Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: CdOh5e3myVaPb/om9dmW1yECStev3pScAXWc7v+ACqg=
Subject key identifier: 96:DC:0A:04:25:47:DD:8F:81:7C:4B:06:E8:72:89:BD:31:60:BD:EE
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 019D38658C7FECE5AA419BDAC07E939396E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: iJPWGbdt4CS2XBkdT8reXWimCxM4F0GMvXKdpblBUTo=)
2: uNbww_4X227rN9_mg3C05wsDyrM.roa (hash: SaALn4Jzzbpi+nDn2cyiq7RyWC5Gh9LXGatywgfKmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8c:7f:ec:e5:aa:41:9b:da:c0:7e:93:93:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=96dc0a042547dd8f817c4b06e87289bd3160bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:4b:06:98:82:53:3a:0d:10:ef:49:32:ee:
44:d2:46:fd:eb:21:66:8b:ca:d5:37:9b:5b:d7:27:
f8:d9:95:7d:fd:59:0c:62:d6:3c:34:ad:d3:96:b8:
34:3b:2b:f9:d6:e7:c1:9d:85:ef:26:f2:35:2c:ad:
af:ba:d6:f0:cc:e0:ea:5d:d8:25:75:18:04:e0:31:
ab:90:6a:ae:2e:5d:08:3f:1e:15:77:a2:53:bb:3b:
c8:cd:93:55:63:73:bf:ad:a5:e4:31:8f:ee:03:7f:
6a:22:3e:f9:a4:1c:2a:f6:ba:b6:bc:31:96:5b:4b:
1e:27:11:cf:46:d5:69:2c:48:92:21:36:31:4f:64:
c6:61:10:5d:94:02:cf:4f:04:08:89:de:b0:88:3d:
fa:0f:f6:09:23:bb:8d:78:28:a5:61:59:7d:6f:86:
b3:f2:91:12:2f:1e:23:b4:2c:70:85:e2:1a:5b:0c:
ac:5f:89:10:7c:3b:5f:cc:00:19:db:fa:c8:b6:48:
15:36:3c:67:59:70:e6:c3:4e:ad:81:c2:b1:d6:41:
9c:8b:ce:71:29:eb:d3:ac:0c:a2:67:17:e2:e6:23:
86:74:76:0f:4c:c3:c8:c9:cf:da:2b:f2:3c:e1:74:
4b:87:df:d7:5e:4b:53:1b:7f:b1:64:68:9e:5b:ea:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:0A:04:25:47:DD:8F:81:7C:4B:06:E8:72:89:BD:31:60:BD:EE
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:6a:0d:f1:0c:f1:10:5a:b9:14:97:eb:d3:e8:de:5d:0f:
a9:53:1b:c1:02:9c:ff:1f:de:21:07:9d:f6:f5:14:09:b5:b7:
2e:59:36:1e:af:0b:6e:70:94:50:cb:df:fb:56:e8:39:ad:57:
fc:18:8d:24:9b:72:ee:55:0b:96:a6:f4:9a:a5:54:a9:47:d3:
2c:70:7f:4b:4a:89:bb:28:3f:f0:42:bd:6f:76:b4:a0:42:cf:
5c:2c:0e:97:1a:f2:0d:5c:6d:9a:a8:a7:ab:c8:b6:f5:1e:1c:
17:a7:d0:34:dd:8c:f5:bf:7e:22:99:5c:1d:3d:4a:85:df:97:
14:9d:41:64:ed:95:a9:3e:1e:bb:46:b1:3a:7a:49:13:ba:0c:
2c:11:4e:fe:c1:30:aa:f9:81:72:a8:22:87:49:a2:f5:b0:20:
16:4b:74:36:a9:9a:97:81:92:4d:72:67:b9:f0:c9:e4:a0:a4:
16:f9:08:05:cb:ab:7e:ab:05:15:46:4c:79:43:02:d2:62:49:
fb:7c:7a:21:bc:57:91:2d:d0:0a:47:29:8b:20:18:f9:11:d5:
21:a9:97:18:cc:cb:2f:2e:7f:98:22:12:16:99:a2:92:f2:ef:
5e:83:5c:06:5d:09:2d:46:a7:81:00:dd:24:37:5e:09:56:a5:
99:14:8e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYx/7OWqQZvawH6Tk5boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx
NjFiOWIwHhcNMjYwMzI5MDcwMTEyWhcNMjYwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
Eyg5NmRjMGEwNDI1NDdkZDhmODE3YzRiMDZlODcyODliZDMxNjBiZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVZLBpiCUzoNEO9JMu5E0kb96yFm
i8rVN5tb1yf42ZV9/VkMYtY8NK3Tlrg0Oyv51ufBnYXvJvI1LK2vutbwzODqXdgl
dRgE4DGrkGquLl0IPx4Vd6JTuzvIzZNVY3O/raXkMY/uA39qIj75pBwq9rq2vDGW
W0seJxHPRtVpLEiSITYxT2TGYRBdlALPTwQIid6wiD36D/YJI7uNeCilYVl9b4az
8pESLx4jtCxwheIaWwysX4kQfDtfzAAZ2/rItkgVNjxnWXDmw06tgcKx1kGci85x
KevTrAyiZxfi5iOGdHYPTMPIyc/aK/I84XRLh9/XXktTG3+xZGieW+rZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbcCgQlR92PgXxLBuhyib0xYL3uMB8GA1UdIwQY
MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct
N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi
LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPtqDfEM
8RBauRSX69Po3l0PqVMbwQKc/x/eIQed9vUUCbW3Llk2Hq8LbnCUUMvf+1boOa1X
/BiNJJty7lULlqb0mqVUqUfTLHB/S0qJuyg/8EK9b3a0oELPXCwOlxryDVxtmqin
q8i29R4cF6fQNN2M9b9+IplcHT1Khd+XFJ1BZO2VqT4eu0axOnpJE7oMLBFO/sEw
qvmBcqgih0mi9bAgFkt0Nqmal4GSTXJnufDJ5KCkFvkIBcurfqsFFUZMeUMC0mJJ
+3x6IbxXkS3QCkcpiyAY+RHVIamXGMzLLy5/mCISFpmikvLvXoNcBl0JLUangQDd
JDdeCValmRSOVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client