Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: QUNPmPkTK8BgukWQNuHTYerpcYyDPQGW0AgA7Lal1vY=
Subject key identifier: 17:A5:30:CA:60:54:75:CC:EE:17:1E:54:EA:3B:B7:AD:04:62:FD:DA
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019D9961DDFFC069BF39DF8CD041E025FA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 1327
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: rEthdKidTMnXZZR350W2YGuW3Io5sSqqXY6iV+bKcmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dd:ff:c0:69:bf:39:df:8c:d0:41:e0:25:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=17a530ca605475ccee171e54ea3bb7ad0462fdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:1b:5f:ac:82:57:53:4c:5b:be:d6:fe:b9:
48:69:72:11:4d:0b:b4:5f:c6:33:a9:bf:1e:41:70:
66:75:79:5e:6e:cf:7b:4f:67:e4:c6:b9:d3:bb:50:
e7:cd:41:1f:45:ca:9c:59:de:2c:60:fe:4b:6e:a6:
36:b2:66:3d:3e:8b:19:f4:61:6f:6e:09:db:48:2d:
1f:94:60:4c:f6:f9:61:36:5a:c4:f0:bf:1a:11:72:
aa:83:81:20:ec:0e:7a:2b:b6:93:0c:c7:36:f6:a2:
f2:5b:67:c2:38:0a:48:48:8f:82:e0:a9:4d:a2:9e:
10:f2:e0:61:f4:1b:93:1e:23:f7:f3:8c:fe:c4:8e:
3e:cc:82:36:be:94:2d:23:67:49:ff:3c:6e:ee:e0:
91:c9:ef:d7:35:51:b3:8e:4b:07:48:ed:09:31:92:
4c:74:f1:f1:10:cb:b9:7e:a4:be:9b:b9:ce:9c:49:
36:f8:63:52:da:43:d4:b8:b5:ed:ae:32:ff:2e:6f:
60:f9:88:da:04:46:de:18:ae:8d:c0:04:ed:f4:4b:
d4:e7:9f:cd:85:95:9e:aa:01:40:ce:41:bd:30:dd:
1b:51:bc:2a:ae:0f:62:55:dd:24:5c:7e:d4:8f:82:
38:1c:a6:49:75:8e:81:c1:29:d4:fd:e6:15:41:96:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:30:CA:60:54:75:CC:EE:17:1E:54:EA:3B:B7:AD:04:62:FD:DA
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2e:a8:81:a7:aa:58:d8:56:73:75:d6:e5:f1:fc:00:63:d3:
9c:db:7b:c0:67:94:b7:00:3e:60:4e:4c:53:45:3c:f9:23:82:
93:0b:3d:1b:22:34:c3:e6:55:b5:56:97:74:a2:8c:b9:02:4c:
25:12:b7:3f:dc:26:3b:6d:cd:1e:6b:03:c3:dd:67:32:27:18:
14:9f:9d:77:1d:4a:f7:49:eb:46:e3:fa:f8:e8:23:54:bb:6e:
52:88:df:dc:d3:83:8a:2c:d5:79:54:10:02:28:c6:32:d9:9b:
9d:44:b6:52:99:43:60:4c:81:68:02:68:84:00:39:a3:a7:ab:
8a:ea:bc:67:d2:81:ec:7b:54:51:65:f1:d2:41:39:53:64:7e:
d3:8f:b4:22:2c:2c:23:c0:1f:af:88:91:7d:80:6f:d4:e1:b4:
18:27:e8:55:1a:7d:fe:72:ad:9e:b8:a8:02:de:d4:48:01:39:
71:fc:d8:8b:40:fd:80:d8:6d:2e:50:cb:58:86:2c:4f:35:3d:
4f:6c:28:7c:9f:4c:21:d4:73:2e:be:89:9d:92:01:4b:1b:db:
25:71:03:7c:63:36:27:36:e7:41:88:b1:5f:0f:24:29:dc:54:
a3:1c:3e:0d:fa:1c:93:5e:a5:c2:f0:b4:2b:40:7d:5c:d4:df:
c8:83:0f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYd3/wGm/Od+M0EHgJfpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk
NWMxMWEwHhcNMjYwNDE3MDMwMDIwWhcNMjYwNDE4MDMwMDIwWjAzMTEwLwYDVQQD
EygxN2E1MzBjYTYwNTQ3NWNjZWUxNzFlNTRlYTNiYjdhZDA0NjJmZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGUbX6yCV1NMW77W/rlIaXIRTQu0
X8Yzqb8eQXBmdXlebs97T2fkxrnTu1DnzUEfRcqcWd4sYP5LbqY2smY9PosZ9GFv
bgnbSC0flGBM9vlhNlrE8L8aEXKqg4Eg7A56K7aTDMc29qLyW2fCOApISI+C4KlN
op4Q8uBh9BuTHiP384z+xI4+zII2vpQtI2dJ/zxu7uCRye/XNVGzjksHSO0JMZJM
dPHxEMu5fqS+m7nOnEk2+GNS2kPUuLXtrjL/Lm9g+YjaBEbeGK6NwATt9EvU55/N
hZWeqgFAzkG9MN0bUbwqrg9iVd0kXH7Uj4I4HKZJdY6BwSnU/eYVQZZ1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBelMMpgVHXM7hceVOo7t60EYv3aMB8GA1UdIwQY
MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt
ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0
LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsy6ogaeq
WNhWc3XW5fH8AGPTnNt7wGeUtwA+YE5MU0U8+SOCkws9GyI0w+ZVtVaXdKKMuQJM
JRK3P9wmO23NHmsDw91nMicYFJ+ddx1K90nrRuP6+OgjVLtuUojf3NODiizVeVQQ
AijGMtmbnUS2UplDYEyBaAJohAA5o6eriuq8Z9KB7HtUUWXx0kE5U2R+04+0Iiws
I8Afr4iRfYBv1OG0GCfoVRp9/nKtnrioAt7USAE5cfzYi0D9gNhtLlDLWIYsTzU9
T2wofJ9MIdRzLr6JnZIBSxvbJXEDfGM2JzbnQYixXw8kKdxUoxw+Dfock16lwvC0
K0B9XNTfyIMPAg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:16 2026 by rpki-client