Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: anptrRQqoElgWxzxkZEvshg5f4IzH0n7fKWUfDdJ4Ls=
Subject key identifier: 2D:2A:36:47:48:EC:B8:C2:9B:EA:C8:56:BD:FD:E8:5F:92:0A:F6:51
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019D9A3E015B11D003E53A71785EF2A8E80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 0596
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: R97WtcJRtfolyIQvdESIAwilf4oLNzJ6fYD9/wfH+EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:01:5b:11:d0:03:e5:3a:71:78:5e:f2:a8:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=2d2a364748ecb8c29beac856bdfde85f920af651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:27:ff:0e:0c:85:00:c6:44:48:55:2d:d9:
0d:4b:a4:92:8e:54:43:f9:f6:7f:d3:3d:3e:ca:15:
7b:60:8c:5d:91:a0:22:d0:51:bc:7a:5b:c3:94:52:
f2:7b:21:7b:7e:2f:93:17:29:53:00:ca:9a:63:a8:
ca:00:5c:ee:c8:72:90:36:f4:cc:a9:70:9d:67:a7:
ef:3d:b4:36:29:c0:da:15:40:75:d7:72:01:3d:e9:
d0:2f:18:b4:62:10:70:8b:7c:1e:05:2f:b6:c0:17:
72:f2:a0:c9:85:77:1d:60:91:d3:59:36:df:18:89:
6b:96:ca:7b:0c:b7:f2:55:65:0e:b9:79:bb:f4:34:
d0:c3:ab:cf:10:4f:33:e3:6c:b0:24:89:6f:74:a7:
0f:d9:2f:43:2a:4d:8a:78:d4:c6:b2:94:28:b6:24:
43:ae:48:25:c0:7a:97:83:5c:39:84:61:bb:66:a7:
21:8a:99:c6:bb:84:2a:3b:be:43:c5:96:c4:2d:55:
24:81:81:c2:3d:80:40:24:e5:0a:1f:2b:c6:8e:eb:
9d:c0:d2:a4:0e:9b:d5:64:b4:bd:41:cb:3d:a0:6b:
52:1d:48:17:3f:ee:42:68:eb:ca:7f:88:05:94:3c:
cb:2a:19:8e:34:3f:8f:60:36:7c:6a:71:72:57:79:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:36:47:48:EC:B8:C2:9B:EA:C8:56:BD:FD:E8:5F:92:0A:F6:51
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:ab:ca:38:2b:3d:66:3d:b0:ab:1b:cb:57:b4:2c:4e:48:
ed:ac:10:e4:77:c9:7d:67:03:d4:8e:8a:c5:4b:e3:1f:7a:99:
b1:11:2d:91:99:f4:1e:d2:12:71:13:99:2b:26:87:83:5a:60:
95:0c:af:a7:6f:26:b2:bc:4e:61:b1:a1:c1:27:0f:db:b7:33:
b5:24:fa:28:d8:e4:d6:b4:be:93:33:52:14:0a:51:11:70:f1:
c3:96:7e:6f:a3:bd:ae:f1:64:55:a8:99:8c:0d:87:18:7f:c0:
70:d5:7e:62:57:d8:f4:10:48:c0:18:b4:8b:d7:5e:33:9b:b2:
5d:79:fb:0d:f5:73:d6:12:4b:b1:fc:45:68:02:f8:2e:aa:0f:
f6:f8:4a:dd:da:52:6f:ed:16:6c:e4:50:2c:0f:71:2c:cf:8d:
7c:ca:15:80:5a:95:72:d0:fb:8f:2d:06:38:3a:c5:c0:18:27:
a3:b6:9e:7e:c3:b7:40:e3:f5:a9:7c:ae:87:f6:fe:a3:35:56:
f2:10:1e:4c:5d:41:a9:bb:53:73:ab:cf:d3:f9:04:6b:00:21:
9a:73:32:50:01:33:c2:9a:00:7b:63:3d:16:f7:ff:4c:71:22:
78:8e:e1:a4:6a:86:3f:e0:9e:02:72:be:5b:bc:c5:6c:6e:25:
1e:ec:6c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgFbEdAD5TpxeF7yqOgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1
YmJiYTgwHhcNMjYwNDE3MDcwMDQ4WhcNMjYwNDE4MDcwMDQ4WjAzMTEwLwYDVQQD
EygyZDJhMzY0NzQ4ZWNiOGMyOWJlYWM4NTZiZGZkZTg1ZjkyMGFmNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+cn/w4MhQDGREhVLdkNS6SSjlRD
+fZ/0z0+yhV7YIxdkaAi0FG8elvDlFLyeyF7fi+TFylTAMqaY6jKAFzuyHKQNvTM
qXCdZ6fvPbQ2KcDaFUB113IBPenQLxi0YhBwi3weBS+2wBdy8qDJhXcdYJHTWTbf
GIlrlsp7DLfyVWUOuXm79DTQw6vPEE8z42ywJIlvdKcP2S9DKk2KeNTGspQotiRD
rkglwHqXg1w5hGG7ZqchipnGu4QqO75DxZbELVUkgYHCPYBAJOUKHyvGjuudwNKk
DpvVZLS9Qcs9oGtSHUgXP+5CaOvKf4gFlDzLKhmOND+PYDZ8anFyV3nseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0qNkdI7LjCm+rIVr396F+SCvZRMB8GA1UdIwQY
MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt
NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi
LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn6ryjgr
PWY9sKsby1e0LE5I7awQ5HfJfWcD1I6KxUvjH3qZsREtkZn0HtIScROZKyaHg1pg
lQyvp28msrxOYbGhwScP27cztST6KNjk1rS+kzNSFApREXDxw5Z+b6O9rvFkVaiZ
jA2HGH/AcNV+YlfY9BBIwBi0i9deM5uyXXn7DfVz1hJLsfxFaAL4LqoP9vhK3dpS
b+0WbORQLA9xLM+NfMoVgFqVctD7jy0GODrFwBgno7aefsO3QOP1qXyuh/b+ozVW
8hAeTF1BqbtTc6vP0/kEawAhmnMyUAEzwpoAe2M9Fvf/THEieI7hpGqGP+CeAnK+
W7zFbG4lHuxsig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:23 2026 by rpki-client