Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: 6Dt/2OyDHo+hZUMfV9A1ZMAKZQps01gfkHZCB11xYCU=
Subject key identifier: EB:F3:14:23:A5:F1:18:D7:5F:A4:F5:DB:D0:89:A2:5F:A4:15:0D:5F
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 019D9B515B26D74F36F0587DAB7FC25CE974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 16CD
Signing time: Fri 17 Apr 2026 12:01:33 +0000
Manifest this update: Fri 17 Apr 2026 12:01:33 +0000
Manifest next update: Sat 18 Apr 2026 12:01:33 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: y01IOD/WPtTwxUDmh7WNF7Np4pPheodCmia9HTm7W2A=)
2: Va7ccuyr1gwIPxh57e6tKLedSCw.roa (hash: Href7Vt90sb2zBKLkX06zqhinA47HJQXH9/GsT7Lagw=)
3: lyFAZNxDoVB_4-IZx9taISL-h1Y.roa (hash: kzhZQdnTTMEyyH8y5o2LcLLVtV/D0+7gimOZT6GoW+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5b:26:d7:4f:36:f0:58:7d:ab:7f:c2:5c:e9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Apr 17 12:01:33 2026 GMT
Not After : Apr 18 12:01:33 2026 GMT
Subject: CN=ebf31423a5f118d75fa4f5dbd089a25fa4150d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:96:bc:d9:c6:73:6c:c5:2f:1f:d6:87:75:
aa:08:9c:f1:07:91:9b:b9:a0:8b:0b:1f:b6:03:54:
e1:7e:7d:1e:ea:f5:20:b2:63:8d:46:5b:2f:f1:8e:
22:35:e4:35:ce:b5:69:3b:2d:d1:b0:86:7c:70:48:
6c:8f:c4:ac:b1:a4:42:f4:46:b4:b9:16:ab:ca:bf:
19:5d:a4:c9:3d:84:45:fb:78:64:de:f8:14:03:03:
29:cf:b7:ea:bc:5a:7e:03:64:90:bd:31:37:e9:7f:
d7:ab:d4:61:dc:59:a5:07:5b:b8:ee:c3:4f:04:b4:
97:b4:7c:4e:d4:c4:11:55:83:a2:f8:22:cd:8c:f6:
e9:0c:d1:94:86:b3:f0:fa:58:81:1d:9b:40:59:f9:
f1:d7:b1:1d:07:00:9e:be:9b:1e:ed:e0:ad:4d:5e:
dc:81:c4:43:92:63:bb:91:9c:7d:c7:53:42:13:4a:
3f:dc:bd:b7:c7:43:58:b3:8e:07:27:ac:d7:e9:00:
86:4e:56:28:74:67:fe:34:8f:ca:ee:23:59:6d:c8:
52:7c:2c:38:f2:ed:78:64:40:26:af:14:4a:d6:d7:
68:dd:b0:7e:c0:d1:19:5a:f6:f2:78:09:bf:32:41:
23:23:7f:7a:7d:4a:df:c3:37:24:b3:09:74:39:62:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:14:23:A5:F1:18:D7:5F:A4:F5:DB:D0:89:A2:5F:A4:15:0D:5F
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:f5:5e:a3:a1:9c:fb:af:6f:6f:8c:d3:8c:f3:41:05:0a:
df:8a:e1:b8:85:cf:4b:f2:48:10:50:81:e5:94:72:81:6b:6d:
dc:d7:f7:f3:db:85:69:13:1a:2b:f5:7d:11:aa:28:88:36:94:
ce:d7:5e:09:d4:16:4b:ff:b7:b9:01:d6:c1:24:cb:1c:a9:3c:
db:18:83:1e:14:81:92:db:7e:44:bf:cd:87:a8:a2:d3:f7:56:
1c:b4:2c:68:6e:c2:63:10:57:30:5d:06:6b:6e:e8:97:bd:8e:
ed:65:c3:6c:85:2b:49:32:6d:5e:64:b2:40:f5:a4:99:38:b4:
c5:0a:ff:58:0b:44:c3:2f:b6:91:3b:c4:36:cb:c3:7e:d0:53:
01:cf:c9:b4:40:2e:d4:e1:72:9b:85:d8:4f:b5:1c:84:7b:6f:
07:0a:d5:a5:b7:e3:29:8b:09:f6:0c:53:ef:0b:89:73:be:1f:
af:2b:0d:4d:93:42:b8:f5:f5:34:f5:a7:a2:2b:a9:c3:b2:ad:
56:d7:84:e1:7e:c8:7c:a1:5b:fa:80:29:1b:26:73:eb:74:fc:
dd:0e:91:f0:80:ef:d7:ca:c4:77:ca:93:5f:5b:99:96:10:12:
27:7f:ac:98:02:93:ee:c4:fd:1a:dd:38:ee:29:02:8a:af:84:
db:0e:7a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVsm10828Fh9q3/CXOl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl
YzE4OWMwHhcNMjYwNDE3MTIwMTMzWhcNMjYwNDE4MTIwMTMzWjAzMTEwLwYDVQQD
EyhlYmYzMTQyM2E1ZjExOGQ3NWZhNGY1ZGJkMDg5YTI1ZmE0MTUwZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrmWvNnGc2zFLx/Wh3WqCJzxB5Gb
uaCLCx+2A1Thfn0e6vUgsmONRlsv8Y4iNeQ1zrVpOy3RsIZ8cEhsj8SssaRC9Ea0
uRaryr8ZXaTJPYRF+3hk3vgUAwMpz7fqvFp+A2SQvTE36X/Xq9Rh3FmlB1u47sNP
BLSXtHxO1MQRVYOi+CLNjPbpDNGUhrPw+liBHZtAWfnx17EdBwCevpse7eCtTV7c
gcRDkmO7kZx9x1NCE0o/3L23x0NYs44HJ6zX6QCGTlYodGf+NI/K7iNZbchSfCw4
8u14ZEAmrxRK1tdo3bB+wNEZWvbyeAm/MkEjI396fUrfwzckswl0OWKuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvzFCOl8RjXX6T129CJol+kFQ1fMB8GA1UdIwQY
MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt
MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk
LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyj1XqOh
nPuvb2+M04zzQQUK34rhuIXPS/JIEFCB5ZRygWtt3Nf389uFaRMaK/V9EaooiDaU
ztdeCdQWS/+3uQHWwSTLHKk82xiDHhSBktt+RL/Nh6ii0/dWHLQsaG7CYxBXMF0G
a27ol72O7WXDbIUrSTJtXmSyQPWkmTi0xQr/WAtEwy+2kTvENsvDftBTAc/JtEAu
1OFym4XYT7UchHtvBwrVpbfjKYsJ9gxT7wuJc74frysNTZNCuPX1NPWnoiupw7Kt
VteE4X7IfKFb+oApGyZz63T83Q6R8IDv18rEd8qTX1uZlhASJ3+smAKT7sT9Gt04
7ikCiq+E2w56Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:49 2026 by rpki-client