
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: R1QfrNDGmYUY5bgRv2y14TJK4WtC26RQj7obU0UdbB4=
Subject key identifier: 22:BB:FE:00:E4:BC:30:E3:4E:99:AA:16:6B:75:BA:2D:01:13:D9:4C
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 01A181BD8255F9E04F01F8510B0DF4DDC319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 09:00:42 +0000
Manifest this update: Wed 28 Oct 2026 09:00:42 +0000
Manifest next update: Thu 29 Oct 2026 09:00:42 +0000
Files and hashes: 1: 6ZaDzWHDJYly-tvowxGIafrceIw.asa (hash: Am7TblfvT7puFE6LzT+FtyBAQj9IYqPzB4oZ+KLZ5sc=)
2: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
3: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
4: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: f2yMfLKrVfF268INIUDpM60Z7rI72YKOrGgU1Tw270U=)
5: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
6: sP5WS9FRLVsxQFgovAf32a49yZo.asa (hash: 7uST8zyWZMAGHxwgmZEWm2cmw2815Pu1MDUzN3A6CrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:82:55:f9:e0:4f:01:f8:51:0b:0d:f4:dd:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Oct 28 09:00:42 2026 GMT
Not After : Oct 29 09:00:42 2026 GMT
Subject: CN=22bbfe00e4bc30e34e99aa166b75ba2d0113d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:19:28:fd:86:1a:59:d9:eb:da:ef:1a:46:
39:f9:cd:7e:98:55:82:b2:0e:80:c2:42:c7:0f:53:
32:55:1e:84:01:4f:e9:0f:cf:c2:71:2c:85:cc:9b:
33:b8:3b:8d:1c:22:f6:68:a6:10:a4:91:2b:9a:52:
1e:30:03:50:12:70:6e:3e:57:8c:6d:86:2b:b1:40:
44:65:81:2e:83:3c:fe:8b:75:67:a8:07:c0:ca:3e:
45:bc:fe:3f:9f:66:07:d1:28:72:30:62:de:ac:80:
15:d6:0d:80:64:8b:a5:1f:8a:33:2b:ff:e2:66:b2:
f7:5f:9f:0a:5c:39:66:90:de:6c:88:49:d0:71:a2:
1e:3b:9c:d0:66:6d:4f:e6:24:f1:23:3b:94:e4:a5:
66:1e:2d:28:8c:eb:4c:f1:d4:cd:a3:64:ed:90:49:
bc:a6:ed:2e:b0:26:af:7e:39:5b:9c:23:a4:bd:c0:
dd:82:43:96:c7:65:86:bd:e6:cc:a3:da:11:30:85:
59:dd:39:9c:6c:70:d0:ca:16:da:87:1c:52:a4:bc:
ce:6b:f1:e0:17:29:90:da:9f:ca:85:8f:7b:91:7d:
e0:e0:d6:83:40:6a:35:07:8d:19:a1:8b:01:de:f0:
0d:13:a3:7f:62:67:e7:0e:4a:88:34:bf:e8:37:d1:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:FE:00:E4:BC:30:E3:4E:99:AA:16:6B:75:BA:2D:01:13:D9:4C
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:4c:36:ca:06:a6:a6:d9:4b:a4:97:36:03:c9:d2:a3:f9:
64:07:ea:0b:f7:a9:f7:4b:c9:44:e0:68:0e:fd:32:4e:7e:5a:
1b:40:48:93:32:9a:07:2a:6b:e3:fd:3c:a1:06:3f:da:b6:70:
d2:fc:0c:2f:d1:6a:a4:b5:ce:6d:d2:7d:da:5d:cd:cd:03:47:
9d:cf:52:99:e3:29:b2:e3:19:81:e5:1f:d5:19:53:cf:24:e6:
ed:5d:b5:c2:36:08:22:7e:9e:6e:96:be:b4:b0:d7:3b:e7:e7:
3a:a9:8b:96:fc:5e:2e:fd:53:3b:52:4b:3a:b7:03:85:0f:0e:
6d:9c:33:f0:28:a7:cf:9f:68:c1:cb:2b:ff:12:04:45:df:e2:
fa:01:59:09:92:68:09:e2:4f:33:37:21:e4:42:a6:f3:1c:d8:
f8:d1:03:a6:df:2c:43:66:1c:69:9c:30:5d:6f:60:86:7d:5d:
62:b7:d5:c3:5e:99:8c:7e:0c:36:11:88:d8:ee:66:e7:be:26:
f1:88:4e:2e:7c:3c:95:cc:98:e1:36:23:21:dc:c0:b2:fb:ab:
92:ee:f4:f0:4b:80:fd:a1:7f:8c:68:49:80:57:e2:d8:da:7e:
29:d9:a6:ba:09:b6:b4:ed:0a:bc:77:f7:0d:52:99:87:37:56:
2e:b1:3b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvYJV+eBPAfhRCw303cMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2JkNGRlZTk0MDA5OTE3ODRhMjJmYjRmNDJiMmE3MmU1
ZTMwZjIwHhcNMjYxMDI4MDkwMDQyWhcNMjYxMDI5MDkwMDQyWjAzMTEwLwYDVQQD
EygyMmJiZmUwMGU0YmMzMGUzNGU5OWFhMTY2Yjc1YmEyZDAxMTNkOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO4ZKP2GGlnZ69rvGkY5+c1+mFWC
sg6AwkLHD1MyVR6EAU/pD8/CcSyFzJszuDuNHCL2aKYQpJErmlIeMANQEnBuPleM
bYYrsUBEZYEugzz+i3VnqAfAyj5FvP4/n2YH0ShyMGLerIAV1g2AZIulH4ozK//i
ZrL3X58KXDlmkN5siEnQcaIeO5zQZm1P5iTxIzuU5KVmHi0ojOtM8dTNo2TtkEm8
pu0usCavfjlbnCOkvcDdgkOWx2WGvebMo9oRMIVZ3TmcbHDQyhbahxxSpLzOa/Hg
FymQ2p/KhY97kX3g4NaDQGo1B40ZoYsB3vANE6N/YmfnDkqINL/oN9HjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK7/gDkvDDjTpmqFmt1ui0BE9lMMB8GA1UdIwQY
MBaAFJHL1N7pQAmReEoi+09CsqcuXjDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N2VTN1bEFDWkY0U2lMN1QwS3lweTVlTVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt
MjNjMzM4NjgwNzcxLzEva2N2VTN1bEFDWkY0U2lMN1QwS3lweTVlTVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx
LzEva2N2VTN1bEFDWkY0U2lMN1QwS3lweTVlTVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2lMNsoG
pqbZS6SXNgPJ0qP5ZAfqC/ep90vJROBoDv0yTn5aG0BIkzKaBypr4/08oQY/2rZw
0vwML9FqpLXObdJ92l3NzQNHnc9SmeMpsuMZgeUf1RlTzyTm7V21wjYIIn6ebpa+
tLDXO+fnOqmLlvxeLv1TO1JLOrcDhQ8ObZwz8Cinz59owcsr/xIERd/i+gFZCZJo
CeJPMzch5EKm8xzY+NEDpt8sQ2YcaZwwXW9ghn1dYrfVw16ZjH4MNhGI2O5m574m
8YhOLnw8lcyY4TYjIdzAsvurku708EuA/aF/jGhJgFfi2Np+Kdmmugm2tO0KvHf3
DVKZhzdWLrE7aQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:40 2026 by rpki-client