Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
File: KVOjAEuiCvndrUp77X-is3odwY8.mft (raw, json)
Hash identifier: +QaIcWLMi3VpElA3LPAioop7hMtu4S/XOVItenmEl1I=
Subject key identifier: B6:CF:B4:60:DD:22:50:D2:C4:FF:20:43:05:FD:E3:F0:A2:36:CB:A9
Authority key identifier: 29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
Certificate issuer: /CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Certificate serial: 019D3909FCCB817C34DCA87804C4619565CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: KVOjAEuiCvndrUp77X-is3odwY8.crl (hash: Ovg4zrx7F1XdU/SaTxpkv/rZl8NIRV1ifXr9A07wcCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fc:cb:81:7c:34:dc:a8:78:04:c4:61:95:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=b6cfb460dd2250d2c4ff204305fde3f0a236cba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:b6:93:2f:62:ce:35:8f:f6:5b:0f:d4:a5:
f9:54:bb:04:53:77:bd:90:f4:ba:bc:0c:6d:e1:50:
84:b7:4c:78:47:9f:a3:62:f1:c8:3b:2e:01:8d:2d:
c1:7f:ee:32:ba:82:5d:52:4d:aa:10:81:5b:4f:ab:
31:e4:fe:ed:fa:7b:47:95:ee:3f:5b:9a:d7:3f:85:
2f:43:3f:31:db:f7:4f:15:27:50:3b:11:f0:19:b1:
19:23:55:f7:e6:61:83:28:77:f9:74:25:16:52:dc:
4d:a5:58:d2:df:05:11:64:ec:8d:f3:ff:96:63:da:
8c:e1:a0:d2:2b:3e:10:45:4b:69:57:76:81:ba:89:
47:3d:5c:38:ad:bb:ac:af:19:a3:d8:a0:f2:2b:36:
b0:fc:31:dd:a5:13:67:0e:16:c8:84:5c:0b:74:e6:
03:6b:c5:b5:e3:67:f5:47:e9:b5:2e:f1:2f:a2:56:
f6:94:c4:f6:fd:d1:b9:16:d5:b4:18:f0:77:8a:30:
f5:49:ce:ed:05:16:9a:dd:11:9f:6d:59:66:86:c6:
17:90:ba:3e:a7:f1:fa:7c:bd:db:e8:6f:9e:23:11:
6f:02:a9:a8:0d:78:28:83:c4:5d:a3:78:d2:d6:5f:
f4:09:8a:7c:12:ed:fd:fe:56:b1:78:db:a4:ec:35:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:B4:60:DD:22:50:D2:C4:FF:20:43:05:FD:E3:F0:A2:36:CB:A9
X509v3 Authority Key Identifier:
keyid:29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:36:3d:80:01:23:dc:0c:9d:db:7f:1f:14:81:79:d8:c8:60:
1e:f2:fa:8e:6a:93:1c:74:fb:15:6d:e9:00:6d:85:82:22:10:
9d:94:08:ed:af:76:a2:5d:71:01:cf:ed:2b:82:a8:bd:19:05:
34:53:fb:50:1e:b2:89:bb:a5:56:db:98:9a:0d:94:42:cc:6e:
4b:e1:ec:8f:55:a0:3f:0f:6e:79:9a:6b:16:b0:c3:72:76:0e:
fa:2a:6e:9f:e5:a8:e8:a9:71:83:73:2b:d3:ff:9e:66:12:9a:
a1:d2:a7:d4:b1:e5:72:ba:42:f3:b6:f2:69:ad:82:3a:c2:c9:
23:ab:3f:7f:48:48:3e:bc:e5:70:09:9b:83:d0:06:b5:c0:45:
f7:c2:10:44:35:7e:b6:3b:65:38:76:1b:01:ba:15:8d:c8:ec:
88:6a:a3:3c:5e:48:f9:9e:02:48:f5:fd:52:e5:3c:58:ac:cf:
75:83:c1:41:df:a5:c3:01:5b:29:38:5f:66:23:52:ad:54:75:
a1:72:31:8e:e9:0a:a8:7e:31:4f:ab:d4:b9:20:cb:6c:97:9c:
b0:5c:f9:fa:e1:8f:fa:96:f0:c5:c0:1c:9e:b1:2d:6b:79:21:
5f:92:89:75:dc:74:b7:16:1a:29:1e:dd:20:87:7d:fa:c1:27:
82:fa:5e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CfzLgXw03Kh4BMRhlWXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTNhMzAwNGJhMjBhZjlkZGFkNGE3YmVkN2ZhMmIzN2Ex
ZGMxOGYwHhcNMjYwMzI5MTAwMDQ4WhcNMjYwMzMwMTAwMDQ4WjAzMTEwLwYDVQQD
EyhiNmNmYjQ2MGRkMjI1MGQyYzRmZjIwNDMwNWZkZTNmMGEyMzZjYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ii2ky9izjWP9lsP1KX5VLsEU3e9
kPS6vAxt4VCEt0x4R5+jYvHIOy4BjS3Bf+4yuoJdUk2qEIFbT6sx5P7t+ntHle4/
W5rXP4UvQz8x2/dPFSdQOxHwGbEZI1X35mGDKHf5dCUWUtxNpVjS3wURZOyN8/+W
Y9qM4aDSKz4QRUtpV3aBuolHPVw4rbusrxmj2KDyKzaw/DHdpRNnDhbIhFwLdOYD
a8W142f1R+m1LvEvolb2lMT2/dG5FtW0GPB3ijD1Sc7tBRaa3RGfbVlmhsYXkLo+
p/H6fL3b6G+eIxFvAqmoDXgog8Rdo3jS1l/0CYp8Eu39/laxeNuk7DUqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbPtGDdIlDSxP8gQwX94/CiNsupMB8GA1UdIwQY
MBaAFClTowBLogr53a1Ke+1/orN6HcGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zM2FiYTMtOWFiNy00OTkxLTg5YzYt
YjdkYmI2ZTk4ZWQ5LzEvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zM2FiYTMtOWFiNy00OTkxLTg5YzYtYjdkYmI2ZTk4ZWQ5
LzEvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0DY9gAEj
3Ayd238fFIF52MhgHvL6jmqTHHT7FW3pAG2FgiIQnZQI7a92ol1xAc/tK4KovRkF
NFP7UB6yibulVtuYmg2UQsxuS+Hsj1WgPw9ueZprFrDDcnYO+ipun+Wo6Klxg3Mr
0/+eZhKaodKn1LHlcrpC87byaa2COsLJI6s/f0hIPrzlcAmbg9AGtcBF98IQRDV+
tjtlOHYbAboVjcjsiGqjPF5I+Z4CSPX9UuU8WKzPdYPBQd+lwwFbKThfZiNSrVR1
oXIxjukKqH4xT6vUuSDLbJecsFz5+uGP+pbwxcAcnrEta3khX5KJddx0txYaKR7d
IId9+sEngvpe7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:22 2026 by rpki-client