Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: LmsB4hudTtnpO/F3JKBvhbPRAJYBV6CzvmzCJShDfBo=
Subject key identifier: 42:3C:22:2F:3D:F4:3C:F8:D2:B2:9E:F0:A0:6E:E0:71:DE:A1:68:31
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019D9C2CD4F82789F3825287208E414528D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 13C1
Signing time: Fri 17 Apr 2026 16:01:16 +0000
Manifest this update: Fri 17 Apr 2026 16:01:16 +0000
Manifest next update: Sat 18 Apr 2026 16:01:16 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: 5doK2SOpLaXX6v+LzWeclLakCVa8AbpZw7Sljmw47cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d4:f8:27:89:f3:82:52:87:20:8e:41:45:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Apr 17 16:01:16 2026 GMT
Not After : Apr 18 16:01:16 2026 GMT
Subject: CN=423c222f3df43cf8d2b29ef0a06ee071dea16831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:6c:cc:87:77:89:26:74:ec:3c:2a:d4:27:
25:e3:96:20:19:81:8a:96:4b:cf:e6:f7:12:1f:b7:
8c:78:a4:97:ca:e6:a5:55:36:78:d7:49:93:1e:13:
62:5e:06:e6:d4:f9:b8:03:a1:e2:06:cd:41:40:b4:
ed:1b:67:82:f5:28:64:74:35:7d:5a:d1:9d:a0:7c:
fa:0d:8e:f9:24:59:59:ab:25:d9:ec:28:4c:73:61:
6e:8b:65:52:9c:55:f0:2f:95:15:fe:df:e7:b2:8c:
38:cb:1b:41:ec:ce:ff:07:a6:2c:f2:41:44:14:fc:
56:91:ca:bb:f6:f8:44:c5:cd:b3:e2:38:86:a5:f0:
97:41:30:23:90:28:34:24:13:82:e5:65:56:53:98:
9e:54:b5:8e:a1:66:13:91:60:81:7f:10:bc:38:c2:
84:0f:4c:ff:03:5f:16:fb:5a:aa:34:a3:87:1e:6e:
ba:20:fb:1f:b3:5a:27:d2:8c:40:84:cb:9f:77:cd:
7e:f0:8f:4c:6f:6f:d2:e2:a5:ac:7b:06:66:dd:fe:
03:67:55:a1:2d:e5:e1:56:20:52:21:da:aa:39:64:
75:4e:19:1c:37:a2:ca:98:c1:df:34:05:67:87:5a:
a5:fe:ac:3c:77:5b:9f:79:48:b2:91:7a:bb:a4:2b:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:22:2F:3D:F4:3C:F8:D2:B2:9E:F0:A0:6E:E0:71:DE:A1:68:31
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:ec:2d:b3:18:fd:b4:4a:14:c3:92:8c:81:7a:33:73:d7:
fd:47:1a:43:6a:19:9c:2c:be:04:65:c5:fb:58:42:d0:bf:08:
0d:c8:31:15:6d:e9:a3:34:c8:ae:c3:a8:ba:b0:3e:53:e4:85:
3e:89:19:17:9e:63:e3:b6:42:3a:53:84:4f:83:70:c9:56:c2:
83:75:3e:07:cc:ba:7a:ab:08:4c:fe:df:10:45:2b:00:1e:68:
8c:37:4a:be:aa:d2:53:1b:46:f7:75:7a:6a:20:2c:c1:b4:89:
0f:4f:29:d6:1d:8e:4a:e7:f5:f2:a2:3c:af:89:30:b7:d1:8f:
fa:2b:52:67:c0:fe:71:de:a5:c5:99:1a:85:9f:b5:f1:1c:b6:
e1:a9:4d:b1:12:55:61:d4:79:c5:e9:bc:d9:67:39:90:af:07:
b7:6f:ba:c2:6d:b8:b4:a0:90:bf:37:aa:7f:87:d3:c4:96:8c:
aa:ed:a7:7a:27:64:ed:40:e0:b0:67:15:62:0a:82:b6:e7:30:
42:4c:47:7f:d3:9a:b6:67:e4:2e:4c:5c:19:de:4f:9d:47:69:
ba:12:c4:2f:1b:b1:a8:f5:57:01:e3:4c:e8:a1:d7:da:1b:3f:
cb:6b:fd:3c:1f:b9:4b:97:cd:d9:e5:d9:ae:68:87:1b:f4:64:
cf:2c:1e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLNT4J4nzglKHII5BRSjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDUwM2RkNWY2YWQwYTYwZTdiNDAzYTVhNjQyYWRlNDYx
OTk2M2MwHhcNMjYwNDE3MTYwMTE2WhcNMjYwNDE4MTYwMTE2WjAzMTEwLwYDVQQD
Eyg0MjNjMjIyZjNkZjQzY2Y4ZDJiMjllZjBhMDZlZTA3MWRlYTE2ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiBszId3iSZ07Dwq1Ccl45YgGYGK
lkvP5vcSH7eMeKSXyualVTZ410mTHhNiXgbm1Pm4A6HiBs1BQLTtG2eC9ShkdDV9
WtGdoHz6DY75JFlZqyXZ7ChMc2Fui2VSnFXwL5UV/t/nsow4yxtB7M7/B6Ys8kFE
FPxWkcq79vhExc2z4jiGpfCXQTAjkCg0JBOC5WVWU5ieVLWOoWYTkWCBfxC8OMKE
D0z/A18W+1qqNKOHHm66IPsfs1on0oxAhMufd81+8I9Mb2/S4qWsewZm3f4DZ1Wh
LeXhViBSIdqqOWR1ThkcN6LKmMHfNAVnh1ql/qw8d1ufeUiykXq7pCu0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI8Ii899Dz40rKe8KBu4HHeoWgxMB8GA1UdIwQY
MBaAFJNFA91fatCmDntAOlpkKt5GGZY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQt
YzZlYTA4ODc1NzM3LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQtYzZlYTA4ODc1NzM3
LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsvsLbMY
/bRKFMOSjIF6M3PX/UcaQ2oZnCy+BGXF+1hC0L8IDcgxFW3pozTIrsOourA+U+SF
PokZF55j47ZCOlOET4NwyVbCg3U+B8y6eqsITP7fEEUrAB5ojDdKvqrSUxtG93V6
aiAswbSJD08p1h2OSuf18qI8r4kwt9GP+itSZ8D+cd6lxZkahZ+18Ry24alNsRJV
YdR5xem82Wc5kK8Ht2+6wm24tKCQvzeqf4fTxJaMqu2neidk7UDgsGcVYgqCtucw
QkxHf9OatmfkLkxcGd5PnUdpuhLELxuxqPVXAeNM6KHX2hs/y2v9PB+5S5fN2eXZ
rmiHG/RkzyweFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:34 2026 by rpki-client