Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: k9YFADMw0Gjf9P5WBSGNHgaybwxpQosGfWsIa4rrrPE=
Subject key identifier: 35:EF:37:A1:64:2E:72:C0:11:37:5A:C3:DD:D1:B6:70:90:B7:D3:89
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019D984FAE8D30AA533FDCD66376B4D306EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:00:51 +0000
Manifest this update: Thu 16 Apr 2026 22:00:51 +0000
Manifest next update: Fri 17 Apr 2026 22:00:51 +0000
Files and hashes: 1: 8EMMRLq1ba74wsT5jVIHYHbcc00.roa (hash: OWkinLuII34KhV3crRd1+k5jvfaxcPKAbZAj2n4o9vI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: WD/X1IsGyJ7eBIdltjLBUBTbKbY37UHr+to1ioXxniw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ae:8d:30:aa:53:3f:dc:d6:63:76:b4:d3:06:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Apr 16 22:00:51 2026 GMT
Not After : Apr 17 22:00:51 2026 GMT
Subject: CN=35ef37a1642e72c011375ac3ddd1b67090b7d389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:df:d5:95:c4:80:dc:db:8c:af:0a:4c:0e:
ab:de:1d:3c:e4:92:c7:e9:aa:ed:54:7d:6b:5d:6e:
8d:f8:ce:7b:e7:86:8d:06:ea:32:1f:20:f8:f8:c4:
9f:31:67:8b:50:7b:ea:0a:d9:bc:95:24:77:7a:63:
4a:2d:f1:b2:a8:0b:14:ed:72:a3:22:d8:fe:32:9d:
a2:72:52:f9:36:98:ef:29:2e:3c:03:f6:8f:91:fe:
a8:b2:e6:6c:b0:03:24:84:30:38:19:5c:6d:85:a3:
22:dc:e2:c0:5f:02:ce:b5:e6:37:27:26:20:8f:cb:
fb:65:1f:53:a9:05:9a:c1:14:d7:f9:de:36:3b:09:
4e:3f:6b:28:b8:7b:47:f6:b9:bc:26:f8:c7:34:c1:
a8:c3:b4:cf:5d:6f:70:1c:10:0d:4e:95:f8:67:7b:
d6:0b:b9:e0:ca:d2:9a:25:d0:9d:b6:3f:00:00:e9:
e0:5f:1d:62:2e:95:02:c5:0a:b4:2e:5a:69:b6:16:
fe:ab:9b:ae:e9:20:c8:6a:b4:ad:1f:18:a8:06:76:
76:c9:e4:84:e4:fa:12:56:5f:32:19:19:b7:35:fc:
11:66:ac:a3:1c:51:8d:38:c8:61:e3:5c:68:c0:2c:
84:2e:5d:46:ad:22:3e:3b:27:ab:5b:92:f5:cb:68:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:37:A1:64:2E:72:C0:11:37:5A:C3:DD:D1:B6:70:90:B7:D3:89
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:52:98:59:76:c2:1d:c4:9b:9d:b2:a2:5c:07:0d:d9:bd:
e6:f4:cf:c1:a7:e5:c9:56:31:60:6b:6c:15:94:b5:21:f8:81:
07:30:7b:09:8b:0b:ae:85:14:16:88:52:56:39:da:e2:24:95:
88:99:d3:0b:41:96:39:41:fc:d5:1b:64:23:63:f8:a5:59:36:
2e:0c:5b:40:b5:66:cd:ff:02:36:25:f5:2d:ef:e5:37:c3:ff:
1c:a2:41:8f:c5:dc:a5:d2:85:4a:86:27:8c:53:dd:2f:a2:8b:
8e:15:3d:43:ed:bf:95:7c:da:cb:04:58:01:37:6e:a0:60:ee:
1d:a5:59:6f:39:de:b3:b9:95:38:c7:f7:d1:aa:89:20:cf:45:
60:dd:f1:d2:c5:07:39:cf:0a:77:3a:6f:26:02:ce:4f:e7:49:
a5:94:64:0b:82:f0:66:e2:82:21:55:3e:92:08:67:94:7a:6d:
18:d6:cb:dd:c9:6e:1e:a5:e8:94:04:0a:97:e3:15:f7:36:7b:
72:14:db:e3:23:9c:85:32:28:c1:71:a4:cf:c0:53:d5:a9:0d:
84:2a:a3:c5:6c:fe:bf:df:1b:71:16:78:bf:d8:c0:cd:41:3c:
a6:02:05:e5:97:44:f0:dd:be:3b:fb:80:d2:86:41:c2:0b:e9:
20:f4:5d:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT66NMKpTP9zWY3a00wbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjYwNDE2MjIwMDUxWhcNMjYwNDE3MjIwMDUxWjAzMTEwLwYDVQQD
EygzNWVmMzdhMTY0MmU3MmMwMTEzNzVhYzNkZGQxYjY3MDkwYjdkMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPnf1ZXEgNzbjK8KTA6r3h085JLH
6artVH1rXW6N+M5754aNBuoyHyD4+MSfMWeLUHvqCtm8lSR3emNKLfGyqAsU7XKj
Itj+Mp2iclL5NpjvKS48A/aPkf6osuZssAMkhDA4GVxthaMi3OLAXwLOteY3JyYg
j8v7ZR9TqQWawRTX+d42OwlOP2souHtH9rm8JvjHNMGow7TPXW9wHBANTpX4Z3vW
C7ngytKaJdCdtj8AAOngXx1iLpUCxQq0Llppthb+q5uu6SDIarStHxioBnZ2yeSE
5PoSVl8yGRm3NfwRZqyjHFGNOMhh41xowCyELl1GrSI+OyerW5L1y2grGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXvN6FkLnLAETdaw93RtnCQt9OJMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw5SmFl2
wh3Em52yolwHDdm95vTPwaflyVYxYGtsFZS1IfiBBzB7CYsLroUUFohSVjna4iSV
iJnTC0GWOUH81RtkI2P4pVk2LgxbQLVmzf8CNiX1Le/lN8P/HKJBj8XcpdKFSoYn
jFPdL6KLjhU9Q+2/lXzaywRYATduoGDuHaVZbznes7mVOMf30aqJIM9FYN3x0sUH
Oc8KdzpvJgLOT+dJpZRkC4LwZuKCIVU+kghnlHptGNbL3cluHqXolAQKl+MV9zZ7
chTb4yOchTIowXGkz8BT1akNhCqjxWz+v98bcRZ4v9jAzUE8pgIF5ZdE8N2+O/uA
0oZBwgvpIPRdpw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:28 2026 by rpki-client