Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: 7KB9FxPzrMVhTlNGUwmf6jGJqVKLqyEqHkHK0SaOgRg=
Subject key identifier: 59:C9:FA:8A:7E:0E:C9:31:1C:E7:C4:07:8D:5F:3E:C8:8A:5D:09:A3
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019D389BF5EA4550ED5CC358E96D88262FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0526
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: cFuRgyzw6iVdH3FctQSl3VSKUJAfquJEPvH/1h4Akig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f5:ea:45:50:ed:5c:c3:58:e9:6d:88:26:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=59c9fa8a7e0ec9311ce7c4078d5f3ec88a5d09a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:12:49:08:6c:b1:15:b7:8f:e1:d9:08:df:
2e:4e:60:cc:ca:aa:99:1d:fc:3c:8e:a3:dd:7e:4a:
88:14:39:72:52:ad:fb:13:e6:3f:7d:8e:3b:08:e2:
a7:fd:f8:b1:b8:20:fa:46:84:c3:ee:07:2e:5d:78:
1d:8f:30:0a:8b:3c:4a:5b:92:06:e2:14:7f:8b:8b:
75:9d:10:5c:f4:8f:cc:82:a6:05:6b:05:30:c3:20:
f9:aa:a4:b7:71:66:18:0b:c1:6c:c2:7e:58:fb:ae:
0d:cf:a1:37:a1:44:c4:61:57:aa:ae:c3:14:22:f4:
d4:1e:88:12:b5:37:90:42:fa:62:b1:47:4c:d3:2a:
0b:21:78:56:5e:ad:f1:f6:f1:1e:cc:a6:97:88:58:
09:80:ef:41:ae:f0:e5:df:1d:1d:82:3b:01:e3:2d:
5b:7c:ce:a3:10:ca:22:12:1b:13:4b:37:f9:05:b3:
85:93:ac:1b:3b:c0:91:af:d5:89:cf:12:4e:a8:5a:
55:ec:dd:3b:fb:c7:0c:79:ec:14:74:46:18:46:90:
f4:aa:bb:4d:87:da:42:19:2d:fc:8c:78:b5:c7:87:
d1:5c:d4:03:f1:15:34:76:0b:93:f8:77:fd:51:2c:
87:05:78:19:42:1c:52:bb:89:72:c4:2b:b1:a9:b7:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C9:FA:8A:7E:0E:C9:31:1C:E7:C4:07:8D:5F:3E:C8:8A:5D:09:A3
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3a:58:a9:d7:c9:b3:d4:14:f9:7f:f7:be:98:66:0b:1c:48:
46:ba:82:be:66:88:db:5e:a0:50:04:a5:e1:db:9e:6b:7f:19:
76:10:42:30:7b:a1:60:77:73:39:5c:b0:20:c9:3f:59:f6:c0:
f4:e6:da:7c:d4:2c:b0:41:27:6d:4a:19:37:f2:51:9f:89:06:
66:1d:ba:22:ec:65:e0:ff:39:56:e9:70:7f:17:30:46:20:8c:
bb:86:20:b6:07:61:6f:30:bf:b7:08:18:b9:58:c2:10:23:17:
43:ad:1f:34:6c:c4:12:50:3e:21:34:a3:0e:26:4e:dd:28:1d:
e4:94:07:9e:d7:e3:b2:1d:23:e0:d8:8f:a8:cd:4e:51:ca:34:
77:f3:37:6f:2f:ce:76:77:4d:be:9c:2b:0d:32:f3:d1:bc:fa:
36:c0:64:cf:f8:c0:6f:1e:45:41:69:68:09:b1:0f:01:e8:d2:
85:88:b3:e9:b8:b5:c7:ab:88:31:c4:75:ae:a0:ab:db:2b:c6:
34:c6:35:e0:bd:20:65:ea:f5:67:b9:db:dc:3c:ae:18:8a:d0:
30:7e:44:29:56:70:5b:10:da:7b:ff:7e:9e:c6:9e:f3:bc:22:
34:d7:30:53:bd:60:11:3c:dd:b7:1e:c1:5c:bf:ec:3d:c2:b8:
51:82:62:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/XqRVDtXMNY6W2IJi/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzQyNDg0ZDc1YWQ3YTQyN2RjZjYxYjVhYzlhYzU2NTQz
ZTlmMzMwHhcNMjYwMzI5MDgwMDM4WhcNMjYwMzMwMDgwMDM4WjAzMTEwLwYDVQQD
Eyg1OWM5ZmE4YTdlMGVjOTMxMWNlN2M0MDc4ZDVmM2VjODhhNWQwOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOgSSQhssRW3j+HZCN8uTmDMyqqZ
Hfw8jqPdfkqIFDlyUq37E+Y/fY47COKn/fixuCD6RoTD7gcuXXgdjzAKizxKW5IG
4hR/i4t1nRBc9I/MgqYFawUwwyD5qqS3cWYYC8Fswn5Y+64Nz6E3oUTEYVeqrsMU
IvTUHogStTeQQvpisUdM0yoLIXhWXq3x9vEezKaXiFgJgO9BrvDl3x0dgjsB4y1b
fM6jEMoiEhsTSzf5BbOFk6wbO8CRr9WJzxJOqFpV7N07+8cMeewUdEYYRpD0qrtN
h9pCGS38jHi1x4fRXNQD8RU0dguT+Hf9USyHBXgZQhxSu4lyxCuxqbcVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnJ+op+DskxHOfEB41fPsiKXQmjMB8GA1UdIwQY
MBaAFJLEJITXWtekJ9z2G1rJrFZUPp8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEt
MjkyZmVhZDEyZDU5LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEtMjkyZmVhZDEyZDU5
LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjpYqdfJ
s9QU+X/3vphmCxxIRrqCvmaI216gUASl4duea38ZdhBCMHuhYHdzOVywIMk/WfbA
9ObafNQssEEnbUoZN/JRn4kGZh26Iuxl4P85VulwfxcwRiCMu4YgtgdhbzC/twgY
uVjCECMXQ60fNGzEElA+ITSjDiZO3Sgd5JQHntfjsh0j4NiPqM1OUco0d/M3by/O
dndNvpwrDTLz0bz6NsBkz/jAbx5FQWloCbEPAejShYiz6bi1x6uIMcR1rqCr2yvG
NMY14L0gZer1Z7nb3DyuGIrQMH5EKVZwWxDae/9+nsae87wiNNcwU71gETzdtx7B
XL/sPcK4UYJioA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client