:BE:C3:0E
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019D39414173FE016254475F10DB29496A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 1656
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: UIy9gUZXV88enoE-3KFhIHspXtA.roa (hash: 8X5vRqd+KBox7ge2TIXCQWKZfqoX627wmgj0tLtcDE8=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: Fm6v96vXea3K+TT+38T6gvH4Rm4x5joFEwVLBXFAFI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:73:fe:01:62:54:47:5f:10:db:29:49:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=f429808fea190ce710495b0d979d824ec5bec30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:96:bc:0a:50:35:56:9c:88:ed:33:de:74:
31:45:56:a5:40:70:67:4c:41:1b:07:cf:2d:82:d2:
59:8c:92:e2:7e:95:fc:8b:b4:2c:e5:ec:e9:ca:ad:
a7:8a:14:95:17:f5:81:d0:07:f1:12:bf:23:3d:ad:
2c:94:37:19:23:10:49:83:e4:03:7f:30:11:b5:8f:
df:d5:35:c4:46:25:cd:da:7d:c7:93:5e:7f:20:84:
be:cd:0b:9b:37:06:cc:36:00:32:8d:36:22:6b:48:
b4:24:42:18:63:98:e9:fc:f6:de:99:2b:ac:eb:d5:
05:d1:f7:20:8d:1b:16:20:f7:e3:65:4b:03:c8:14:
6b:83:1b:a5:a0:ba:cf:8e:de:cd:a5:b7:4c:96:06:
81:53:24:ee:c0:10:3b:51:fe:f3:b9:6c:c7:cd:74:
24:35:ac:d2:ac:fd:24:be:67:dd:c1:c1:aa:be:db:
35:fc:01:0c:9d:f7:bb:98:04:5a:06:64:08:d9:5d:
92:ce:49:fb:ea:1d:e1:c6:d9:8a:46:6a:5f:ae:56:
4a:ad:0f:7b:01:73:b2:13:2a:41:b9:9d:78:4f:3c:
af:60:b9:52:02:9d:86:2d:88:ba:a5:05:8a:38:47:
b6:bf:19:d1:0c:a2:8c:5d:da:87:c2:b9:0b:93:50:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:80:8F:EA:19:0C:E7:10:49:5B:0D:97:9D:82:4E:C5:BE:C3:0E
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:ed:57:ae:3c:07:4d:e4:ae:dc:de:28:29:7a:87:4e:a1:
6b:02:59:65:79:0c:ff:f9:66:eb:0e:d0:fc:31:f7:61:ac:cd:
dc:b7:92:67:e3:25:e0:e1:ab:90:af:90:b3:63:95:cf:35:4b:
00:3a:98:76:25:40:63:e3:f4:55:e0:ae:33:c4:b7:3d:76:92:
1f:6a:b8:72:72:73:06:b0:c0:ff:2e:39:7e:ae:b4:e7:73:8f:
84:f5:a6:3f:a5:92:f3:89:5e:89:26:da:5f:76:e8:3b:a6:6b:
e8:7d:67:71:cf:0a:86:8b:ee:cf:3c:48:26:03:c7:8e:41:6b:
c1:aa:2c:19:26:40:97:9d:39:10:3b:a6:8b:6b:10:20:f7:8c:
21:71:70:a6:b1:21:d0:5e:5d:73:65:8c:65:8d:2b:c0:11:80:
ac:a0:a6:88:bc:f9:ed:5d:66:6b:36:ea:96:14:a9:46:d1:d4:
b3:5c:8d:dc:d5:32:0b:4e:cd:54:0e:d7:1c:6c:79:7f:eb:3a:
16:f4:31:9e:d5:f1:76:31:b7:26:99:ad:7b:62:04:40:e0:4a:
e8:b5:50:27:83:27:90:f0:9d:60:2e:d3:92:80:c8:c7:76:1e:
67:51:61:8f:cd:33:03:83:8f:e0:ba:f0:9b:4d:5c:2a:e9:49:
2c:66:06:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUFz/gFiVEdfENspSWpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYmM4ZGRiODAzMmUxODRjOTJiZmUyMDZlMzI4ZjJjMDVk
NzhlNGIwHhcNMjYwMzI5MTEwMTEwWhcNMjYwMzMwMTEwMTEwWjAzMTEwLwYDVQQD
EyhmNDI5ODA4ZmVhMTkwY2U3MTA0OTViMGQ5NzlkODI0ZWM1YmVjMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcqWvApQNVaciO0z3nQxRValQHBn
TEEbB88tgtJZjJLifpX8i7Qs5ezpyq2nihSVF/WB0AfxEr8jPa0slDcZIxBJg+QD
fzARtY/f1TXERiXN2n3Hk15/IIS+zQubNwbMNgAyjTYia0i0JEIYY5jp/PbemSus
69UF0fcgjRsWIPfjZUsDyBRrgxuloLrPjt7NpbdMlgaBUyTuwBA7Uf7zuWzHzXQk
NazSrP0kvmfdwcGqvts1/AEMnfe7mARaBmQI2V2Szkn76h3hxtmKRmpfrlZKrQ97
AXOyEypBuZ14TzyvYLlSAp2GLYi6pQWKOEe2vxnRDKKMXdqHwrkLk1CI3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQpgI/qGQznEElbDZedgk7FvsMOMB8GA1UdIwQY
MBaAFJO8jduAMuGEySv+IG4yjywF145LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEt
YjkxNjc3NDhhOGEzLzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEtYjkxNjc3NDhhOGEz
LzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVftV648
B03krtzeKCl6h06hawJZZXkM//lm6w7Q/DH3YazN3LeSZ+Ml4OGrkK+Qs2OVzzVL
ADqYdiVAY+P0VeCuM8S3PXaSH2q4cnJzBrDA/y45fq6053OPhPWmP6WS84leiSba
X3boO6Zr6H1ncc8KhovuzzxIJgPHjkFrwaosGSZAl505EDumi2sQIPeMIXFwprEh
0F5dc2WMZY0rwBGArKCmiLz57V1mazbqlhSpRtHUs1yN3NUyC07NVA7XHGx5f+s6
FvQxntXxdjG3Jpmte2IEQOBK6LVQJ4MnkPCdYC7TkoDIx3YeZ1Fhj80zA4OP4Lrw
m01cKulJLGYG/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:06 2026 by rpki-client