Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: ZXhxUaUj7NKr8sbIJ90MvrCoEgUtQpMG3u+lNh/XruM=
Subject key identifier: 41:BA:43:8A:98:6F:3C:07:9A:89:43:26:3D:62:50:45:6D:8B:FC:F4
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 019CC9081E764991BA0B8D73F6EBC913BBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 185C
Signing time: Sat 07 Mar 2026 16:01:18 +0000
Manifest this update: Sat 07 Mar 2026 16:01:18 +0000
Manifest next update: Sun 08 Mar 2026 16:01:18 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: k9U1OWsRMKSguIKFkLHL+bOktQMldErY6/KkbP9CufU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:08:1e:76:49:91:ba:0b:8d:73:f6:eb:c9:13:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Mar 7 16:01:18 2026 GMT
Not After : Mar 8 16:01:18 2026 GMT
Subject: CN=41ba438a986f3c079a8943263d6250456d8bfcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:a2:20:41:34:e1:d4:58:d2:4a:da:bc:15:
00:6e:79:fe:ae:66:38:b4:59:86:f4:de:8b:4d:59:
1b:a0:3b:18:bd:81:05:57:12:ad:9e:a1:87:9b:35:
b3:d0:80:a0:b4:2b:e7:a5:7c:48:91:1f:9c:f5:f6:
e4:a8:fa:66:e7:47:ed:ef:e9:c7:0c:7f:67:e5:0b:
de:76:42:f1:8a:a7:fa:8d:f8:f7:ef:0e:2e:79:bd:
eb:47:6d:2d:91:b9:7b:3c:37:c4:3d:82:43:8b:d5:
62:c2:4d:ab:75:08:e9:c9:78:03:32:33:7e:88:50:
ae:aa:2e:4b:c9:3a:a9:e7:62:f8:9f:0b:16:20:64:
04:13:c8:dc:a7:5e:84:e7:48:d9:3f:f6:ad:85:72:
d2:33:35:5c:87:86:ca:43:9e:f7:9e:b1:21:73:f7:
58:9d:bb:1c:63:c5:a8:8c:44:81:17:46:74:8f:da:
2d:d6:a7:76:af:d7:8f:0a:89:49:c5:16:1b:5d:6c:
09:88:b5:47:3e:59:be:98:24:24:e7:c0:56:7d:0c:
04:4e:eb:9c:1b:70:56:14:be:dd:43:4f:18:02:fe:
6f:80:dd:88:a2:a5:d4:a9:f9:87:33:57:c0:67:3b:
79:ca:5f:85:a2:ea:d2:c4:d8:71:2d:a3:d5:f2:15:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:43:8A:98:6F:3C:07:9A:89:43:26:3D:62:50:45:6D:8B:FC:F4
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:4c:c6:9e:58:94:d6:28:43:51:c0:34:c6:b6:ce:c1:53:
23:69:1b:0b:90:af:d3:21:96:b8:6a:2b:fe:a3:d4:9f:16:f1:
59:76:5f:3a:5a:af:fd:e0:89:56:1e:00:93:85:49:4f:c4:0d:
08:4a:a5:06:1a:83:17:f7:80:43:b9:99:8e:96:05:d5:b3:70:
90:88:ca:34:3d:f4:3a:7c:11:85:c2:7c:66:e1:bd:3f:46:ff:
d9:1f:bc:0a:62:8c:64:8e:7d:5b:6a:1d:13:fe:5e:69:14:d8:
33:ce:70:ef:d1:b9:c9:39:ae:d8:8c:92:ec:57:25:32:ac:24:
5f:33:0d:e8:52:b0:a9:5b:f9:4b:52:2f:a2:66:bf:4b:e2:8c:
2a:d4:ce:b7:bb:18:29:9e:00:99:a4:85:99:52:cf:ae:e0:46:
66:04:d7:9a:6f:63:82:22:a6:39:be:6c:44:32:90:11:ed:ce:
d2:c7:fd:f2:95:d8:54:7f:d3:57:3e:8f:7c:81:32:83:de:f7:
5c:a3:d0:e2:4f:74:72:f9:a5:9b:75:94:a4:2e:91:5e:8b:52:
2d:06:bc:8e:75:a5:3a:31:b4:bc:13:fd:0c:dd:24:c3:4e:49:
72:44:c0:98:6b:a0:2f:b4:f9:56:89:dc:10:ca:b8:67:9e:0a:
16:57:09:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJCB52SZG6C41z9uvJE7u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjYwMzA3MTYwMTE4WhcNMjYwMzA4MTYwMTE4WjAzMTEwLwYDVQQD
Eyg0MWJhNDM4YTk4NmYzYzA3OWE4OTQzMjYzZDYyNTA0NTZkOGJmY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuSiIEE04dRY0kravBUAbnn+rmY4
tFmG9N6LTVkboDsYvYEFVxKtnqGHmzWz0ICgtCvnpXxIkR+c9fbkqPpm50ft7+nH
DH9n5QvedkLxiqf6jfj37w4ueb3rR20tkbl7PDfEPYJDi9Viwk2rdQjpyXgDMjN+
iFCuqi5LyTqp52L4nwsWIGQEE8jcp16E50jZP/athXLSMzVch4bKQ573nrEhc/dY
nbscY8WojESBF0Z0j9ot1qd2r9ePColJxRYbXWwJiLVHPlm+mCQk58BWfQwETuuc
G3BWFL7dQ08YAv5vgN2IoqXUqfmHM1fAZzt5yl+FourSxNhxLaPV8hVrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG6Q4qYbzwHmolDJj1iUEVti/z0MB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFFMxp5Y
lNYoQ1HANMa2zsFTI2kbC5Cv0yGWuGor/qPUnxbxWXZfOlqv/eCJVh4Ak4VJT8QN
CEqlBhqDF/eAQ7mZjpYF1bNwkIjKND30OnwRhcJ8ZuG9P0b/2R+8CmKMZI59W2od
E/5eaRTYM85w79G5yTmu2IyS7FclMqwkXzMN6FKwqVv5S1Ivoma/S+KMKtTOt7sY
KZ4AmaSFmVLPruBGZgTXmm9jgiKmOb5sRDKQEe3O0sf98pXYVH/TVz6PfIEyg973
XKPQ4k90cvmlm3WUpC6RXotSLQa8jnWlOjG0vBP9DN0kw05JckTAmGugL7T5Vonc
EMq4Z54KFlcJ0A==
-----END CERTIFICATE-----
Generated at Sat Mar 7 20:49:45 2026 by rpki-client