Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: BsQabHPfv9M0gxleooUarUOUvaUTIdCq21Dy0SYynDQ=
Subject key identifier: BE:9B:3B:EC:0D:B4:3C:D6:94:22:0E:C5:12:74:89:E5:DE:EB:CB:D0
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 019D386557AAA76C58607DF2BAA301498D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 05BE
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: ZsmPA0Lu3Kps5FsUgg50Z0gdWHqL7B0svtqpUMH3ovM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:57:aa:a7:6c:58:60:7d:f2:ba:a3:01:49:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=be9b3bec0db43cd694220ec5127489e5deebcbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:e9:96:7f:47:7c:34:fc:96:7f:ee:df:e6:
25:24:16:c9:6c:32:21:e4:ac:dd:ef:db:1c:72:da:
82:f9:dc:56:a3:e3:a9:62:c0:40:e2:a9:28:40:2e:
da:b5:8a:a1:fe:76:cb:76:01:ef:02:92:ff:87:70:
5d:c1:c4:26:56:9a:ad:54:20:31:3c:c2:4f:b5:11:
63:a6:ee:cf:3c:cb:2a:41:da:0b:16:28:ca:bb:52:
79:0b:fb:c7:03:c5:9f:34:0a:1b:6e:37:9d:3d:ff:
40:53:44:cc:87:a3:06:a9:bd:3d:68:37:18:b0:f7:
75:3f:3f:21:b0:95:29:38:f1:1e:94:3f:31:8b:36:
b9:70:2f:b2:82:03:16:31:9f:c2:3d:cb:ed:83:00:
f5:e9:64:14:45:e4:f9:7e:04:ac:27:a3:c1:1c:ed:
dd:14:07:6f:5e:1f:91:80:97:1f:d2:b3:e4:f3:eb:
38:e0:f6:90:91:59:f2:ca:d6:9f:e3:98:31:1e:3b:
0e:08:c3:01:b3:11:46:82:ad:88:cd:90:22:42:c8:
88:16:72:29:19:3e:6b:81:d0:77:0c:da:3f:12:14:
78:d6:03:70:46:f5:ba:9c:09:14:85:97:de:5b:86:
e8:db:de:24:86:9b:7f:e2:9d:bf:a2:f5:af:62:48:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:3B:EC:0D:B4:3C:D6:94:22:0E:C5:12:74:89:E5:DE:EB:CB:D0
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:80:39:39:2a:27:99:62:58:cd:b6:ae:67:aa:cc:01:90:
6a:50:91:33:ea:90:fb:4d:18:9e:86:e4:1a:43:cf:b8:06:e1:
4e:4b:4f:8f:b4:39:2a:e2:72:e2:93:7d:30:2d:00:47:e3:2b:
a4:1f:f0:65:7f:90:3f:22:bf:9a:4f:37:8d:6d:cc:83:18:fa:
6e:a1:49:5f:c9:f4:e9:1f:88:fc:9c:6f:c4:a5:b0:f0:30:ef:
31:eb:04:22:1d:62:ca:a3:13:eb:3c:ac:ba:13:26:ff:be:91:
a1:1f:58:27:16:01:ad:e3:85:53:f2:90:8b:c8:f1:72:1d:58:
59:73:6a:42:5c:03:c2:9b:0d:37:11:f7:cb:53:8c:54:25:5a:
d3:a2:c1:12:03:ab:b3:5e:65:fd:88:d7:19:93:bf:b9:bd:ea:
40:a2:7b:59:a9:67:f9:6b:7b:38:ba:58:d7:45:f6:a6:5b:6e:
4d:25:ba:4e:6c:c3:2b:4e:f4:7f:fc:8c:2f:f4:40:4f:49:fe:
6c:09:b7:af:17:28:43:a4:c5:55:76:d3:f8:1d:9e:e7:05:60:
9c:f7:cb:71:74:62:e5:c1:44:3d:4c:ff:b4:16:e6:01:6b:9c:
fa:86:70:83:4b:01:96:b3:dd:72:ac:d1:64:56:57:55:30:e5:
80:02:8c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVeqp2xYYH3yuqMBSY03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj
NjQzODcwHhcNMjYwMzI5MDcwMDU4WhcNMjYwMzMwMDcwMDU4WjAzMTEwLwYDVQQD
EyhiZTliM2JlYzBkYjQzY2Q2OTQyMjBlYzUxMjc0ODllNWRlZWJjYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tjpln9HfDT8ln/u3+YlJBbJbDIh
5Kzd79scctqC+dxWo+OpYsBA4qkoQC7atYqh/nbLdgHvApL/h3BdwcQmVpqtVCAx
PMJPtRFjpu7PPMsqQdoLFijKu1J5C/vHA8WfNAobbjedPf9AU0TMh6MGqb09aDcY
sPd1Pz8hsJUpOPEelD8xiza5cC+yggMWMZ/CPcvtgwD16WQUReT5fgSsJ6PBHO3d
FAdvXh+RgJcf0rPk8+s44PaQkVnyytaf45gxHjsOCMMBsxFGgq2IzZAiQsiIFnIp
GT5rgdB3DNo/EhR41gNwRvW6nAkUhZfeW4bo294khpt/4p2/ovWvYkjybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6bO+wNtDzWlCIOxRJ0ieXe68vQMB8GA1UdIwQY
MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt
NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1
LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3KAOTkq
J5liWM22rmeqzAGQalCRM+qQ+00YnobkGkPPuAbhTktPj7Q5KuJy4pN9MC0AR+Mr
pB/wZX+QPyK/mk83jW3Mgxj6bqFJX8n06R+I/JxvxKWw8DDvMesEIh1iyqMT6zys
uhMm/76RoR9YJxYBreOFU/KQi8jxch1YWXNqQlwDwpsNNxH3y1OMVCVa06LBEgOr
s15l/YjXGZO/ub3qQKJ7Waln+Wt7OLpY10X2pltuTSW6TmzDK070f/yML/RAT0n+
bAm3rxcoQ6TFVXbT+B2e5wVgnPfLcXRi5cFEPUz/tBbmAWuc+oZwg0sBlrPdcqzR
ZFZXVTDlgAKMXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:15 2026 by rpki-client