Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: FcZ8xXY/v/E6d0Be6mYy/j8fS0wfbxemGCjWtKObhNU=
Subject key identifier: 9A:91:C7:29:A2:04:07:96:8F:65:A4:9C:B2:33:9A:A1:DA:1A:C4:1F
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019D99D0CA87E1A92720CC55A34DFADB4927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:30 +0000
Manifest this update: Fri 17 Apr 2026 05:01:30 +0000
Manifest next update: Sat 18 Apr 2026 05:01:30 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: Ib8cvNwwWBmKYIDxo4pIay15+5Jd9DpvhJ00aBfP32w=)
2: QR9wcx2L71SKEtutJS3_6RZ2qBM.roa (hash: jMtzB+uj9QQoD07qr0k17Wvt08fncaVh2dRnLEBazkA=)
3: kJniZJ6iZYXidYzcJA4ZBySrhb4.roa (hash: IPJtJpbvrKU2IYcfqcSW/SQBNcuNJehfDhscEcl6bto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ca:87:e1:a9:27:20:cc:55:a3:4d:fa:db:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Apr 17 05:01:30 2026 GMT
Not After : Apr 18 05:01:30 2026 GMT
Subject: CN=9a91c729a20407968f65a49cb2339aa1da1ac41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:c8:e3:2a:f3:b9:64:37:36:78:67:ea:65:
4c:0f:2d:9f:8e:41:48:21:4b:52:ad:7a:c4:4b:11:
df:3f:13:0c:6a:70:57:cb:a1:58:52:f6:76:5a:7f:
3c:6c:dc:26:b5:29:4d:4d:91:bd:b6:37:f1:7d:88:
66:1c:93:d0:88:fd:4f:66:da:97:f8:bc:39:38:9d:
ae:26:9d:cc:68:24:d5:ef:16:6b:1e:c7:06:d1:9f:
fe:a9:3b:ae:ba:fb:b8:86:9b:3e:fe:76:27:aa:3b:
d6:db:50:d7:84:48:1c:48:df:46:af:e6:7d:1c:28:
9c:91:72:a4:f2:d6:0f:ff:f9:fc:8d:c1:78:24:16:
6d:c9:cd:42:e5:69:cb:62:1e:a2:8a:92:93:8e:11:
62:be:8c:74:2a:51:c4:ed:b0:6f:a7:32:ec:4b:e1:
fb:55:12:94:e4:ea:6e:b5:f4:b4:f7:8f:36:1a:2c:
e5:ba:09:a5:fb:66:a7:da:2a:65:64:30:8f:fc:ba:
b4:5e:2b:19:47:d1:bc:49:de:3e:fc:f5:9f:d0:54:
62:75:25:9c:c6:52:62:2e:c7:58:dc:87:e6:0d:85:
03:63:1f:f7:23:b3:2b:62:b7:b2:25:fe:e3:bf:2c:
6f:4a:82:bf:92:b8:ea:08:0e:ff:c9:a1:75:f6:7d:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:C7:29:A2:04:07:96:8F:65:A4:9C:B2:33:9A:A1:DA:1A:C4:1F
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6d:73:c9:9a:23:c8:3c:41:f6:9c:6c:b1:bb:80:1e:ae:74:
a7:ac:1d:6c:6b:16:00:ae:75:0e:b5:e1:3e:5b:43:1d:6c:f6:
5c:2e:cd:d9:91:95:fb:5b:e5:33:ec:3e:9e:fe:60:c3:78:a3:
74:c7:f0:f9:ba:f1:af:ef:e2:d7:7b:e8:d2:e0:51:42:04:e0:
e0:d7:67:15:0a:af:ff:90:43:72:4d:87:19:0a:67:e0:f7:41:
c0:12:21:53:67:99:90:72:53:4e:3d:14:d5:49:79:25:af:7d:
c0:47:74:25:65:18:1e:15:6b:58:59:fc:4e:dc:d0:ee:0c:14:
17:f9:df:1c:e3:4c:54:fd:b6:a9:29:28:5c:e2:6c:e0:49:68:
ae:0a:9b:f7:d9:41:42:b5:17:d3:31:b9:b1:ba:7c:73:cc:74:
ff:a8:38:09:e1:86:47:ce:ac:18:46:af:15:88:eb:f8:8a:9d:
49:1d:e8:6c:55:80:f5:47:14:2e:d7:30:71:71:8c:e1:47:39:
c2:be:01:d1:54:b2:04:84:b7:0d:64:38:ff:d0:37:b9:1b:9d:
30:b9:96:98:ba:74:fa:37:cb:db:47:c1:63:6b:f2:82:7d:01:
52:da:5b:c8:29:41:1a:bd:2f:b2:34:da:75:8d:6b:2f:60:c6:
5d:d5:c7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0MqH4aknIMxVo03620knMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjYwNDE3MDUwMTMwWhcNMjYwNDE4MDUwMTMwWjAzMTEwLwYDVQQD
Eyg5YTkxYzcyOWEyMDQwNzk2OGY2NWE0OWNiMjMzOWFhMWRhMWFjNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJXI4yrzuWQ3Nnhn6mVMDy2fjkFI
IUtSrXrESxHfPxMManBXy6FYUvZ2Wn88bNwmtSlNTZG9tjfxfYhmHJPQiP1PZtqX
+Lw5OJ2uJp3MaCTV7xZrHscG0Z/+qTuuuvu4hps+/nYnqjvW21DXhEgcSN9Gr+Z9
HCickXKk8tYP//n8jcF4JBZtyc1C5WnLYh6iipKTjhFivox0KlHE7bBvpzLsS+H7
VRKU5OputfS09482Gizlugml+2an2iplZDCP/Lq0XisZR9G8Sd4+/PWf0FRidSWc
xlJiLsdY3IfmDYUDYx/3I7MrYreyJf7jvyxvSoK/krjqCA7/yaF19n19rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqRxymiBAeWj2WknLIzmqHaGsQfMB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW1zyZoj
yDxB9pxssbuAHq50p6wdbGsWAK51DrXhPltDHWz2XC7N2ZGV+1vlM+w+nv5gw3ij
dMfw+brxr+/i13vo0uBRQgTg4NdnFQqv/5BDck2HGQpn4PdBwBIhU2eZkHJTTj0U
1Ul5Ja99wEd0JWUYHhVrWFn8TtzQ7gwUF/nfHONMVP22qSkoXOJs4Elorgqb99lB
QrUX0zG5sbp8c8x0/6g4CeGGR86sGEavFYjr+IqdSR3obFWA9UcULtcwcXGM4Uc5
wr4B0VSyBIS3DWQ4/9A3uRudMLmWmLp0+jfL20fBY2vygn0BUtpbyClBGr0vsjTa
dY1rL2DGXdXHjA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:50 2026 by rpki-client