Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: oBX3d9qt7+rOdXe06Oq27rPqQ8/ZFQ8iC0aZkwuqUqI=
Subject key identifier: CB:DC:10:73:7D:FB:BC:C9:04:72:99:6E:9C:49:0B:25:1C:85:FC:5D
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019D3909B7366A9FE80A2377C52DF8E3BADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: 3_teHZlqiyJL6OCe3l3tQgUazuw.roa (hash: LTM6e0OE0QUFBKrZfsSmWI5JalOFaXi6PGkxoB/+ybc=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: leSkWrvcNqlnDv32a4xQZ8EoNsrPWYRTVF6BCBpt93U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b7:36:6a:9f:e8:0a:23:77:c5:2d:f8:e3:ba:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=cbdc10737dfbbcc90472996e9c490b251c85fc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:4d:cc:aa:93:52:9e:ff:b3:fa:d3:d7:a0:
06:b3:aa:74:bf:bd:b8:8c:7c:af:6d:a3:24:11:02:
76:08:b9:04:2a:95:a9:82:11:9e:6d:d4:e0:30:ba:
02:b9:44:48:65:2c:60:59:15:31:bc:35:1e:57:fe:
a5:21:f3:5f:f5:fc:2f:5e:69:15:73:1a:3f:5f:59:
98:40:ff:f7:4e:78:3b:c1:d5:d5:24:79:11:46:f0:
71:3d:62:db:b3:75:70:d0:2f:b8:2f:c6:e4:6c:bc:
dd:99:f2:31:2b:6d:bd:f9:13:43:14:58:b8:d2:4a:
58:09:e8:e8:f1:44:da:9e:7f:74:f9:d8:17:1c:ec:
c4:dc:4e:a7:bd:0c:8e:bd:34:5e:ed:28:7d:3b:ab:
69:c0:d0:75:b7:e6:1c:77:5a:ae:13:02:9a:34:6e:
27:90:f4:d3:b8:b0:80:dd:1d:22:d4:e7:6b:65:c1:
b9:06:18:1c:43:9d:cc:bc:e2:af:d8:d1:0b:01:07:
0d:86:4c:95:7e:1a:c6:c3:77:8c:23:63:3a:d4:89:
29:d0:ba:7f:03:38:2f:e9:2a:b7:f5:26:2e:3e:90:
0a:3b:c6:44:2f:b2:70:6d:f1:a2:a8:e6:29:75:cc:
19:78:b1:a7:14:c5:63:16:50:67:58:18:23:f6:58:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:10:73:7D:FB:BC:C9:04:72:99:6E:9C:49:0B:25:1C:85:FC:5D
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:e6:8e:df:cd:b6:55:86:7e:07:41:a0:20:b1:d0:82:6f:
90:da:bb:79:a6:8f:e6:a8:76:a4:95:03:e5:82:05:b6:56:65:
f1:6a:19:7b:98:3f:5d:4a:80:1a:38:04:b4:9c:e1:58:68:60:
1e:98:71:5c:ef:e7:82:24:d5:80:bd:c5:44:48:cc:dd:f9:12:
d1:aa:56:35:df:22:51:b4:fc:41:e0:bb:a2:47:d7:15:30:c9:
dc:51:46:a7:ba:9e:ff:f3:31:85:17:d2:de:88:77:c9:84:cc:
10:de:75:d4:09:3e:ff:d7:e1:fc:52:44:df:3f:9a:a3:f9:06:
7f:2b:9c:02:ea:54:b3:a2:0b:26:d1:3f:fd:57:0e:76:c0:3a:
7c:c7:92:df:b5:c7:bd:77:57:02:cc:90:4c:8d:8f:78:02:50:
3c:e5:40:fc:19:34:62:6e:3c:59:03:1f:a4:85:5a:fd:87:f5:
e5:44:f9:b7:31:2d:af:8b:ea:10:e3:cc:d5:50:dd:cf:ae:49:
5d:1c:72:53:93:bd:dd:a2:e6:18:1a:fe:db:25:59:f0:72:a9:
a3:e1:c6:9e:47:5d:73:06:5e:e4:a7:98:cc:1a:8a:a0:95:4c:
9f:b8:81:29:c1:18:c7:52:c5:48:7b:de:cd:40:8d:d6:dd:c8:
dd:5b:90:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cbc2ap/oCiN3xS3447rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTZkY2JmNzhjNjJkNTFkYTkwNzZhMGQwNmFkYWQzNmVl
M2I3NTUwHhcNMjYwMzI5MTAwMDMxWhcNMjYwMzMwMTAwMDMxWjAzMTEwLwYDVQQD
EyhjYmRjMTA3MzdkZmJiY2M5MDQ3Mjk5NmU5YzQ5MGIyNTFjODVmYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2xNzKqTUp7/s/rT16AGs6p0v724
jHyvbaMkEQJ2CLkEKpWpghGebdTgMLoCuURIZSxgWRUxvDUeV/6lIfNf9fwvXmkV
cxo/X1mYQP/3Tng7wdXVJHkRRvBxPWLbs3Vw0C+4L8bkbLzdmfIxK229+RNDFFi4
0kpYCejo8UTann90+dgXHOzE3E6nvQyOvTRe7Sh9O6tpwNB1t+Ycd1quEwKaNG4n
kPTTuLCA3R0i1OdrZcG5BhgcQ53MvOKv2NELAQcNhkyVfhrGw3eMI2M61Ikp0Lp/
Azgv6Sq39SYuPpAKO8ZEL7JwbfGiqOYpdcwZeLGnFMVjFlBnWBgj9lhWowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvcEHN9+7zJBHKZbpxJCyUchfxdMB8GA1UdIwQY
MBaAFJEW3L94xi1R2pB2oNBq2tNu47dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUt
N2ZjNDlkYTUzZDEzLzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUtN2ZjNDlkYTUzZDEz
LzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpjmjt/N
tlWGfgdBoCCx0IJvkNq7eaaP5qh2pJUD5YIFtlZl8WoZe5g/XUqAGjgEtJzhWGhg
HphxXO/ngiTVgL3FREjM3fkS0apWNd8iUbT8QeC7okfXFTDJ3FFGp7qe//MxhRfS
3oh3yYTMEN511Ak+/9fh/FJE3z+ao/kGfyucAupUs6ILJtE//VcOdsA6fMeS37XH
vXdXAsyQTI2PeAJQPOVA/Bk0Ym48WQMfpIVa/Yf15UT5tzEtr4vqEOPM1VDdz65J
XRxyU5O93aLmGBr+2yVZ8HKpo+HGnkddcwZe5KeYzBqKoJVMn7iBKcEYx1LFSHve
zUCN1t3I3VuQbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:29 2026 by rpki-client