Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: xnOTbgaL98dwq5Um8htEfIMhrFWBEdrqHHoyLltpsbA=
Subject key identifier: 37:8E:91:2A:16:FD:F6:71:AE:9E:EB:F5:FC:AC:6F:B9:48:8B:9A:BF
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019D390A18F897917E65E1A4FBCE9A9EA3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: wEU+hloXpHptXmz4/QRgzWL9u5VryidCp4bd/Hqn0ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:18:f8:97:91:7e:65:e1:a4:fb:ce:9a:9e:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=378e912a16fdf671ae9eebf5fcac6fb9488b9abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:ef:5f:5d:ed:5b:d4:c4:c5:32:34:71:a8:
eb:e8:e7:3b:e6:38:f8:8e:f0:75:81:50:c3:86:6a:
33:64:08:81:e9:b7:42:d7:3e:88:71:2f:8e:37:f0:
70:cf:c5:b5:19:8c:b0:24:27:5b:d0:a4:c0:5f:ac:
d9:c6:7c:21:db:8e:91:d1:c0:e4:bc:85:35:1e:bd:
e6:33:98:53:98:ab:84:96:e2:54:a5:fa:ee:1f:03:
16:67:6f:f8:19:d0:a1:44:02:32:5f:a1:b4:2d:e4:
09:76:3a:56:ed:c7:85:3d:9c:cf:b8:ad:6b:64:72:
a7:49:08:a7:53:2a:bc:3c:5e:d3:bb:bc:0c:b2:11:
87:e9:9a:42:24:64:1d:b9:d0:69:1e:54:30:c7:6b:
5e:e6:fd:8b:81:8a:83:f2:9c:05:68:10:4b:c6:b9:
e7:e0:88:49:68:f3:4a:b3:42:79:96:ac:c1:3a:de:
d0:f2:1a:64:91:d0:58:d8:13:75:f4:12:93:5e:bc:
e1:ba:1d:91:e3:89:f2:97:99:a4:a4:c6:bc:b3:a8:
32:08:88:4b:30:9d:8e:4a:35:c0:9d:21:c9:93:23:
49:9a:24:52:f6:24:dd:3a:67:b6:80:ea:b4:05:48:
78:34:9d:20:8c:bd:0c:1c:43:36:32:40:3f:e0:f5:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:91:2A:16:FD:F6:71:AE:9E:EB:F5:FC:AC:6F:B9:48:8B:9A:BF
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:92:52:e4:38:72:68:b5:92:f6:25:87:89:6b:c8:b0:21:
e2:7f:71:0b:e0:0a:85:78:f7:e6:4f:2a:ae:5a:fb:4f:c3:87:
b0:10:4a:22:aa:fa:d5:98:68:74:37:7e:02:a0:06:d3:e7:9c:
1a:72:ce:f3:70:ed:90:13:70:44:ee:8f:89:66:41:2d:a9:9a:
4f:2e:fa:a0:f9:12:af:0a:cd:1e:ea:b9:10:6e:87:40:14:a4:
49:98:27:e0:c2:c1:66:96:0f:7b:73:52:76:b5:8c:9e:08:25:
58:97:16:6a:de:7b:a6:a1:ae:c0:18:7c:ef:b6:b7:1e:81:93:
70:7e:16:b5:93:25:b9:09:de:29:6d:d6:ee:aa:7f:8d:4d:0d:
a5:b7:9c:cd:e2:37:af:2d:4c:34:09:97:df:08:f3:18:f7:c1:
6d:df:38:c1:6b:a8:fe:ba:48:aa:b9:da:c1:c5:64:e3:99:dd:
46:b3:61:5f:8b:2d:e6:f8:82:aa:93:be:5c:5b:c6:af:04:ba:
94:8b:14:e9:f9:20:41:b2:8a:77:75:94:93:0e:8d:36:f7:02:
f5:d9:e7:8a:df:f9:d7:ed:a0:9f:14:b4:54:2d:4e:15:b1:61:
d1:fe:0b:f6:be:09:9a:bd:a4:ed:01:1d:e4:bb:b1:c7:95:0f:
e5:c2:3e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Chj4l5F+ZeGk+86anqPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNjY2RlODVjNDBiMTU0ZjkxOWJhZjY0ZWYwMzJlYzcw
ZDc1MWUwHhcNMjYwMzI5MTAwMDU2WhcNMjYwMzMwMTAwMDU2WjAzMTEwLwYDVQQD
EygzNzhlOTEyYTE2ZmRmNjcxYWU5ZWViZjVmY2FjNmZiOTQ4OGI5YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLrvX13tW9TExTI0cajr6Oc75jj4
jvB1gVDDhmozZAiB6bdC1z6IcS+ON/Bwz8W1GYywJCdb0KTAX6zZxnwh246R0cDk
vIU1Hr3mM5hTmKuEluJUpfruHwMWZ2/4GdChRAIyX6G0LeQJdjpW7ceFPZzPuK1r
ZHKnSQinUyq8PF7Tu7wMshGH6ZpCJGQdudBpHlQwx2te5v2LgYqD8pwFaBBLxrnn
4IhJaPNKs0J5lqzBOt7Q8hpkkdBY2BN19BKTXrzhuh2R44nyl5mkpMa8s6gyCIhL
MJ2OSjXAnSHJkyNJmiRS9iTdOme2gOq0BUh4NJ0gjL0MHEM2MkA/4PX2LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeOkSoW/fZxrp7r9fysb7lIi5q/MB8GA1UdIwQY
MBaAFJPszN6FxAsVT5Gbr2TvAy7HDXUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMt
MmMzMDI4ZmNlY2U5LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMtMmMzMDI4ZmNlY2U5
LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuySUuQ4
cmi1kvYlh4lryLAh4n9xC+AKhXj35k8qrlr7T8OHsBBKIqr61ZhodDd+AqAG0+ec
GnLO83DtkBNwRO6PiWZBLamaTy76oPkSrwrNHuq5EG6HQBSkSZgn4MLBZpYPe3NS
drWMngglWJcWat57pqGuwBh877a3HoGTcH4WtZMluQneKW3W7qp/jU0NpbeczeI3
ry1MNAmX3wjzGPfBbd84wWuo/rpIqrnawcVk45ndRrNhX4st5viCqpO+XFvGrwS6
lIsU6fkgQbKKd3WUkw6NNvcC9dnnit/51+2gnxS0VC1OFbFh0f4L9r4Jmr2k7QEd
5Luxx5UP5cI+mw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:17 2026 by rpki-client