Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: hYNMUfDTFFR3qtTa/dlWOTuTV7ibJjrtGEd5a0toCG0=
Subject key identifier: 8D:9C:67:7E:FF:4C:5D:6D:67:5C:BC:CA:B8:05:B5:05:2A:B3:CA:33
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 019D39411EF6E2BBDE31D90F2D28FF82DE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: 030C
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: 8665JKGg1rX6wiwI6cwpsvi9RUF6f4LeGa2vA7EtpxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1e:f6:e2:bb:de:31:d9:0f:2d:28:ff:82:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=8d9c677eff4c5d6d675cbccab805b5052ab3ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:95:a4:71:41:44:0d:61:cb:a2:35:fd:3f:
40:20:9b:3b:71:d0:58:32:d2:bd:f4:ab:da:10:56:
9e:3e:51:e4:e9:3d:c3:b0:9f:38:40:b1:5f:06:fa:
5a:39:7c:be:94:26:36:c0:0c:bb:4d:61:8e:85:81:
0f:57:61:ad:41:b7:85:40:19:87:c6:39:a2:00:ff:
dd:85:12:e6:bc:e0:74:a2:2a:71:4e:e9:1c:8f:80:
4f:0e:2c:ad:fe:02:d8:0e:ba:6c:8b:45:a4:27:56:
63:3d:90:49:de:0d:6f:3c:33:4b:64:b0:de:75:0f:
19:07:d2:ec:2f:73:2f:d1:45:2a:ff:7c:9d:75:74:
50:af:d6:56:86:02:df:38:e0:bf:e3:ba:5f:ec:60:
fb:2a:7c:8a:ee:7f:e5:29:e5:39:3f:a8:42:bc:a0:
69:3c:cb:a3:d9:bf:bd:a8:43:39:8a:eb:17:b8:70:
ba:13:3e:98:16:f3:e7:2c:ee:9c:fe:88:8a:08:b7:
d9:3c:2e:fd:dc:d2:3c:a9:ff:b0:73:7e:6b:22:c0:
4f:8e:bf:1e:ed:59:b7:a8:b1:88:5b:b2:a9:49:b2:
87:72:bc:5a:30:d9:4e:08:aa:99:fd:e0:2f:02:75:
be:25:27:84:a4:d9:c3:b5:67:8a:d9:77:10:b3:20:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:67:7E:FF:4C:5D:6D:67:5C:BC:CA:B8:05:B5:05:2A:B3:CA:33
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:27:3b:48:75:71:f8:65:cd:3e:14:28:5e:f3:f6:b5:e5:50:
5f:83:11:7f:8c:4e:16:c1:c9:5f:37:cd:24:78:e9:e3:f6:52:
69:21:40:9b:14:7d:47:93:02:cc:4c:a4:2b:46:19:4c:04:44:
9a:0f:7c:ca:d6:d4:be:14:9b:a8:a7:20:e8:fd:30:09:8f:c8:
d2:27:85:cf:d8:37:1a:76:3a:2f:ce:23:fe:c4:ea:51:77:d6:
c8:55:a5:38:12:91:7b:83:de:e9:b5:2c:f1:25:98:80:ed:65:
76:1b:1d:df:7c:b9:7a:da:91:02:75:64:b7:19:8d:bc:6e:2d:
ba:28:aa:ea:a9:0c:54:73:7a:8c:a2:63:01:05:cb:fb:2d:94:
66:41:6e:9b:02:ed:33:1a:1c:41:2b:43:38:82:b3:69:0c:db:
a2:b6:69:71:82:ea:d8:aa:1d:ef:ba:70:43:bf:eb:90:6b:e0:
46:12:4b:7f:28:56:50:ed:5e:6c:64:59:7e:55:03:42:38:f9:
47:85:63:ab:24:d8:4d:b8:b4:d0:91:79:02:c9:b8:52:8e:b7:
f7:37:2e:cd:f0:ad:b8:9f:e3:17:39:77:e6:13:f9:51:75:76:
d5:b9:76:df:61:40:af:cd:9a:e1:21:7f:93:c8:7b:29:95:01:
59:d9:8e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QR724rveMdkPLSj/gt5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzU3NWMxNjdlNjAzZTQ2ZGNkZTRhMDI3MWJiNWVkYjNi
M2ZkOTMwHhcNMjYwMzI5MTEwMTAyWhcNMjYwMzMwMTEwMTAyWjAzMTEwLwYDVQQD
Eyg4ZDljNjc3ZWZmNGM1ZDZkNjc1Y2JjY2FiODA1YjUwNTJhYjNjYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qVpHFBRA1hy6I1/T9AIJs7cdBY
MtK99KvaEFaePlHk6T3DsJ84QLFfBvpaOXy+lCY2wAy7TWGOhYEPV2GtQbeFQBmH
xjmiAP/dhRLmvOB0oipxTukcj4BPDiyt/gLYDrpsi0WkJ1ZjPZBJ3g1vPDNLZLDe
dQ8ZB9LsL3Mv0UUq/3yddXRQr9ZWhgLfOOC/47pf7GD7KnyK7n/lKeU5P6hCvKBp
PMuj2b+9qEM5iusXuHC6Ez6YFvPnLO6c/oiKCLfZPC793NI8qf+wc35rIsBPjr8e
7Vm3qLGIW7KpSbKHcrxaMNlOCKqZ/eAvAnW+JSeEpNnDtWeK2XcQsyCzCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2cZ37/TF1tZ1y8yrgFtQUqs8ozMB8GA1UdIwQY
MBaAFJLFdcFn5gPkbc3koCcbte2zs/2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDkt
NzdiMTVjNTllMzg3LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDktNzdiMTVjNTllMzg3
LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyc7SHVx
+GXNPhQoXvP2teVQX4MRf4xOFsHJXzfNJHjp4/ZSaSFAmxR9R5MCzEykK0YZTARE
mg98ytbUvhSbqKcg6P0wCY/I0ieFz9g3GnY6L84j/sTqUXfWyFWlOBKRe4Pe6bUs
8SWYgO1ldhsd33y5etqRAnVktxmNvG4tuiiq6qkMVHN6jKJjAQXL+y2UZkFumwLt
MxocQStDOIKzaQzborZpcYLq2Kod77pwQ7/rkGvgRhJLfyhWUO1ebGRZflUDQjj5
R4VjqyTYTbi00JF5Asm4Uo639zcuzfCtuJ/jFzl35hP5UXV21bl232FAr82a4SF/
k8h7KZUBWdmOUg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:40 2026 by rpki-client