Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: HURKn8s7RK5B2nr7ROC7M6AgbAYRadr2HkehntFaZFs=
Subject key identifier: FF:E3:40:B4:CE:26:B6:5E:74:AD:68:E4:09:6E:92:91:ED:A7:07:EE
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019D37896CBE9642D27A8BAAC36E7177116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: B7
Signing time: Sun 29 Mar 2026 03:00:46 +0000
Manifest this update: Sun 29 Mar 2026 03:00:46 +0000
Manifest next update: Mon 30 Mar 2026 03:00:46 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: Dq2AdZnFspBckAPHA6Tm6d2LJLqOeGC1px5VSRWJ5/8=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6c:be:96:42:d2:7a:8b:aa:c3:6e:71:77:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Mar 29 03:00:46 2026 GMT
Not After : Mar 30 03:00:46 2026 GMT
Subject: CN=ffe340b4ce26b65e74ad68e4096e9291eda707ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:c7:34:2a:14:86:10:8e:7b:70:df:10:59:
ca:ce:5e:c0:d2:c1:9c:df:a0:38:48:e8:3a:d2:be:
5a:77:01:82:ea:86:90:85:a9:ee:58:8a:74:38:ed:
1f:64:a1:2d:7e:27:37:3c:e8:e5:cf:f1:c5:95:bc:
08:ed:2d:ea:8d:1d:f2:d2:13:4f:df:a3:5e:cb:95:
ab:81:32:47:6b:5f:67:7e:0f:1d:9c:4d:65:66:2e:
86:77:3f:bf:99:7c:68:66:6a:5d:95:a8:6f:b4:ea:
4a:e8:46:d9:bc:dd:8f:11:fe:cf:c7:8b:52:f1:ff:
a2:26:c0:ce:c5:fc:6d:b0:99:ab:13:a7:c4:9e:ef:
4a:ba:de:1e:73:a1:84:53:d4:68:ff:05:f0:9e:03:
62:74:24:4c:49:8d:e3:44:6a:57:a8:75:4a:19:cf:
67:ea:13:58:11:3f:34:dd:bf:c9:c3:27:ef:10:62:
8e:99:77:e3:fc:9e:98:23:e2:fa:34:a0:6a:d0:53:
9e:93:ed:ce:69:23:f3:e2:9b:19:0c:7d:4f:7c:87:
c1:95:b2:d3:66:30:27:43:62:4a:db:25:a5:17:f8:
57:ac:0c:d0:8d:01:4f:c3:95:37:15:4c:3d:45:3d:
3e:90:ba:c8:58:24:d1:f8:2f:f8:e2:af:17:5e:d8:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:40:B4:CE:26:B6:5E:74:AD:68:E4:09:6E:92:91:ED:A7:07:EE
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:81:3a:10:a8:f2:3d:4f:3e:21:57:9f:86:eb:4a:40:50:cd:
09:f8:cd:28:ef:97:2d:05:17:85:00:d7:b2:06:39:dc:91:0e:
96:51:10:aa:61:5a:1c:2a:9e:c9:a2:59:72:d1:c9:27:a4:b2:
a4:6b:0c:c7:dd:ee:cb:00:15:3e:16:40:6e:6a:f6:26:18:d2:
f5:b8:1c:78:c0:9e:6b:0d:80:56:d8:e1:e3:0c:5b:09:43:04:
c5:87:ea:d2:81:96:da:01:6b:73:ac:f4:8c:5c:1c:a6:11:77:
74:83:c8:05:69:50:31:c1:82:de:73:31:0e:d9:ac:0d:11:10:
2a:a5:e4:ea:0c:fa:db:99:ea:08:9a:1d:e1:f6:4f:db:11:92:
09:b3:66:eb:45:29:5a:f1:a8:56:42:a4:91:ec:1f:03:8f:e1:
4e:1f:3a:e9:4a:ad:de:a7:17:72:c4:75:d2:af:d7:6e:8c:a8:
5a:30:1b:62:78:74:3b:f4:c4:e7:76:22:94:d2:8d:92:9b:da:
98:71:6b:a3:81:8c:90:7d:f6:c5:94:e1:a8:a3:03:61:46:67:
78:4e:1c:c0:1d:6f:5c:3b:e4:8d:12:e2:2e:51:05:5a:9c:fd:
6a:bb:d4:b7:68:4e:2d:b6:ba:d6:01:02:bb:1d:04:09:ec:5c:
15:61:d8:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWy+lkLSeouqw25xdxFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTg4ZTQ2NjAwOTUyMDU2MjA2MWJlZjY1YjdmNDgyOTgy
ODk4NjUwHhcNMjYwMzI5MDMwMDQ2WhcNMjYwMzMwMDMwMDQ2WjAzMTEwLwYDVQQD
EyhmZmUzNDBiNGNlMjZiNjVlNzRhZDY4ZTQwOTZlOTI5MWVkYTcwN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGfHNCoUhhCOe3DfEFnKzl7A0sGc
36A4SOg60r5adwGC6oaQhanuWIp0OO0fZKEtfic3POjlz/HFlbwI7S3qjR3y0hNP
36Ney5WrgTJHa19nfg8dnE1lZi6Gdz+/mXxoZmpdlahvtOpK6EbZvN2PEf7Px4tS
8f+iJsDOxfxtsJmrE6fEnu9Kut4ec6GEU9Ro/wXwngNidCRMSY3jRGpXqHVKGc9n
6hNYET803b/JwyfvEGKOmXfj/J6YI+L6NKBq0FOek+3OaSPz4psZDH1PfIfBlbLT
ZjAnQ2JK2yWlF/hXrAzQjQFPw5U3FUw9RT0+kLrIWCTR+C/44q8XXtiQIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/jQLTOJrZedK1o5AlukpHtpwfuMB8GA1UdIwQY
MBaAFCtYjkZgCVIFYgYb72W39IKYKJhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2Zjgt
Y2NhZmI4MjQ3M2E1LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2ZjgtY2NhZmI4MjQ3M2E1
LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoE6EKjy
PU8+IVefhutKQFDNCfjNKO+XLQUXhQDXsgY53JEOllEQqmFaHCqeyaJZctHJJ6Sy
pGsMx93uywAVPhZAbmr2JhjS9bgceMCeaw2AVtjh4wxbCUMExYfq0oGW2gFrc6z0
jFwcphF3dIPIBWlQMcGC3nMxDtmsDREQKqXk6gz625nqCJod4fZP2xGSCbNm60Up
WvGoVkKkkewfA4/hTh866Uqt3qcXcsR10q/XboyoWjAbYnh0O/TE53YilNKNkpva
mHFro4GMkH32xZThqKMDYUZneE4cwB1vXDvkjRLiLlEFWpz9arvUt2hOLba61gEC
ux0ECexcFWHYJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:28 2026 by rpki-client