Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: 9ReL87BPKEMSIcpHD4KDxYSq+9j3hKzRwzSFB1ZGCKU=
Subject key identifier: 2D:54:C8:09:75:DD:DA:A1:22:4D:B7:53:CB:7F:D3:4B:C9:21:65:16
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019D37890A473EC123ADD9717ADFBF262D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: BPKeV8tKOwchATi9GRAWp6tW1DkB3H4z7GXbtkrifig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0a:47:3e:c1:23:ad:d9:71:7a:df:bf:26:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=2d54c80975dddaa1224db753cb7fd34bc9216516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:1c:f1:85:29:f3:03:8d:b3:93:00:a0:0c:
8b:e3:02:c1:75:a0:22:14:96:1d:cc:19:d2:b0:2e:
0c:f8:93:3f:31:eb:97:b0:ff:a0:d5:c3:b8:08:2c:
3d:69:be:58:91:27:60:fa:fa:8b:f6:6e:00:88:e6:
36:2f:34:df:4a:f9:dd:a0:e3:3d:0b:d3:08:af:39:
59:e7:5f:1e:a8:33:b3:9e:bb:2f:f4:05:19:34:3f:
9b:9b:e6:c9:50:01:f0:74:2b:fd:34:2a:47:88:95:
1a:e0:b9:ac:10:53:2f:55:bb:ae:8a:b5:f2:a6:6c:
64:c8:b2:38:fa:d8:67:7b:fa:30:b6:ef:e5:77:b1:
50:60:c0:64:37:45:16:ae:d4:a5:43:3d:89:4d:fe:
cc:7d:8c:2b:d8:89:eb:5e:a0:0a:aa:b6:4b:57:7b:
f3:57:b6:10:78:8a:27:ec:7d:dc:a4:7f:d3:c7:47:
13:02:f7:aa:c6:29:cb:74:e2:59:e4:b4:8c:55:84:
17:e1:92:e2:0e:24:39:3e:dd:6e:31:80:81:29:4c:
c3:35:15:da:9b:1c:10:a0:2c:ca:2d:2d:e4:c8:5f:
cb:1e:f3:62:fc:c3:b4:fd:f3:48:ba:9a:a5:58:31:
8e:df:d6:1d:0f:26:96:ae:b4:cd:54:d4:38:8d:3d:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:C8:09:75:DD:DA:A1:22:4D:B7:53:CB:7F:D3:4B:C9:21:65:16
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:73:38:a5:be:d3:ad:f5:c3:ca:50:bf:bd:00:8e:b1:0e:
5d:24:25:e6:1b:e2:30:f8:92:07:a0:e6:87:17:ec:86:c0:ef:
f0:82:b0:05:af:0c:47:4a:e0:90:c1:59:c7:92:9c:a3:48:f1:
e8:eb:7f:56:50:87:c5:83:5d:88:2d:39:01:68:e8:70:11:3c:
a9:0e:3d:39:f6:d8:16:fc:a8:85:a1:42:74:97:4a:83:ee:b7:
ae:b5:8c:4e:5a:20:1f:ce:1e:fa:f3:cd:70:7d:52:fb:76:76:
d8:c3:39:33:6a:ce:f2:5b:ae:d6:cd:13:59:1c:f2:74:86:c6:
e6:fb:23:7c:c2:da:08:99:ac:cd:9f:3d:d3:5c:7b:4d:ab:a6:
a6:5d:27:85:40:f2:5e:56:d9:95:1d:4d:2c:8a:3a:81:1e:61:
22:6f:9f:9d:26:92:b0:dd:25:2e:ea:9e:76:d5:91:b3:b4:c9:
4a:07:2d:d7:bb:dd:74:6a:85:af:0b:9f:1c:9d:8e:02:4b:60:
72:60:17:c8:ce:a0:bf:3e:36:1a:95:73:3e:d8:6c:42:4d:c3:
7e:5f:81:be:54:5e:fe:f3:94:a0:6b:1b:2c:d9:f9:c4:f7:7a:
e7:e9:d4:d7:7f:98:28:b9:19:47:a1:64:cb:2b:9b:0f:d0:78:
48:ef:79:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQpHPsEjrdlxet+/Ji0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk
OTY3MDgwHhcNMjYwMzI5MDMwMDIxWhcNMjYwMzMwMDMwMDIxWjAzMTEwLwYDVQQD
EygyZDU0YzgwOTc1ZGRkYWExMjI0ZGI3NTNjYjdmZDM0YmM5MjE2NTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ic8YUp8wONs5MAoAyL4wLBdaAi
FJYdzBnSsC4M+JM/MeuXsP+g1cO4CCw9ab5YkSdg+vqL9m4AiOY2LzTfSvndoOM9
C9MIrzlZ518eqDOznrsv9AUZND+bm+bJUAHwdCv9NCpHiJUa4LmsEFMvVbuuirXy
pmxkyLI4+thne/owtu/ld7FQYMBkN0UWrtSlQz2JTf7MfYwr2InrXqAKqrZLV3vz
V7YQeIon7H3cpH/Tx0cTAveqxinLdOJZ5LSMVYQX4ZLiDiQ5Pt1uMYCBKUzDNRXa
mxwQoCzKLS3kyF/LHvNi/MO0/fNIupqlWDGO39YdDyaWrrTNVNQ4jT0EuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1UyAl13dqhIk23U8t/00vJIWUWMB8GA1UdIwQY
MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It
ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj
LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDxzOKW+
0631w8pQv70AjrEOXSQl5hviMPiSB6DmhxfshsDv8IKwBa8MR0rgkMFZx5Kco0jx
6Ot/VlCHxYNdiC05AWjocBE8qQ49OfbYFvyohaFCdJdKg+63rrWMTlogH84e+vPN
cH1S+3Z22MM5M2rO8luu1s0TWRzydIbG5vsjfMLaCJmszZ8901x7Taumpl0nhUDy
XlbZlR1NLIo6gR5hIm+fnSaSsN0lLuqedtWRs7TJSgct17vddGqFrwufHJ2OAktg
cmAXyM6gvz42GpVzPthsQk3Dfl+BvlRe/vOUoGsbLNn5xPd65+nU13+YKLkZR6Fk
yyubD9B4SO95IA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:28 2026 by rpki-client