Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: lHh13EQibc8f+EI1ZNaSIqtT/x61A9+Y1NU0cEzdA70=
Subject key identifier: FF:25:3A:DC:54:19:6E:B6:08:0E:86:01:6A:79:6D:8A:DF:E8:28:D6
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019D382E173A4D4859BD7FB656201CE6C31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: NvaDuocIm5XBOJmqPE7Mr9fvpE3m3eHZCICoRvrqA68=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:17:3a:4d:48:59:bd:7f:b6:56:20:1c:e6:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=ff253adc54196eb6080e86016a796d8adfe828d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:4a:4d:84:a6:39:46:74:77:2c:5e:32:6e:
14:96:0c:0e:93:ea:aa:0a:c5:b7:df:47:6e:b5:c6:
ba:a8:7c:e8:33:b6:2d:af:dd:c1:fb:54:96:6b:37:
a7:0f:b7:2a:07:ee:0d:5d:e2:ec:76:68:08:93:5b:
8f:ed:38:c9:69:5e:f6:e8:76:f4:d0:c7:a5:37:7a:
c6:6c:b7:75:a8:e2:b4:dd:4d:65:4f:0c:3b:f6:bb:
b7:1f:c6:ad:c2:cb:66:37:3d:2c:ad:0b:8a:2f:47:
ad:0b:ac:77:70:2b:c6:25:69:76:d7:c6:9b:e1:e2:
3b:53:c5:ab:4f:d4:26:cb:87:35:a8:da:6a:65:23:
6a:68:62:9d:da:ed:c5:bc:14:9f:b3:96:0c:b7:2a:
22:12:f9:61:64:0c:74:48:44:d3:af:ca:ec:26:eb:
3a:1d:8b:e6:42:27:86:b8:84:e5:3c:11:d1:97:aa:
11:a1:28:3a:97:2d:01:f1:2f:f2:dd:32:c8:cc:0b:
0b:f5:b1:ca:52:37:48:45:e6:ac:0d:67:34:ba:c2:
de:f2:db:af:8e:05:98:68:24:e8:3a:8b:6b:a7:13:
34:51:a0:26:a7:ef:15:ec:77:ce:36:d1:7e:af:d0:
0c:51:1d:c3:80:a6:55:62:20:6a:96:88:3f:a6:bb:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:3A:DC:54:19:6E:B6:08:0E:86:01:6A:79:6D:8A:DF:E8:28:D6
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:84:4c:71:da:bb:7b:a4:52:9c:78:75:e2:13:f4:2b:d6:67:
75:a0:43:f9:d5:50:d5:a7:78:f4:d2:70:dc:d6:92:dd:be:b0:
68:80:2d:f5:e0:7c:53:ca:e3:52:27:dd:73:3b:45:ab:c6:53:
86:83:ed:50:c5:1b:f3:52:ab:cb:b9:2c:6e:c4:4f:5a:c3:8e:
58:33:e9:d6:b4:13:57:61:b6:90:84:b7:ce:09:b4:da:19:49:
55:ce:89:67:4f:0e:90:be:39:18:15:48:15:8b:f2:02:51:1f:
7c:18:dd:8d:0e:70:74:6b:fe:73:78:39:38:2e:bb:8f:aa:a0:
97:7f:6d:7d:b1:0d:21:d6:fb:0f:fc:91:41:97:3b:94:98:b8:
ca:52:43:56:fa:d5:af:85:c3:c6:cb:2d:f4:c6:bb:85:84:42:
66:87:5a:35:44:b8:95:72:dd:a0:66:d0:c9:8e:19:41:15:c3:
75:fe:bc:d7:48:78:41:db:0b:f2:ac:7d:2b:dd:22:1e:45:87:
f5:f3:3f:67:86:42:1c:46:bc:b7:9a:9b:df:a7:38:10:29:df:
04:11:42:9a:d1:42:a3:b3:c2:70:fa:2e:b4:8b:ed:26:a9:aa:
47:5e:ea:4a:ba:3b:fd:af:f2:29:52:a6:6f:6a:45:66:fe:f8:
4e:78:10:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lhc6TUhZvX+2ViAc5sMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz
Mjc3ZTgwHhcNMjYwMzI5MDYwMDM3WhcNMjYwMzMwMDYwMDM3WjAzMTEwLwYDVQQD
EyhmZjI1M2FkYzU0MTk2ZWI2MDgwZTg2MDE2YTc5NmQ4YWRmZTgyOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBpKTYSmOUZ0dyxeMm4UlgwOk+qq
CsW330dutca6qHzoM7Ytr93B+1SWazenD7cqB+4NXeLsdmgIk1uP7TjJaV726Hb0
0MelN3rGbLd1qOK03U1lTww79ru3H8atwstmNz0srQuKL0etC6x3cCvGJWl218ab
4eI7U8WrT9Qmy4c1qNpqZSNqaGKd2u3FvBSfs5YMtyoiEvlhZAx0SETTr8rsJus6
HYvmQieGuITlPBHRl6oRoSg6ly0B8S/y3TLIzAsL9bHKUjdIReasDWc0usLe8tuv
jgWYaCToOotrpxM0UaAmp+8V7HfONtF+r9AMUR3DgKZVYiBqlog/prt+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8lOtxUGW62CA6GAWp5bYrf6CjWMB8GA1UdIwQY
MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt
N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3
LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYRMcdq7
e6RSnHh14hP0K9ZndaBD+dVQ1ad49NJw3NaS3b6waIAt9eB8U8rjUifdcztFq8ZT
hoPtUMUb81Kry7ksbsRPWsOOWDPp1rQTV2G2kIS3zgm02hlJVc6JZ08OkL45GBVI
FYvyAlEffBjdjQ5wdGv+c3g5OC67j6qgl39tfbENIdb7D/yRQZc7lJi4ylJDVvrV
r4XDxsst9Ma7hYRCZodaNUS4lXLdoGbQyY4ZQRXDdf6810h4QdsL8qx9K90iHkWH
9fM/Z4ZCHEa8t5qb36c4ECnfBBFCmtFCo7PCcPoutIvtJqmqR17qSro7/a/yKVKm
b2pFZv74TngQaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:32 2026 by rpki-client