Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: 4bwagKjYFikF2LFDfHS3duf9MmExlesDHEQyB1du+mY=
Subject key identifier: 23:CE:60:9D:D3:88:50:43:00:A6:02:EE:98:AA:F3:6C:06:ED:DB:4F
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019DA3E6ECAF28C695CB008EEC6C316CAC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 04:01:53 +0000
Manifest this update: Sun 19 Apr 2026 04:01:53 +0000
Manifest next update: Mon 20 Apr 2026 04:01:53 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: PE4o/eLHsKoqft4hnlklvPTMk7z6U/MeJTCr0+qODkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ec:af:28:c6:95:cb:00:8e:ec:6c:31:6c:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Apr 19 04:01:53 2026 GMT
Not After : Apr 20 04:01:53 2026 GMT
Subject: CN=23ce609dd388504300a602ee98aaf36c06eddb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:cc:8a:8a:5e:12:33:e9:f7:02:5a:4a:31:
ec:e8:e7:1e:2e:c8:f1:f4:9a:84:10:0b:ec:fb:b9:
b2:59:38:5b:f6:b1:05:dd:36:01:13:8e:f1:ea:74:
c4:5b:3c:63:13:51:eb:71:f4:2e:ef:1d:eb:bc:19:
5b:7c:31:95:a5:c9:65:e2:ee:2b:c9:6d:01:ae:9f:
da:2c:bf:9a:df:1f:f4:35:6e:be:30:49:e6:21:b0:
3d:30:87:cd:c0:c9:63:fd:de:d1:79:e2:c0:09:b1:
0b:34:d5:c3:da:21:8d:96:a0:29:d2:2a:a1:80:92:
a8:bd:78:d6:50:73:00:62:76:51:44:2d:8d:a8:18:
30:22:12:81:5b:be:cd:59:e6:c5:51:63:f0:dd:7a:
67:6c:68:ed:57:91:58:78:30:80:7d:3e:47:48:ca:
02:1c:a4:40:c0:a7:1f:9f:41:17:70:07:82:88:b0:
ab:cb:2e:77:9d:23:ce:b6:a8:cd:ab:ff:0c:b1:e8:
b0:06:ce:54:1f:48:19:23:1a:84:4c:13:da:de:0b:
df:3b:87:f9:4c:62:a6:2b:10:bf:3f:39:35:48:5a:
f7:cb:36:79:d2:1e:d5:75:5e:e1:4a:bf:f9:1e:d4:
b6:7b:92:4f:fd:f9:22:60:d4:bb:dc:4b:e8:00:99:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CE:60:9D:D3:88:50:43:00:A6:02:EE:98:AA:F3:6C:06:ED:DB:4F
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:d1:70:df:74:20:14:c0:04:2c:59:1a:60:00:27:3b:82:
18:c9:8e:18:5b:fb:76:8d:48:1f:34:6a:6f:af:71:9b:54:90:
f9:4d:6f:c2:29:70:56:5a:07:2e:6d:f9:fe:89:44:8d:e2:bd:
81:f6:6f:a5:86:e4:31:3c:67:4f:ce:89:2c:e0:37:46:ec:de:
e4:aa:7a:c7:27:46:72:f3:fa:7c:a2:1f:e6:2c:8d:47:66:29:
d4:48:c4:bf:da:05:39:d5:30:4e:c9:7a:d3:e2:11:31:f2:f6:
21:7c:b8:6d:c7:13:44:29:ea:28:86:f5:2d:9c:d8:43:d3:c2:
16:29:d2:fc:c5:4e:3b:24:b3:2e:bb:df:e7:73:61:e5:1c:e5:
50:5c:0c:38:4b:09:5f:01:ae:0b:16:aa:04:95:ec:f7:18:38:
84:82:71:07:86:2e:02:ce:46:aa:52:a1:7f:80:d6:62:5f:f4:
49:80:b5:ad:ba:d5:4e:5b:c5:fc:61:d9:d9:11:9e:97:52:71:
ba:70:62:03:b0:db:bb:31:9b:3d:5b:78:6c:a5:ff:1f:44:54:
e0:dc:50:02:82:3c:0a:28:70:c4:c4:42:03:e3:23:74:7d:2b:
1e:fc:bb:d7:b8:24:1a:ab:c2:6c:95:5d:5e:0e:cf:ef:51:17:
01:df:b0:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5uyvKMaVywCO7GwxbKwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjYwNDE5MDQwMTUzWhcNMjYwNDIwMDQwMTUzWjAzMTEwLwYDVQQD
EygyM2NlNjA5ZGQzODg1MDQzMDBhNjAyZWU5OGFhZjM2YzA2ZWRkYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIjMiopeEjPp9wJaSjHs6OceLsjx
9JqEEAvs+7myWThb9rEF3TYBE47x6nTEWzxjE1HrcfQu7x3rvBlbfDGVpcll4u4r
yW0Brp/aLL+a3x/0NW6+MEnmIbA9MIfNwMlj/d7ReeLACbELNNXD2iGNlqAp0iqh
gJKovXjWUHMAYnZRRC2NqBgwIhKBW77NWebFUWPw3XpnbGjtV5FYeDCAfT5HSMoC
HKRAwKcfn0EXcAeCiLCryy53nSPOtqjNq/8MseiwBs5UH0gZIxqETBPa3gvfO4f5
TGKmKxC/Pzk1SFr3yzZ50h7VdV7hSr/5HtS2e5JP/fkiYNS73EvoAJnvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPOYJ3TiFBDAKYC7piq82wG7dtPMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpLRcN90
IBTABCxZGmAAJzuCGMmOGFv7do1IHzRqb69xm1SQ+U1vwilwVloHLm35/olEjeK9
gfZvpYbkMTxnT86JLOA3Ruze5Kp6xydGcvP6fKIf5iyNR2Yp1EjEv9oFOdUwTsl6
0+IRMfL2IXy4bccTRCnqKIb1LZzYQ9PCFinS/MVOOySzLrvf53Nh5RzlUFwMOEsJ
XwGuCxaqBJXs9xg4hIJxB4YuAs5GqlKhf4DWYl/0SYC1rbrVTlvF/GHZ2RGel1Jx
unBiA7DbuzGbPVt4bKX/H0RU4NxQAoI8CihwxMRCA+MjdH0rHvy717gkGqvCbJVd
Xg7P71EXAd+wtA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:22 2026 by rpki-client