Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: ULvR+rE4Q03aKqKgSmLtB7bFWy1HZMRe8CZwSDSGazA=
Subject key identifier: FF:0A:88:B6:E3:EC:CB:31:EB:91:01:06:BA:15:33:FD:6F:8D:E6:18
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 019CE4B55EBF817D58B2906754B80648B8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0B61
Signing time: Fri 13 Mar 2026 01:00:17 +0000
Manifest this update: Fri 13 Mar 2026 01:00:17 +0000
Manifest next update: Sat 14 Mar 2026 01:00:17 +0000
Files and hashes: 1: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (hash: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: OvHQzJvP8ifvL0692JDNQxzx9iH92hm2cORohUlbWV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:5e:bf:81:7d:58:b2:90:67:54:b8:06:48:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Mar 13 01:00:17 2026 GMT
Not After : Mar 14 01:00:17 2026 GMT
Subject: CN=ff0a88b6e3eccb31eb910106ba1533fd6f8de618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:d0:a5:12:1e:1a:3a:8e:28:7a:69:cd:c3:
0e:3c:c6:5c:35:42:45:5e:aa:dc:9b:89:f6:4f:83:
f4:37:79:a1:f8:8d:c7:37:d9:18:dc:e3:7e:30:c7:
eb:a8:75:96:0a:57:2a:14:f7:b4:db:e1:2d:e8:15:
be:54:87:75:11:e1:29:2c:32:b3:11:4a:6f:d7:0a:
55:01:ba:48:c3:50:f4:f3:34:f0:a2:73:d0:3a:dc:
ea:f5:fc:37:98:61:c9:76:7c:32:70:03:52:0d:f6:
58:21:18:b8:ac:ed:ab:eb:32:51:6d:e5:cb:95:44:
6c:5a:06:2b:1a:12:28:bf:f8:5e:0f:d5:dd:49:3b:
9f:2b:46:a0:26:ea:49:18:63:18:a4:80:c9:bd:ff:
67:5e:5f:3c:ec:79:a6:43:7e:bc:b9:9d:e6:9a:3d:
6a:bf:5d:a5:4e:b9:23:62:76:b5:b0:f5:19:35:21:
6a:d7:9b:80:8a:01:3f:c3:b8:5e:64:9b:43:b7:88:
36:6d:f4:f3:4d:66:8a:13:a2:48:b1:9e:47:d0:f8:
2b:e1:17:ec:7a:83:4e:52:ce:68:51:24:4f:1f:23:
cc:53:e6:cd:a2:c4:50:55:e0:d6:c7:67:fa:d8:7e:
20:b3:b5:d9:06:be:b2:e9:17:c9:fb:d9:31:58:78:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:88:B6:E3:EC:CB:31:EB:91:01:06:BA:15:33:FD:6F:8D:E6:18
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:58:1f:2f:21:91:7d:b3:f1:7c:2e:a7:75:d9:a2:39:13:
5f:d6:34:57:10:04:7f:72:02:be:b0:ed:de:e7:3b:5d:5a:77:
69:1a:21:0c:80:98:0d:16:3c:ba:00:27:7c:77:e0:2d:8c:dd:
35:e0:72:a9:e1:26:be:4c:04:05:4a:89:df:75:71:cd:e8:f9:
56:de:b8:7a:0f:cb:ec:56:2c:58:df:d5:00:6c:ec:ee:cc:cc:
e3:f9:3b:3e:fb:f1:11:73:ec:6b:6f:07:03:7a:f5:de:26:c3:
d0:8b:c0:bc:3a:34:e9:a4:a2:85:7a:95:79:e5:2e:29:e0:51:
b8:ff:3d:0c:e0:e0:90:e4:a2:fa:73:3b:1b:9d:cb:91:96:f7:
16:84:70:2d:88:8f:05:a0:cf:2c:d2:0b:c7:02:eb:38:b2:72:
8e:98:53:80:1d:91:d1:cd:f5:3d:b3:17:97:a8:a4:e2:3e:4e:
24:11:6f:c5:76:e6:1e:36:be:9e:66:3b:81:6b:d9:d3:f5:af:
ce:a8:3f:31:8f:50:f3:2c:69:50:15:fe:c3:ac:0f:6a:26:2d:
cc:b2:23:52:a9:f0:08:fd:e9:de:6e:a2:df:98:bf:49:30:96:
00:68:aa:15:8e:27:0c:0f:c9:cd:dd:dc:c1:4f:f3:8c:1e:33:
ec:e5:18:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktV6/gX1YspBnVLgGSLjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjYwMzEzMDEwMDE3WhcNMjYwMzE0MDEwMDE3WjAzMTEwLwYDVQQD
EyhmZjBhODhiNmUzZWNjYjMxZWI5MTAxMDZiYTE1MzNmZDZmOGRlNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY3QpRIeGjqOKHppzcMOPMZcNUJF
Xqrcm4n2T4P0N3mh+I3HN9kY3ON+MMfrqHWWClcqFPe02+Et6BW+VId1EeEpLDKz
EUpv1wpVAbpIw1D08zTwonPQOtzq9fw3mGHJdnwycANSDfZYIRi4rO2r6zJRbeXL
lURsWgYrGhIov/heD9XdSTufK0agJupJGGMYpIDJvf9nXl887HmmQ368uZ3mmj1q
v12lTrkjYna1sPUZNSFq15uAigE/w7heZJtDt4g2bfTzTWaKE6JIsZ5H0Pgr4Rfs
eoNOUs5oUSRPHyPMU+bNosRQVeDWx2f62H4gs7XZBr6y6RfJ+9kxWHg0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8KiLbj7Msx65EBBroVM/1vjeYYMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATidYHy8h
kX2z8Xwup3XZojkTX9Y0VxAEf3ICvrDt3uc7XVp3aRohDICYDRY8ugAnfHfgLYzd
NeByqeEmvkwEBUqJ33Vxzej5Vt64eg/L7FYsWN/VAGzs7szM4/k7PvvxEXPsa28H
A3r13ibD0IvAvDo06aSihXqVeeUuKeBRuP89DODgkOSi+nM7G53LkZb3FoRwLYiP
BaDPLNILxwLrOLJyjphTgB2R0c31PbMXl6ik4j5OJBFvxXbmHja+nmY7gWvZ0/Wv
zqg/MY9Q8yxpUBX+w6wPaiYtzLIjUqnwCP3p3m6i35i/STCWAGiqFY4nDA/Jzd3c
wU/zjB4z7OUYOw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:18:14 2026 by rpki-client