Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: YE9bhehjVd0ZzTAvgKVEkNqSQWCMN5/U8Rdn4H3/TuE=
Subject key identifier: AB:9D:8B:73:84:B0:AA:56:F2:95:E4:0A:99:01:91:91:48:33:43:AF
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019D382E075F3E4566822CB77E82DF00AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: 9V5KRHXr/3T7y6XB/jp1FP0D6rNpBq4nY0YBcgwHjhw=)
2: 6hlJWxyEpxR7SfyI5qQ520W_2-o.asa (hash: /oGoZit8RwZPSMub5y9BmBC9g7SLP5Z7yGn6lO2+qts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:07:5f:3e:45:66:82:2c:b7:7e:82:df:00:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=ab9d8b7384b0aa56f295e40a99019191483343af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:13:0f:60:60:43:1e:da:66:9c:00:1b:22:
0b:ec:0f:a7:c5:d9:14:32:cf:4c:d1:7d:54:0e:e9:
c8:fa:b6:48:a6:32:66:89:de:a9:d0:39:64:52:d7:
87:fc:a6:00:cc:91:a1:9a:f7:cf:5d:0a:42:ca:30:
31:d8:6a:e1:b0:04:44:d5:c9:83:30:e0:b7:87:fc:
d4:63:16:ec:a7:b3:1e:11:8d:14:d5:a3:9f:2c:70:
7c:85:91:03:84:63:21:22:75:53:bc:1a:ec:3d:8d:
cf:db:3f:2d:dd:dc:ff:94:ec:74:0a:6a:b5:75:8e:
ea:3f:dd:20:72:c2:44:3a:43:e8:5c:18:7a:24:15:
c7:b7:ac:5c:40:0d:02:12:66:b9:a4:96:81:35:09:
dc:7c:6d:a1:32:dc:21:4f:fc:82:88:7f:1c:9a:86:
49:d8:80:b9:7b:41:82:70:9a:ed:22:02:96:0c:1e:
d5:f0:92:69:8c:ff:f9:54:5c:27:43:fc:c3:5b:bd:
4c:b3:cb:59:4c:ec:62:4f:ae:79:8e:c4:cd:65:02:
9e:20:58:ff:74:3c:f9:5e:c2:de:96:49:de:03:d9:
66:0b:37:f0:8a:cc:95:28:e3:f1:48:85:8c:f2:68:
1a:4f:b9:13:03:7b:f6:28:f3:32:fe:25:d1:04:00:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:8B:73:84:B0:AA:56:F2:95:E4:0A:99:01:91:91:48:33:43:AF
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c4:88:ef:ab:2c:1f:10:5d:60:70:bb:90:09:8d:dc:bd:52:
ac:95:7b:ae:4f:e5:1d:b2:5d:b4:ec:19:35:48:03:7e:f8:90:
33:34:8e:ad:c1:06:ec:fa:bc:2a:73:c3:15:d6:88:98:f2:19:
3a:12:5c:a2:76:24:f2:93:0d:5d:9b:77:dc:8d:b8:80:14:de:
8c:e0:43:03:cc:cf:09:8a:f3:cb:65:9a:a4:6c:7e:c5:4a:75:
ab:fa:7e:c5:07:94:91:e6:8c:b9:25:c0:23:4c:e3:f3:a1:2b:
1b:a3:3d:ae:c3:03:57:40:d1:53:52:da:46:f9:fc:44:10:29:
d3:b4:c7:1d:04:a1:f3:80:8c:74:36:30:80:b4:e0:98:a4:d5:
ba:28:da:16:3c:e9:4a:26:e1:e9:c7:da:93:57:3b:85:7b:e1:
db:46:2e:f3:f5:53:bc:66:7d:3a:7d:31:5f:1a:32:18:30:51:
ce:36:01:c2:47:09:84:7e:9e:41:cc:26:7b:3a:c3:7d:f2:eb:
3d:ac:f3:c1:09:2d:30:3b:ce:01:49:c4:b2:9c:95:b7:48:a7:
af:25:d0:df:07:e0:fa:c3:4c:45:0f:6d:af:99:5a:bc:a0:69:
1c:f9:c3:da:55:64:f0:12:b5:63:18:d6:be:aa:b4:4c:05:21:
45:bc:ca:bc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ04LgdfPkVmgiy3foLfAK1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwMzI5MDYwMDMzWhcNMjYwMzMwMDYwMDMzWjAzMTEwLwYDVQQD
EyhhYjlkOGI3Mzg0YjBhYTU2ZjI5NWU0MGE5OTAxOTE5MTQ4MzM0M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY4TD2BgQx7aZpwAGyIL7A+nxdkU
Ms9M0X1UDunI+rZIpjJmid6p0DlkUteH/KYAzJGhmvfPXQpCyjAx2GrhsARE1cmD
MOC3h/zUYxbsp7MeEY0U1aOfLHB8hZEDhGMhInVTvBrsPY3P2z8t3dz/lOx0Cmq1
dY7qP90gcsJEOkPoXBh6JBXHt6xcQA0CEma5pJaBNQncfG2hMtwhT/yCiH8cmoZJ
2IC5e0GCcJrtIgKWDB7V8JJpjP/5VFwnQ/zDW71Ms8tZTOxiT655jsTNZQKeIFj/
dDz5XsLelkneA9lmCzfwisyVKOPxSIWM8mgaT7kTA3v2KPMy/iXRBAAzZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKudi3OEsKpW8pXkCpkBkZFIM0OvMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2Y0OWQ4NC00YTFjLTQwZmQtYmFhNi1jODYxNWE1NDBj
ZGQvMS8xLWtaVnFpbkxUSU9VZjEtbXhvOEV3amtMVVNJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcSI
76ssHxBdYHC7kAmN3L1SrJV7rk/lHbJdtOwZNUgDfviQMzSOrcEG7Pq8KnPDFdaI
mPIZOhJconYk8pMNXZt33I24gBTejOBDA8zPCYrzy2WapGx+xUp1q/p+xQeUkeaM
uSXAI0zj86ErG6M9rsMDV0DRU1LaRvn8RBAp07THHQSh84CMdDYwgLTgmKTVuija
FjzpSibh6cfak1c7hXvh20Yu8/VTvGZ9On0xXxoyGDBRzjYBwkcJhH6eQcwmezrD
ffLrPazzwQktMDvOAUnEspyVt0inryXQ3wfg+sNMRQ9tr5lavKBpHPnD2lVk8BK1
YxjWvqq0TAUhRbzKvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:00 2026 by rpki-client