Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
File: KseP1RenX3fz9P0imsXmcyVgxuE.mft (raw, json)
Hash identifier: kzTq/d0k4w+RgqSbNqkbb/9n7LNX3eCDNdo/fhNkaK4=
Subject key identifier: AA:64:E1:4E:3E:60:3A:2F:65:99:22:7D:3A:18:88:7B:D4:DD:F7:6D
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 019D38D2D79CD8DB06B9697F3336FE122F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: I_ecBbii9WMS-xscmeRtbpKrhSo.roa (hash: ZkycRFhn+SYuv4ysUEIlsNeF6vjl8gsTu3WtZg0CKCM=)
2: J40_KlT3-Sey5bAIRfdyYW8QH2w.roa (hash: ktrLXwF2mH8HpV61DUldxAl7PN7AxEoLl+QT4NZrtPw=)
3: KseP1RenX3fz9P0imsXmcyVgxuE.crl (hash: mHKAkhbR0pddXSCG7AmczHPS7RP9LJen+wQgekbfW4c=)
4: Qm62m9hHZrhnWMpJhoDzXXnxIA0.roa (hash: H6TNwxkengl9/iIC3W0hXj/WoaVVJ6PzeMW/vUfiWE0=)
5: Vov-E8svAft1k9iFrH6MFFzUMKM.roa (hash: STMeX+L0qb8+gOF3y3YwWiwH+e0544gnUujaYmW8eHY=)
6: zhaeqdUVvKYeCdJMCSTAXUedtAo.roa (hash: 69QOcglIh7qqL96KGzZOqCntWc9IcDdFTSQUzsEJIeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d7:9c:d8:db:06:b9:69:7f:33:36:fe:12:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=aa64e14e3e603a2f6599227d3a18887bd4ddf76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:21:d7:db:c7:28:be:64:05:92:6b:f5:62:
c3:13:06:43:3d:fa:8c:98:5d:68:a4:61:85:f3:1a:
dd:c2:8b:a9:ce:41:84:d9:92:43:7a:9e:98:9e:dd:
6e:77:c8:a7:4d:0a:a0:b1:d8:3a:01:6a:6b:dc:f3:
ca:2c:78:45:8d:97:2a:93:12:99:88:63:6b:88:8f:
d1:3c:b0:92:db:e3:89:ba:bc:fd:47:45:65:72:bb:
08:cd:6f:e2:13:25:a4:b7:ab:40:64:c3:b1:0c:0b:
55:6b:39:37:c8:ee:71:c2:af:83:45:c6:78:3c:12:
af:46:21:93:4b:a9:40:d5:4a:17:0a:76:ca:2f:1d:
7d:a4:f9:ec:d1:91:55:df:c5:74:d9:13:b3:99:bd:
e5:cb:e4:9e:c9:37:07:b5:3e:43:ba:67:3a:fe:20:
75:d5:d9:9d:4d:89:0c:f7:71:44:16:08:f4:58:aa:
60:d3:fb:e1:3d:94:3c:fa:86:95:86:d8:98:6a:52:
2b:e8:86:b3:d3:96:ed:40:03:ce:c4:19:26:16:49:
66:7c:14:f2:78:58:5f:55:e3:50:d8:04:85:af:80:
44:ce:af:73:21:1f:91:be:96:6f:11:ce:da:b5:2a:
02:56:08:c9:d2:3f:ed:50:6a:15:03:ce:c2:9b:62:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:E1:4E:3E:60:3A:2F:65:99:22:7D:3A:18:88:7B:D4:DD:F7:6D
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:87:a6:f0:10:21:ab:da:46:c8:38:80:a2:cf:ce:d6:00:
6a:ec:9d:b1:96:07:fa:bb:92:2c:68:c7:5e:e6:46:ba:ee:43:
4c:f2:81:4a:60:0c:bc:b5:71:c4:7c:69:ae:5d:28:d1:d2:fc:
4f:df:20:de:ee:f4:59:e2:50:ad:a3:8f:38:ce:bf:be:bb:a7:
00:e0:72:fb:cb:7d:d0:14:32:b3:40:7f:32:5a:70:10:dd:78:
fe:d4:87:76:d0:02:39:b6:76:6a:54:e7:88:e5:14:55:af:8c:
97:bf:5d:3e:27:c5:39:a9:d3:2f:0f:14:a2:27:e4:ef:84:52:
68:d8:34:bd:44:d8:bc:90:1a:20:b1:ff:3f:29:5a:e8:f2:3e:
3f:78:0f:89:f0:3d:39:80:e4:b2:00:d2:b2:2a:2d:f7:cf:76:
5a:27:d1:de:e8:d3:55:c7:a5:6f:84:18:3f:d0:94:b3:c8:bc:
91:04:2b:0b:fe:51:1b:9d:e1:21:65:2c:71:5d:09:23:c3:af:
a8:c1:ff:4e:94:31:f5:f6:80:6e:43:b4:a1:3c:45:13:6d:5e:
1c:82:57:e0:73:1a:74:67:75:e0:e2:44:8c:cb:fb:b6:91:c8:
97:5f:33:d9:e2:d8:51:a6:74:19:d4:14:a9:83:71:f7:bb:c1:
17:dc:28:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040tec2NsGuWl/Mzb+Ei+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2
MGM2ZTEwHhcNMjYwMzI5MDkwMDM0WhcNMjYwMzMwMDkwMDM0WjAzMTEwLwYDVQQD
EyhhYTY0ZTE0ZTNlNjAzYTJmNjU5OTIyN2QzYTE4ODg3YmQ0ZGRmNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYwh19vHKL5kBZJr9WLDEwZDPfqM
mF1opGGF8xrdwoupzkGE2ZJDep6Ynt1ud8inTQqgsdg6AWpr3PPKLHhFjZcqkxKZ
iGNriI/RPLCS2+OJurz9R0VlcrsIzW/iEyWkt6tAZMOxDAtVazk3yO5xwq+DRcZ4
PBKvRiGTS6lA1UoXCnbKLx19pPns0ZFV38V02ROzmb3ly+SeyTcHtT5Dumc6/iB1
1dmdTYkM93FEFgj0WKpg0/vhPZQ8+oaVhtiYalIr6Iaz05btQAPOxBkmFklmfBTy
eFhfVeNQ2ASFr4BEzq9zIR+RvpZvEc7atSoCVgjJ0j/tUGoVA87Cm2Ke3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpk4U4+YDovZZkifToYiHvU3fdtMB8GA1UdIwQY
MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt
YWM4MDBjNmQ5NzZmLzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm
LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJSHpvAQ
IavaRsg4gKLPztYAauydsZYH+ruSLGjHXuZGuu5DTPKBSmAMvLVxxHxprl0o0dL8
T98g3u70WeJQraOPOM6/vrunAOBy+8t90BQys0B/MlpwEN14/tSHdtACObZ2alTn
iOUUVa+Ml79dPifFOanTLw8Uoifk74RSaNg0vUTYvJAaILH/Pyla6PI+P3gPifA9
OYDksgDSsiot9892WifR3ujTVcelb4QYP9CUs8i8kQQrC/5RG53hIWUscV0JI8Ov
qMH/TpQx9faAbkO0oTxFE21eHIJX4HMadGd14OJEjMv7tpHIl18z2eLYUaZ0GdQU
qYNx97vBF9woZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:09 2026 by rpki-client