Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: 238GWysWYOqGaiB5MdErbKKZwfBogW6ms/yOm9P+EQo=
Subject key identifier: B2:56:97:46:5B:C7:91:BF:19:F1:83:D7:0D:B7:E6:3A:0C:CF:DC:9E
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019D9AAB840D2F88964B4B04C4393389EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: CD
Signing time: Fri 17 Apr 2026 09:00:24 +0000
Manifest this update: Fri 17 Apr 2026 09:00:24 +0000
Manifest next update: Sat 18 Apr 2026 09:00:24 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: xkmKz2jsU9++gF1dMHQDsRiSLO0ApqhDPB5nsepgDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:84:0d:2f:88:96:4b:4b:04:c4:39:33:89:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Apr 17 09:00:24 2026 GMT
Not After : Apr 18 09:00:24 2026 GMT
Subject: CN=b25697465bc791bf19f183d70db7e63a0ccfdc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:b4:60:d2:e1:a3:8e:aa:fb:2c:9a:c3:95:
01:b4:46:f1:ff:4c:4f:32:2b:a4:3b:9b:fd:28:36:
29:97:d0:91:a2:5e:8e:2f:cb:d5:5c:41:64:b1:ad:
4b:fa:cf:ca:c1:ab:6b:aa:e9:79:dd:fb:aa:bf:64:
3e:07:9f:17:ed:de:42:0d:c2:ca:f2:90:7e:4d:4b:
0e:a1:94:ff:f0:ad:da:0a:6f:92:91:9c:d4:a2:9e:
b7:73:67:20:42:da:ba:a9:81:2f:78:e5:05:dc:6e:
47:ad:7c:80:f1:20:a4:8c:a5:39:a1:14:9e:40:13:
30:05:26:b0:89:5d:3b:f8:2f:32:df:f6:62:c7:6c:
af:ef:27:03:3a:47:74:c9:29:62:63:61:d8:91:08:
2f:f2:20:6b:41:cc:b6:a4:81:c2:a3:64:f6:35:4f:
08:83:92:0d:b7:01:1c:c4:de:0c:d1:ce:7c:fd:e6:
53:3c:de:7b:14:ea:92:62:1d:3e:5a:77:60:86:06:
4c:de:f7:6d:80:88:41:26:48:a4:46:77:c3:87:03:
3e:8a:bf:61:fb:3c:00:a8:80:f2:97:b3:32:60:64:
3c:b6:0f:a3:a3:a5:4f:9d:b2:a4:ba:d5:71:3e:79:
2b:a0:d0:3e:f3:98:62:8d:04:c9:0a:22:7c:3d:b8:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:97:46:5B:C7:91:BF:19:F1:83:D7:0D:B7:E6:3A:0C:CF:DC:9E
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:b9:4c:c5:2d:c2:39:87:ad:a1:7b:06:24:e1:8e:2c:ba:
9d:db:04:1a:37:b5:fe:f0:57:7b:f4:68:40:ca:f0:5a:ae:d1:
5d:c0:9c:1d:d3:08:a7:da:58:af:8f:7a:99:65:64:fd:e5:56:
a6:75:fb:82:ef:6e:6a:9e:26:97:20:a5:ac:b6:d7:56:39:d1:
0f:35:7b:15:a9:0a:97:56:0f:af:cb:8f:08:c1:e7:e0:bf:18:
e0:bf:aa:24:3f:42:dc:24:03:e9:8c:44:e0:78:bd:f3:a0:4d:
29:06:01:dc:bd:65:13:4a:98:8e:9a:f1:e8:b1:4c:65:43:10:
f7:cc:34:e5:a8:88:40:e5:3c:b1:66:1b:ad:86:26:71:c9:13:
fc:af:f8:b0:ed:dc:7a:80:b1:0b:d0:0d:ac:e4:a6:d1:98:d8:
5c:fb:96:b3:3a:7d:ca:d3:bb:9a:59:ae:22:58:16:8b:20:04:
84:1e:45:88:5e:53:17:cc:44:a3:98:ec:6d:b6:70:aa:95:ef:
98:a6:0f:2b:51:3f:29:63:b6:ab:4e:fd:1f:98:71:82:a2:0a:
7c:ae:a2:12:1f:ec:3f:41:cd:10:34:f7:50:cc:b3:94:a2:62:
9e:e8:5a:e2:53:24:77:d0:42:4b:c7:3f:f8:bc:eb:c6:e0:aa:
d3:51:46:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq4QNL4iWS0sExDkzie+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTMzMDgxMzdiNDU1YjY1YTZjMjg5ZWIwM2M0ZDRlMGZi
NmZjZmUwHhcNMjYwNDE3MDkwMDI0WhcNMjYwNDE4MDkwMDI0WjAzMTEwLwYDVQQD
EyhiMjU2OTc0NjViYzc5MWJmMTlmMTgzZDcwZGI3ZTYzYTBjY2ZkYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJa0YNLho46q+yyaw5UBtEbx/0xP
MiukO5v9KDYpl9CRol6OL8vVXEFksa1L+s/Kwatrqul53fuqv2Q+B58X7d5CDcLK
8pB+TUsOoZT/8K3aCm+SkZzUop63c2cgQtq6qYEveOUF3G5HrXyA8SCkjKU5oRSe
QBMwBSawiV07+C8y3/Zix2yv7ycDOkd0ySliY2HYkQgv8iBrQcy2pIHCo2T2NU8I
g5INtwEcxN4M0c58/eZTPN57FOqSYh0+WndghgZM3vdtgIhBJkikRnfDhwM+ir9h
+zwAqIDyl7MyYGQ8tg+jo6VPnbKkutVxPnkroNA+85hijQTJCiJ8PbjIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJWl0Zbx5G/GfGD1w235joMz9yeMB8GA1UdIwQY
MBaAFCpTMIE3tFW2WmwonrA8TU4Ptvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgt
NzgyMjgxNTE1OTA3LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgtNzgyMjgxNTE1OTA3
LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsm5TMUt
wjmHraF7BiThjiy6ndsEGje1/vBXe/RoQMrwWq7RXcCcHdMIp9pYr496mWVk/eVW
pnX7gu9uap4mlyClrLbXVjnRDzV7FakKl1YPr8uPCMHn4L8Y4L+qJD9C3CQD6YxE
4Hi986BNKQYB3L1lE0qYjprx6LFMZUMQ98w05aiIQOU8sWYbrYYmcckT/K/4sO3c
eoCxC9ANrOSm0ZjYXPuWszp9ytO7mlmuIlgWiyAEhB5FiF5TF8xEo5jsbbZwqpXv
mKYPK1E/KWO2q079H5hxgqIKfK6iEh/sP0HNEDT3UMyzlKJinuha4lMkd9BCS8c/
+LzrxuCq01FGiw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:49 2026 by rpki-client