Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: CCe5P+2tBO7r12Hi0DumTJEY7HT1vSDGX6vW80qFL/U=
Subject key identifier: 76:B0:8D:AB:AB:F0:3C:0A:87:3F:3C:99:5E:D2:44:D2:77:64:51:BE
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019D9963115AE0A2DE6508BD4AF489F614CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0CA1
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: HVowXrdOWYwIxGgjLmeAVFsb2JY.roa (hash: hYRe+VklsUZJL10nJgEreFr/d/IK6lzb5yYEfqhUAdI=)
2: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: QSDrR0bVsjneEXq4HhATWw4LTMpp8E61bcU9YXGM6LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:11:5a:e0:a2:de:65:08:bd:4a:f4:89:f6:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=76b08dababf03c0a873f3c995ed244d2776451be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:ae:11:a7:de:fa:93:af:6e:89:37:a8:c7:
fd:e2:b8:45:f4:18:6f:05:ea:2e:22:f1:34:b8:5f:
f5:98:b6:3a:1d:5f:24:d4:f9:ab:21:d0:2d:0e:4b:
49:9a:fd:0a:47:a9:94:ce:1c:b8:47:71:f3:63:f4:
b1:c2:6f:1c:0e:56:d7:75:f9:63:7e:5b:db:ef:6f:
1d:a7:23:50:47:aa:5d:54:55:97:1a:a5:08:a5:c1:
e7:04:f2:7b:69:15:24:26:29:a8:f3:37:81:f7:78:
17:8e:81:9f:5f:9d:6c:52:00:af:10:28:fd:03:a0:
1b:dc:05:63:93:f6:b7:54:2f:ee:c9:0d:ae:60:b3:
90:43:3d:1c:5d:ad:e0:9a:ec:ec:14:8a:e6:7c:15:
e3:5d:5b:35:1f:31:f1:25:9b:8f:bd:bb:17:34:73:
4c:5b:ef:c5:04:7b:26:ce:c6:0e:49:1d:72:2b:56:
d4:db:47:bf:87:24:bf:98:94:0b:bc:29:37:ef:2b:
a7:a5:04:10:ff:63:5c:7d:fc:6d:9d:0a:cd:8e:1e:
c0:7e:84:a0:24:0c:58:b2:fb:93:8f:4a:a7:e2:b2:
57:2d:36:ec:63:c4:0f:35:2a:c0:76:b6:7d:60:4d:
fe:78:50:70:36:73:09:3d:75:12:83:0c:79:11:b3:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:8D:AB:AB:F0:3C:0A:87:3F:3C:99:5E:D2:44:D2:77:64:51:BE
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:4e:81:3c:10:0a:38:0f:4f:d8:9c:12:56:96:0c:3c:3e:
3b:b1:f3:e5:bd:44:a5:27:14:e3:64:33:f4:3e:bc:4c:9e:5e:
64:1b:bc:ba:8f:58:13:58:9e:76:0c:cb:db:39:6f:12:54:b3:
17:7e:cc:4e:ec:c5:78:2f:aa:b4:4e:55:4a:74:db:c4:e6:14:
d7:c3:e6:1a:ca:b6:2a:23:de:f2:40:07:9c:fd:c2:c0:3c:b6:
8e:2f:bc:6d:95:6e:96:16:8d:ca:de:a2:bd:66:a3:18:82:db:
f7:e3:e6:12:c7:7b:27:f0:35:f1:0b:84:6c:32:eb:cd:e8:21:
9f:b7:be:78:24:00:68:b4:af:7b:c5:30:ca:e2:8d:cc:b5:64:
11:83:b9:25:74:fc:c7:c8:6b:b9:e6:cd:d6:e6:b4:b8:39:43:
73:3d:ee:e9:8b:9b:1e:e9:8f:64:5c:a1:e7:33:11:cd:f7:b8:
2e:79:c4:1b:17:88:ad:67:02:2c:fe:0e:34:d8:83:c8:c4:e2:
7c:6d:b4:54:af:61:2b:c2:51:c7:9f:4b:df:e9:37:85:8c:c5:
bf:03:51:e2:18:47:0c:00:47:5f:28:25:0c:cf:f6:8e:dc:44:
70:9f:69:1f:55:2b:ac:11:84:d5:a4:ef:57:6e:66:df:6e:83:
6e:a0:e8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxFa4KLeZQi9SvSJ9hTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTkyZWJiODNlYjhiNzNhMmEyMWU1YjAzM2RiZGViMWRm
NGYyM2QwHhcNMjYwNDE3MDMwMTM5WhcNMjYwNDE4MDMwMTM5WjAzMTEwLwYDVQQD
Eyg3NmIwOGRhYmFiZjAzYzBhODczZjNjOTk1ZWQyNDRkMjc3NjQ1MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lCuEafe+pOvbok3qMf94rhF9Bhv
BeouIvE0uF/1mLY6HV8k1PmrIdAtDktJmv0KR6mUzhy4R3HzY/Sxwm8cDlbXdflj
flvb728dpyNQR6pdVFWXGqUIpcHnBPJ7aRUkJimo8zeB93gXjoGfX51sUgCvECj9
A6Ab3AVjk/a3VC/uyQ2uYLOQQz0cXa3gmuzsFIrmfBXjXVs1HzHxJZuPvbsXNHNM
W+/FBHsmzsYOSR1yK1bU20e/hyS/mJQLvCk37yunpQQQ/2NcffxtnQrNjh7AfoSg
JAxYsvuTj0qn4rJXLTbsY8QPNSrAdrZ9YE3+eFBwNnMJPXUSgwx5EbMP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHawjaur8DwKhz88mV7SRNJ3ZFG+MB8GA1UdIwQY
MBaAFCiZLruD64tzoqIeWwM9vesd9PI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgt
YjM2YjhlODkyYzZjLzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgtYjM2YjhlODkyYzZj
LzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfVOgTwQ
CjgPT9icElaWDDw+O7Hz5b1EpScU42Qz9D68TJ5eZBu8uo9YE1iedgzL2zlvElSz
F37MTuzFeC+qtE5VSnTbxOYU18PmGsq2KiPe8kAHnP3CwDy2ji+8bZVulhaNyt6i
vWajGILb9+PmEsd7J/A18QuEbDLrzeghn7e+eCQAaLSve8UwyuKNzLVkEYO5JXT8
x8hruebN1ua0uDlDcz3u6YubHumPZFyh5zMRzfe4LnnEGxeIrWcCLP4ONNiDyMTi
fG20VK9hK8JRx59L3+k3hYzFvwNR4hhHDABHXyglDM/2jtxEcJ9pH1UrrBGE1aTv
V25m326DbqDoGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:03 2026 by rpki-client