
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: B+6xz4dsCsQ+qYSKtJhBtzgmsyCaLqQFcfiRKboPImI=
Subject key identifier: 71:C9:1E:6B:F2:5B:AB:5E:85:6B:F2:62:96:E3:F7:6E:B8:92:AB:8B
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019D97AAB2381B5CE935A05AC7E838721733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0904
Signing time: Thu 16 Apr 2026 19:00:39 +0000
Manifest this update: Thu 16 Apr 2026 19:00:39 +0000
Manifest next update: Fri 17 Apr 2026 19:00:39 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 2gowf/LaSKfsbYzZsfc3tW1gl+jUthMp2/gbUOTOlCg=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: RUgdvvKNJ1CIlBna6_Sqdz_ueYU.asa (hash: oOjO7PspO0d7dU35qwf5iIVxgQOTcnCtnb/oChTMR6o=)
4: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b2:38:1b:5c:e9:35:a0:5a:c7:e8:38:72:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Apr 16 19:00:39 2026 GMT
Not After : Apr 17 19:00:39 2026 GMT
Subject: CN=71c91e6bf25bab5e856bf26296e3f76eb892ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:ca:e0:49:db:96:73:2d:5f:3f:49:a6:10:
c0:9e:8a:37:81:83:f4:fa:42:2c:6b:08:01:bf:99:
e6:68:c1:28:f5:8c:64:10:30:03:2d:67:90:04:b4:
47:dc:f8:53:09:50:e2:9b:94:60:73:8b:7c:2b:f0:
01:ef:7b:c8:10:9a:c0:04:c5:4d:3a:6b:5e:f0:71:
3a:32:cc:fa:5e:75:a6:64:47:fe:57:53:2a:2c:92:
78:dd:8f:85:f4:9d:d5:e1:b9:0e:f4:12:2a:80:d4:
0a:dd:b7:77:58:a6:a5:31:7c:88:9c:28:99:86:83:
61:1a:20:ee:f2:6c:e9:ea:a6:4c:12:d2:99:b2:70:
cf:b2:ab:82:e8:2d:c9:c0:13:7b:06:71:9d:2f:ae:
a4:45:39:e8:11:ab:48:11:5b:78:6b:58:66:62:cf:
59:d3:01:ef:e8:1c:b6:1b:b7:14:d3:30:54:2b:e4:
62:7c:91:6d:96:92:44:ad:96:c5:71:de:5e:69:46:
e9:ef:b0:f4:43:8c:14:99:ca:17:dd:f3:18:fd:4e:
58:b5:df:f9:69:53:32:82:7a:26:b1:a7:18:81:58:
68:6a:91:35:bb:9a:c1:33:a1:4b:1c:d6:9e:a6:76:
3b:f0:2b:d0:57:95:7f:dd:61:33:dc:fe:96:91:d9:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:1E:6B:F2:5B:AB:5E:85:6B:F2:62:96:E3:F7:6E:B8:92:AB:8B
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5f:7f:b9:41:b1:a0:6c:18:65:20:8f:f3:51:c7:87:46:54:
b4:ab:74:f7:42:10:2e:d3:16:be:0a:88:22:40:c2:ae:1c:56:
0f:b5:bc:be:70:5d:52:17:3c:78:20:f6:33:53:de:27:3b:f1:
fa:4b:c5:f0:6b:ed:b6:1a:c9:6e:61:71:6a:f3:72:6b:4a:5d:
9d:5d:a5:1b:40:94:89:b5:24:df:d3:44:7c:e2:06:9c:42:aa:
af:99:3c:4a:c9:3e:be:a6:85:eb:76:d8:6e:78:f7:18:94:78:
a4:f2:a3:0b:f6:6b:74:fe:dc:bf:89:02:19:44:b8:58:57:ad:
7b:b2:44:3b:87:3b:12:ee:6b:23:af:c2:f9:78:10:c6:40:b1:
bb:bf:8f:f1:47:9c:24:92:d5:a7:4d:d0:42:e7:79:26:b9:e1:
79:8a:e7:5c:a0:d4:30:cc:93:f9:96:cc:db:3a:7c:06:88:0a:
99:91:e9:27:80:86:d4:52:61:b5:f0:cc:2c:90:2b:0d:c5:83:
64:65:0c:25:41:73:27:d8:86:49:f3:30:ea:4f:8f:36:16:72:
01:55:4c:48:da:6b:29:95:53:b1:b2:d8:e0:e7:84:94:d9:e2:
c4:98:e9:22:12:ab:02:ef:ab:d3:b3:9f:0f:c8:fe:4d:44:7e:
16:f1:17:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqrI4G1zpNaBax+g4chczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx
M2I5OWEwHhcNMjYwNDE2MTkwMDM5WhcNMjYwNDE3MTkwMDM5WjAzMTEwLwYDVQQD
Eyg3MWM5MWU2YmYyNWJhYjVlODU2YmYyNjI5NmUzZjc2ZWI4OTJhYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9nK4EnblnMtXz9JphDAnoo3gYP0
+kIsawgBv5nmaMEo9YxkEDADLWeQBLRH3PhTCVDim5Rgc4t8K/AB73vIEJrABMVN
Omte8HE6Msz6XnWmZEf+V1MqLJJ43Y+F9J3V4bkO9BIqgNQK3bd3WKalMXyInCiZ
hoNhGiDu8mzp6qZMEtKZsnDPsquC6C3JwBN7BnGdL66kRTnoEatIEVt4a1hmYs9Z
0wHv6By2G7cU0zBUK+RifJFtlpJErZbFcd5eaUbp77D0Q4wUmcoX3fMY/U5Ytd/5
aVMygnomsacYgVhoapE1u5rBM6FLHNaepnY78CvQV5V/3WEz3P6WkdlgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHJHmvyW6tehWvyYpbj9264kquLMB8GA1UdIwQY
MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt
NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj
LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF9/uUGx
oGwYZSCP81HHh0ZUtKt090IQLtMWvgqIIkDCrhxWD7W8vnBdUhc8eCD2M1PeJzvx
+kvF8GvtthrJbmFxavNya0pdnV2lG0CUibUk39NEfOIGnEKqr5k8Ssk+vqaF63bY
bnj3GJR4pPKjC/ZrdP7cv4kCGUS4WFete7JEO4c7Eu5rI6/C+XgQxkCxu7+P8Uec
JJLVp03QQud5JrnheYrnXKDUMMyT+ZbM2zp8BogKmZHpJ4CG1FJhtfDMLJArDcWD
ZGUMJUFzJ9iGSfMw6k+PNhZyAVVMSNprKZVTsbLY4OeElNnixJjpIhKrAu+r07Of
D8j+TUR+FvEXbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:18 2026 by rpki-client