Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: xUetgH12N8D69hX/noMTV0b3YgCV9rbrwgiCEXZoKwM=
Subject key identifier: AB:B0:36:83:9A:8F:0D:C2:AF:B9:71:E8:C1:28:3E:FF:70:10:3C:3F
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019CE3356F3A475721EAFB3C831F7548158C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: 82
Signing time: Thu 12 Mar 2026 18:00:55 +0000
Manifest this update: Thu 12 Mar 2026 18:00:55 +0000
Manifest next update: Fri 13 Mar 2026 18:00:55 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: i99wh+MpPbTg+jWGEX80thtx3WsttCwAn90bp3LVeTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:6f:3a:47:57:21:ea:fb:3c:83:1f:75:48:15:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Mar 12 18:00:55 2026 GMT
Not After : Mar 13 18:00:55 2026 GMT
Subject: CN=abb036839a8f0dc2afb971e8c1283eff70103c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:96:59:c0:89:56:6c:26:36:4a:4f:4f:85:
64:1f:be:bb:e5:78:d5:be:4d:99:7f:b3:b3:be:bd:
72:33:ab:d9:eb:78:4e:37:75:a0:29:2b:9f:33:d6:
d5:76:55:f2:85:22:6c:59:d7:26:f1:a6:02:61:9c:
6e:17:91:2e:43:7c:94:46:f9:7e:90:46:b1:12:90:
e5:cc:2a:c1:c7:ca:01:b1:49:09:dc:21:95:25:32:
c6:6a:cd:ee:d0:d3:a3:81:85:99:bf:78:a7:36:80:
8d:16:12:51:a0:35:36:69:ce:b3:49:13:dc:71:bf:
fb:c4:63:a4:3f:ba:ef:a2:31:3f:fc:b5:c6:11:88:
4e:f4:08:90:0b:56:5b:7b:5a:45:e3:98:33:52:04:
d9:83:85:a0:76:5e:82:2b:34:d1:b7:2d:11:fb:62:
e1:6a:d5:79:94:1b:8f:96:d8:5b:ee:f7:f1:a1:60:
d0:0d:27:7c:14:7c:7b:32:64:28:a5:b8:11:95:e1:
77:71:07:76:51:11:8e:f2:11:0c:8d:f6:d7:51:06:
41:cd:77:9e:19:04:37:24:60:ed:de:ff:2d:59:a9:
7e:7a:54:3a:37:ad:5c:07:92:a4:39:fa:52:cc:7f:
d1:eb:b7:fd:12:5b:29:81:e2:50:2a:dc:f2:bd:5d:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B0:36:83:9A:8F:0D:C2:AF:B9:71:E8:C1:28:3E:FF:70:10:3C:3F
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:00:b9:d3:32:b0:60:57:a5:69:47:de:6e:b2:d0:6e:77:66:
c7:a6:59:cf:c8:33:ad:54:44:6e:c9:74:8a:20:47:83:3b:ee:
e3:25:8e:c9:76:52:0b:21:2a:38:ee:84:45:41:b8:17:73:fa:
07:a6:ce:23:ec:84:5a:cb:1c:dc:45:02:9c:0a:ae:93:d2:d0:
b8:d3:8a:2e:56:96:a5:c5:13:dd:e1:1c:82:a0:f2:74:0b:41:
6f:7d:6c:1a:e8:03:3e:43:ab:7f:04:03:c7:42:ca:3e:3b:de:
c6:bf:a7:ad:5c:56:6a:11:be:7f:ca:df:55:f5:99:51:70:3e:
11:cb:0c:90:b3:18:28:d8:b8:a1:00:b5:3c:57:87:60:98:ef:
0b:3e:4a:47:48:c0:75:17:99:10:c7:3d:70:fa:9e:9a:9c:0b:
c2:10:a3:c6:6d:b5:89:3f:e1:67:12:f6:07:18:87:b1:24:37:
6e:b4:8c:26:67:b5:8e:64:a3:48:40:ec:b5:11:a8:2a:4f:4b:
9f:4a:68:06:84:7c:ee:3c:bd:ab:9e:5a:0d:9e:b5:eb:3a:57:
82:6c:5f:38:a8:e0:74:73:51:4e:01:97:f9:47:fa:19:33:7f:
b0:24:9c:a0:05:52:4a:e9:c9:b7:02:31:b0:21:a6:0b:11:c9:
e1:22:28:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNW86R1ch6vs8gx91SBWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz
NDhmNDYwHhcNMjYwMzEyMTgwMDU1WhcNMjYwMzEzMTgwMDU1WjAzMTEwLwYDVQQD
EyhhYmIwMzY4MzlhOGYwZGMyYWZiOTcxZThjMTI4M2VmZjcwMTAzYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb6WWcCJVmwmNkpPT4VkH7675XjV
vk2Zf7Ozvr1yM6vZ63hON3WgKSufM9bVdlXyhSJsWdcm8aYCYZxuF5EuQ3yURvl+
kEaxEpDlzCrBx8oBsUkJ3CGVJTLGas3u0NOjgYWZv3inNoCNFhJRoDU2ac6zSRPc
cb/7xGOkP7rvojE//LXGEYhO9AiQC1Zbe1pF45gzUgTZg4Wgdl6CKzTRty0R+2Lh
atV5lBuPlthb7vfxoWDQDSd8FHx7MmQopbgRleF3cQd2URGO8hEMjfbXUQZBzXee
GQQ3JGDt3v8tWal+elQ6N61cB5KkOfpSzH/R67f9ElspgeJQKtzyvV3IWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuwNoOajw3Cr7lx6MEoPv9wEDw/MB8GA1UdIwQY
MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt
YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx
LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQC50zKw
YFelaUfebrLQbndmx6ZZz8gzrVREbsl0iiBHgzvu4yWOyXZSCyEqOO6ERUG4F3P6
B6bOI+yEWssc3EUCnAquk9LQuNOKLlaWpcUT3eEcgqDydAtBb31sGugDPkOrfwQD
x0LKPjvexr+nrVxWahG+f8rfVfWZUXA+EcsMkLMYKNi4oQC1PFeHYJjvCz5KR0jA
dReZEMc9cPqempwLwhCjxm21iT/hZxL2BxiHsSQ3brSMJme1jmSjSEDstRGoKk9L
n0poBoR87jy9q55aDZ616zpXgmxfOKjgdHNRTgGX+Uf6GTN/sCScoAVSSunJtwIx
sCGmCxHJ4SIoCQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:47:39 2026 by rpki-client