Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: SfrYD+hSkF6HvPh9dKmOF6h0cOWTA+35EjwKHyDBBM4=
Subject key identifier: A4:65:D9:C8:E6:2F:2F:26:2C:8D:2F:56:B9:BA:2A:42:77:C5:56:C8
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 019D9BBE748C04245E55C9E3177C35E288FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0DE6
Signing time: Fri 17 Apr 2026 14:00:43 +0000
Manifest this update: Fri 17 Apr 2026 14:00:43 +0000
Manifest next update: Sat 18 Apr 2026 14:00:43 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: J0IzMbaKMZ/KqWfLPe6S4PygSfy/QwEUfTnATjW0bwI=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:74:8c:04:24:5e:55:c9:e3:17:7c:35:e2:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Apr 17 14:00:43 2026 GMT
Not After : Apr 18 14:00:43 2026 GMT
Subject: CN=a465d9c8e62f2f262c8d2f56b9ba2a4277c556c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:bc:db:61:24:c1:33:95:4f:24:14:b8:65:
9d:9e:d8:02:cc:bc:86:3f:cc:48:bc:34:85:7a:29:
10:59:31:b2:e1:98:f1:b6:cf:4d:a3:3d:17:57:25:
fa:c2:c4:2e:15:d3:26:9e:72:b0:e6:db:bd:d9:98:
71:c2:5d:de:8d:5c:24:42:fb:ed:08:4d:d5:f0:9b:
e1:87:67:b7:df:e5:8d:9e:a5:67:5b:4f:fb:e8:3f:
26:88:96:1d:77:cc:45:2f:57:ee:c2:09:a0:c0:bd:
a6:07:c0:e2:34:75:1a:02:65:8d:da:72:18:e2:55:
2f:7b:8c:70:6e:d3:db:3a:4d:23:7f:6c:d2:d7:ac:
b7:e1:cf:bd:08:4b:0e:ca:95:0b:7b:e6:5f:d0:9b:
8b:93:21:88:b2:c7:f9:56:22:2b:70:a7:6c:ca:75:
27:fe:48:77:00:a9:70:f6:61:d1:a9:f1:37:e7:6d:
b8:21:ce:2f:5e:cf:f9:24:bf:71:4c:53:14:f1:65:
df:fc:84:a1:8a:f5:fc:35:74:6c:94:f5:5e:52:3d:
0e:4a:9b:7c:9f:f6:bd:c3:ee:19:23:07:34:52:83:
e0:3f:c3:34:bd:1d:79:45:68:52:64:e5:30:d1:e3:
48:e4:ad:7b:0f:6e:b8:6d:34:fe:e2:78:d1:4d:d4:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:D9:C8:E6:2F:2F:26:2C:8D:2F:56:B9:BA:2A:42:77:C5:56:C8
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:f0:26:4c:d3:85:a5:ae:bf:7d:27:58:b4:7b:ac:8a:48:
08:ef:79:a0:e2:16:81:86:91:53:be:d4:de:de:a5:ab:24:5d:
85:e2:d0:97:30:dc:d3:70:7a:22:4b:05:07:a0:01:9a:96:f6:
e4:95:e3:ce:a6:ff:22:d2:2b:79:1f:f6:ff:c0:65:9d:62:89:
ae:84:15:fd:ca:e3:2d:a5:1d:2a:a9:ce:84:0c:8a:94:bb:40:
f7:2f:13:1d:56:fb:4c:b5:a0:58:ba:3f:0a:02:10:e8:3d:eb:
97:97:cc:5c:06:33:b4:c7:14:92:c2:d7:15:7d:c2:5b:33:48:
f6:a9:dd:f2:c4:9f:51:ad:40:eb:f6:cc:56:f9:f1:03:04:1b:
d2:24:fd:29:9b:7e:24:d7:b2:92:93:ff:30:c1:1d:8c:f3:19:
54:e6:10:31:6a:7d:de:4c:0f:0e:17:b4:96:7e:1a:01:ee:9c:
8e:72:ee:08:01:49:e1:c8:bc:fb:a0:99:09:0f:88:35:aa:76:
c9:87:d5:95:38:24:0c:b5:68:d1:a8:84:ed:47:b9:f5:56:f2:
cf:59:2e:99:fa:dd:3c:61:16:dc:28:29:42:b0:4d:8e:7d:c8:
04:9b:40:d1:b3:d1:40:2d:6c:a4:e1:b7:48:c0:5b:a5:32:18:
48:10:f3:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvnSMBCReVcnjF3w14oj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjQyNmY0ODNjMzZhYWNkYTg3MzIzMjRhYjg4YWQ1ODAw
YzlhMmQwHhcNMjYwNDE3MTQwMDQzWhcNMjYwNDE4MTQwMDQzWjAzMTEwLwYDVQQD
EyhhNDY1ZDljOGU2MmYyZjI2MmM4ZDJmNTZiOWJhMmE0Mjc3YzU1NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2y822EkwTOVTyQUuGWdntgCzLyG
P8xIvDSFeikQWTGy4Zjxts9Noz0XVyX6wsQuFdMmnnKw5tu92Zhxwl3ejVwkQvvt
CE3V8Jvhh2e33+WNnqVnW0/76D8miJYdd8xFL1fuwgmgwL2mB8DiNHUaAmWN2nIY
4lUve4xwbtPbOk0jf2zS16y34c+9CEsOypULe+Zf0JuLkyGIssf5ViIrcKdsynUn
/kh3AKlw9mHRqfE35224Ic4vXs/5JL9xTFMU8WXf/IShivX8NXRslPVeUj0OSpt8
n/a9w+4ZIwc0UoPgP8M0vR15RWhSZOUw0eNI5K17D264bTT+4njRTdRsWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRl2cjmLy8mLI0vVrm6KkJ3xVbIMB8GA1UdIwQY
MBaAFJBkJvSDw2qs2ocyMkq4itWADJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEt
OTRjNWFkMTdhN2EwLzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEtOTRjNWFkMTdhN2Ew
LzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfjwJkzT
haWuv30nWLR7rIpICO95oOIWgYaRU77U3t6lqyRdheLQlzDc03B6IksFB6ABmpb2
5JXjzqb/ItIreR/2/8BlnWKJroQV/crjLaUdKqnOhAyKlLtA9y8THVb7TLWgWLo/
CgIQ6D3rl5fMXAYztMcUksLXFX3CWzNI9qnd8sSfUa1A6/bMVvnxAwQb0iT9KZt+
JNeykpP/MMEdjPMZVOYQMWp93kwPDhe0ln4aAe6cjnLuCAFJ4ci8+6CZCQ+INap2
yYfVlTgkDLVo0aiE7Ue59Vbyz1kumfrdPGEW3CgpQrBNjn3IBJtA0bPRQC1spOG3
SMBbpTIYSBDzag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:45 2026 by rpki-client