Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: n8skkc3lIjnQKKCrBPqRu6TJpxGfGciLW+O8st/sb0Y=
Subject key identifier: 10:B9:B5:9E:92:7A:98:40:43:20:0F:39:72:FC:E5:69:61:35:44:29
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019D9961FB50CC1ADC4A75808D1BB8EA06A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa (hash: ceH7xNtIASBG/OmWLD8LM3MYEGRNf6JiHbcW322GG3k=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: Fl0bQeH7L/f5T3FgF19SzNh4cztijkoYa0PW8r8kLWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fb:50:cc:1a:dc:4a:75:80:8d:1b:b8:ea:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=10b9b59e927a984043200f3972fce56961354429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:00:dd:84:01:33:f6:c8:34:01:f2:5e:18:
32:1f:06:17:40:30:26:d7:27:78:b5:e7:72:bb:4e:
e5:f2:74:24:85:95:a8:c8:c4:18:a3:6d:03:2a:55:
df:d9:11:17:a1:0c:8a:cd:dc:16:89:ce:3d:3b:ec:
5f:72:f9:30:a1:83:c4:ae:bf:b6:f3:43:04:bd:8d:
f4:ec:2f:fc:67:00:32:dd:13:0d:46:93:72:9a:bb:
03:47:a5:bc:2b:61:c7:4a:12:47:0a:46:39:99:46:
9f:da:cc:66:82:01:e0:ec:52:19:7f:b7:4a:55:f5:
21:d1:93:a1:2c:45:75:67:8f:5b:26:b2:89:db:43:
3a:bb:c7:ce:9c:86:7f:86:62:27:a9:2c:c4:25:02:
a9:c3:d6:38:26:1c:f3:02:7b:b0:1a:ed:60:71:10:
92:9c:c8:53:f5:e4:ab:ad:d8:35:c1:22:7f:e0:a9:
b0:2c:2f:fa:dd:b9:e7:92:c3:72:4b:b7:ab:0b:7b:
8a:0a:2a:dd:bc:35:60:98:e6:4d:9e:f1:7a:a9:0f:
c9:b4:b3:f2:98:d1:36:4e:54:7b:4c:4e:27:42:25:
d1:1f:c1:b6:4e:10:b7:72:7f:04:fe:3f:74:45:eb:
74:43:22:09:28:d6:9d:fa:e3:5c:3b:00:56:ab:1d:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:B5:9E:92:7A:98:40:43:20:0F:39:72:FC:E5:69:61:35:44:29
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bc:8c:35:a3:08:ac:3d:22:d8:7c:64:74:b4:f1:df:00:02:
c4:81:c6:80:a4:69:6d:99:b8:5f:54:8d:0f:35:36:60:3b:b2:
f1:4f:e1:9d:81:89:ad:25:c4:e6:30:89:c4:02:cf:51:8a:91:
20:b3:36:6f:17:e3:8c:ab:ac:15:5b:6f:7f:2d:31:ed:b2:77:
0b:e6:f7:1b:01:ff:16:f7:4c:da:9c:33:a2:04:52:f2:7e:ea:
55:f2:19:1b:49:a1:68:b9:5d:54:1b:6f:69:26:81:44:2f:63:
ff:29:f9:6c:94:c8:8b:5c:08:26:59:17:83:ab:b3:f1:b9:23:
93:f7:5e:c6:26:8e:c6:6f:54:69:6d:06:69:3d:a9:6b:fa:38:
e7:40:cf:b6:f6:c4:67:6b:ea:a1:7e:a2:69:ec:43:56:9c:d4:
95:e7:e3:23:c7:a1:20:b6:57:d7:e3:21:12:95:e9:75:b0:2e:
ed:f0:31:e0:1e:d6:91:ce:89:11:9b:5f:6d:88:53:74:96:66:
1a:b2:67:d2:f6:2b:8d:92:60:be:9c:16:1a:43:89:93:33:82:
f9:11:36:da:60:41:a6:bc:b5:bf:72:58:8e:71:10:43:5e:11:
28:4e:5a:28:e8:62:c4:00:16:45:ae:d7:f3:96:06:0b:5e:7a:
c4:cd:49:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYftQzBrcSnWAjRu46gaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWM0Yzc2ZWM3NTU2NThkNDVmZDBkM2Y1Y2EzY2M4ZWJk
Mzc0YjcwHhcNMjYwNDE3MDMwMDI4WhcNMjYwNDE4MDMwMDI4WjAzMTEwLwYDVQQD
EygxMGI5YjU5ZTkyN2E5ODQwNDMyMDBmMzk3MmZjZTU2OTYxMzU0NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwecA3YQBM/bINAHyXhgyHwYXQDAm
1yd4tedyu07l8nQkhZWoyMQYo20DKlXf2REXoQyKzdwWic49O+xfcvkwoYPErr+2
80MEvY307C/8ZwAy3RMNRpNymrsDR6W8K2HHShJHCkY5mUaf2sxmggHg7FIZf7dK
VfUh0ZOhLEV1Z49bJrKJ20M6u8fOnIZ/hmInqSzEJQKpw9Y4JhzzAnuwGu1gcRCS
nMhT9eSrrdg1wSJ/4KmwLC/63bnnksNyS7erC3uKCirdvDVgmOZNnvF6qQ/JtLPy
mNE2TlR7TE4nQiXRH8G2ThC3cn8E/j90Ret0QyIJKNad+uNcOwBWqx1jYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC5tZ6SephAQyAPOXL85WlhNUQpMB8GA1UdIwQY
MBaAFJEcTHbsdVZY1F/Q0/XKPMjr03S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2Ut
NjJkMjc1NGYyODhiLzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2UtNjJkMjc1NGYyODhi
LzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLyMNaMI
rD0i2HxkdLTx3wACxIHGgKRpbZm4X1SNDzU2YDuy8U/hnYGJrSXE5jCJxALPUYqR
ILM2bxfjjKusFVtvfy0x7bJ3C+b3GwH/FvdM2pwzogRS8n7qVfIZG0mhaLldVBtv
aSaBRC9j/yn5bJTIi1wIJlkXg6uz8bkjk/dexiaOxm9UaW0GaT2pa/o450DPtvbE
Z2vqoX6iaexDVpzUlefjI8ehILZX1+MhEpXpdbAu7fAx4B7Wkc6JEZtfbYhTdJZm
GrJn0vYrjZJgvpwWGkOJkzOC+RE22mBBpry1v3JYjnEQQ14RKE5aKOhixAAWRa7X
85YGC156xM1Jzg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:25 2026 by rpki-client