Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: igsc3ykEkT1OG+IRuuV6wCGyZEKqwGY1ajHlUEqhT3A=
Subject key identifier: 37:B6:FB:DE:92:75:0F:D7:FB:E6:5F:BC:40:38:65:07:03:94:5D:99
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 019D9A3E3E04FDBE1A5F055523474ED2810A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 04B5
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: XmZEQeGXGcnnS+OXDvm7Ast4UNXiEEm7wq0utCWLUI4=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3e:04:fd:be:1a:5f:05:55:23:47:4e:d2:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=37b6fbde92750fd7fbe65fbc4038650703945d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:22:9b:d1:d1:7b:24:46:7e:09:c7:a3:f4:
8d:67:52:d1:17:95:80:7c:da:dc:8e:02:d0:68:e8:
e3:68:87:85:6e:52:a8:da:27:08:8b:6f:23:0a:01:
e1:49:5f:70:8a:86:b6:6c:11:65:89:6d:aa:ea:51:
de:ec:54:44:84:14:63:41:19:db:51:d9:db:d7:dd:
8d:1d:9f:43:85:ed:98:d3:c4:a1:36:1a:e2:4f:38:
87:0a:70:23:f8:52:a6:0a:70:a1:aa:21:05:d3:73:
95:a0:a1:89:7c:3e:71:bc:03:23:bf:a2:13:48:fd:
80:7f:86:13:56:bb:3f:e6:44:b3:31:fa:7c:f5:3f:
da:08:0c:a8:8e:a8:f4:ba:49:7a:b3:46:d3:52:db:
e3:45:43:d9:63:7e:fb:6d:95:99:8f:1a:da:ef:97:
c6:56:ec:69:0f:6e:cb:82:92:49:52:d5:d0:39:2e:
d3:3b:ad:be:ee:15:2b:d8:ed:eb:fa:59:b6:a3:93:
b2:44:a4:2b:24:cc:16:a5:63:30:e5:e9:d1:ba:ae:
14:9d:cd:3d:33:93:09:eb:6f:c0:ba:10:09:a1:6b:
6c:cc:96:a4:9f:b0:3c:47:a2:7e:8c:11:bb:f6:79:
87:31:ab:07:43:9f:29:6e:6b:55:36:65:dd:9d:d9:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:FB:DE:92:75:0F:D7:FB:E6:5F:BC:40:38:65:07:03:94:5D:99
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:3c:97:0f:e1:df:97:20:ea:5a:66:0d:db:1c:15:fa:fd:
73:98:c6:66:5e:08:be:e0:48:bd:06:11:2a:61:9a:16:bd:32:
27:e6:fa:7a:1f:55:d3:3a:1c:81:26:a5:2a:72:78:8c:b4:eb:
31:0f:5c:b9:53:41:75:c8:19:42:4a:05:2c:34:c0:63:38:f0:
55:84:78:4c:b6:03:e9:e6:f1:f1:c7:ec:37:e1:60:92:59:43:
87:3e:fb:de:97:32:04:5a:b7:c1:14:e7:c0:b3:e9:ea:0a:98:
e1:ee:f1:bd:45:16:9c:ef:24:f9:7c:8d:8a:b9:32:3e:99:52:
7a:1b:df:a4:bc:ef:e8:7d:17:63:d4:64:27:64:22:7b:fe:8e:
2c:ee:25:26:af:82:d0:20:7f:ff:20:a7:29:cc:09:64:bd:c5:
8d:2c:4d:17:e8:91:0b:40:2c:e5:08:d0:16:20:f5:3e:92:95:
e7:9f:e6:31:d0:86:9a:47:b1:98:c8:1c:d9:6e:61:da:8d:c9:
ad:a7:ac:52:0a:00:5f:b4:65:6e:6b:89:9b:51:6c:99:28:2f:
3a:f7:6d:d8:37:74:92:1c:fd:01:ab:d9:87:76:3d:6f:ee:ab:
30:e6:06:1d:1c:85:ce:fa:af:45:cc:30:38:f5:99:b3:f0:91:
f7:af:ee:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPj4E/b4aXwVVI0dO0oEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0
ZmM4ZWQwHhcNMjYwNDE3MDcwMTAzWhcNMjYwNDE4MDcwMTAzWjAzMTEwLwYDVQQD
EygzN2I2ZmJkZTkyNzUwZmQ3ZmJlNjVmYmM0MDM4NjUwNzAzOTQ1ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwAim9HReyRGfgnHo/SNZ1LRF5WA
fNrcjgLQaOjjaIeFblKo2icIi28jCgHhSV9wioa2bBFliW2q6lHe7FREhBRjQRnb
Udnb192NHZ9Dhe2Y08ShNhriTziHCnAj+FKmCnChqiEF03OVoKGJfD5xvAMjv6IT
SP2Af4YTVrs/5kSzMfp89T/aCAyojqj0ukl6s0bTUtvjRUPZY377bZWZjxra75fG
VuxpD27LgpJJUtXQOS7TO62+7hUr2O3r+lm2o5OyRKQrJMwWpWMw5enRuq4Unc09
M5MJ62/AuhAJoWtszJakn7A8R6J+jBG79nmHMasHQ58pbmtVNmXdndlJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe2+96SdQ/X++ZfvEA4ZQcDlF2ZMB8GA1UdIwQY
MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt
NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5
LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxI8lw/h
35cg6lpmDdscFfr9c5jGZl4IvuBIvQYRKmGaFr0yJ+b6eh9V0zocgSalKnJ4jLTr
MQ9cuVNBdcgZQkoFLDTAYzjwVYR4TLYD6ebx8cfsN+FgkllDhz773pcyBFq3wRTn
wLPp6gqY4e7xvUUWnO8k+XyNirkyPplSehvfpLzv6H0XY9RkJ2Qie/6OLO4lJq+C
0CB//yCnKcwJZL3FjSxNF+iRC0As5QjQFiD1PpKV55/mMdCGmkexmMgc2W5h2o3J
raesUgoAX7RlbmuJm1FsmSgvOvdt2Dd0khz9AavZh3Y9b+6rMOYGHRyFzvqvRcww
OPWZs/CR96/u6w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:26 2026 by rpki-client