Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: bMoHMXhYBOoMdEl7YNpVTRW9Ot4wJq5hhJU3oW2EOqM=
Subject key identifier: BF:4C:97:4C:B8:68:A3:91:16:E8:41:C8:D9:4F:BC:6E:7B:B1:05:15
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019D382E0D484F806E2C809460199DB32140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: yuyfNxi7OmQ+++uvLh+19CGOWIbRdmGihiVnEUXPqE8=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:48:4f:80:6e:2c:80:94:60:19:9d:b3:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=bf4c974cb868a39116e841c8d94fbc6e7bb10515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:30:96:f4:19:50:85:78:61:a4:8e:1c:66:
6c:b5:f3:5d:ea:6e:b2:c7:c8:4b:00:ab:5f:7a:c9:
45:57:fb:1d:f6:f6:be:4b:a1:1b:91:71:3b:4d:24:
2e:a3:89:08:da:bf:cb:55:1f:b6:4f:8f:8f:91:03:
4c:ef:3d:76:5d:ca:eb:d4:2a:84:3c:d9:41:99:5a:
a7:c1:35:01:ea:b0:eb:77:01:8a:d8:c1:34:00:dd:
83:8b:7c:0f:63:d3:f8:21:44:73:e6:07:c7:f8:e2:
e7:cc:2f:41:70:dd:7f:54:2c:d5:d3:c5:8a:cc:59:
3b:d9:53:c3:89:20:bc:77:5c:ac:dd:1c:76:a9:73:
fc:b0:a5:c2:c1:b6:2c:dc:6d:8f:58:4a:74:f8:ec:
e8:f0:db:de:b8:77:d1:e6:cd:f7:87:c3:7b:1b:aa:
89:c1:6f:49:2b:5a:01:3f:18:b9:79:e2:02:46:3a:
1b:79:2b:8e:57:e0:68:43:65:17:e2:12:9f:e0:0a:
ee:ef:9f:5b:32:7f:ac:51:48:83:60:91:a2:d3:a2:
03:ac:33:d0:51:26:e1:20:0d:63:92:77:22:11:7a:
6a:c3:e3:ee:e2:c4:47:b5:cd:4e:7c:1f:8a:96:d9:
fc:bd:02:75:dd:3f:50:64:bd:ae:c7:de:6f:4e:ab:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:97:4C:B8:68:A3:91:16:E8:41:C8:D9:4F:BC:6E:7B:B1:05:15
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:60:20:9c:83:10:92:bb:df:ab:82:a0:ef:b3:eb:90:ef:
fb:c3:96:e8:ae:9c:f8:28:cb:64:b8:22:65:0f:b3:bb:99:74:
94:33:24:b7:ec:0e:ea:3e:8e:84:2e:89:ad:2b:9b:d5:3f:de:
82:0c:63:1b:7b:54:0e:46:b2:6b:ff:18:c2:e2:7c:2d:c4:7e:
b8:28:a9:b3:da:f2:4f:c3:5c:28:2f:c5:a1:49:66:66:e4:62:
b9:0e:f7:fe:22:92:ff:51:11:d7:de:aa:15:ba:d8:2a:e6:2a:
c6:40:ae:b6:51:41:9e:d7:28:77:89:f4:eb:b5:57:ee:5b:21:
ef:84:a5:a7:91:65:06:99:32:4d:01:85:5b:1f:e4:43:65:be:
a9:6d:5c:9d:7c:d9:4e:6b:7b:e3:af:b8:82:3e:01:72:a8:f9:
3c:ab:36:46:f3:53:ed:09:6a:e5:5a:26:52:73:50:ec:48:5e:
64:d5:cf:48:df:3a:c1:8e:a3:d2:56:62:c9:ee:93:18:0d:9c:
6c:1a:17:ef:54:32:72:1b:2c:da:37:a7:53:f7:29:cb:17:28:
12:71:09:d7:50:b7:4e:3c:01:fd:ce:e7:6e:55:fb:90:ee:c7:
31:07:c2:23:85:5f:6c:b4:db:8a:a9:21:dd:fd:f1:32:f3:1f:
ea:5a:91:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lg1IT4BuLICUYBmdsyFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjYwMzI5MDYwMDM1WhcNMjYwMzMwMDYwMDM1WjAzMTEwLwYDVQQD
EyhiZjRjOTc0Y2I4NjhhMzkxMTZlODQxYzhkOTRmYmM2ZTdiYjEwNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CowlvQZUIV4YaSOHGZstfNd6m6y
x8hLAKtfeslFV/sd9va+S6EbkXE7TSQuo4kI2r/LVR+2T4+PkQNM7z12Xcrr1CqE
PNlBmVqnwTUB6rDrdwGK2ME0AN2Di3wPY9P4IURz5gfH+OLnzC9BcN1/VCzV08WK
zFk72VPDiSC8d1ys3Rx2qXP8sKXCwbYs3G2PWEp0+Ozo8NveuHfR5s33h8N7G6qJ
wW9JK1oBPxi5eeICRjobeSuOV+BoQ2UX4hKf4Aru759bMn+sUUiDYJGi06IDrDPQ
USbhIA1jknciEXpqw+Pu4sRHtc1OfB+Kltn8vQJ13T9QZL2ux95vTqsZEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9Ml0y4aKORFuhByNlPvG57sQUVMB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz5gIJyD
EJK736uCoO+z65Dv+8OW6K6c+CjLZLgiZQ+zu5l0lDMkt+wO6j6OhC6JrSub1T/e
ggxjG3tUDkaya/8YwuJ8LcR+uCips9ryT8NcKC/FoUlmZuRiuQ73/iKS/1ER196q
FbrYKuYqxkCutlFBntcod4n067VX7lsh74Slp5FlBpkyTQGFWx/kQ2W+qW1cnXzZ
Tmt746+4gj4Bcqj5PKs2RvNT7Qlq5VomUnNQ7EheZNXPSN86wY6j0lZiye6TGA2c
bBoX71Qychss2jenU/cpyxcoEnEJ11C3TjwB/c7nblX7kO7HMQfCI4VfbLTbiqkh
3f3xMvMf6lqRxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:44 2026 by rpki-client