Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: S05bTNQLOBMQ6yDWdiEAkcvVZt3dq1q+ha9byj3Hn5I=
Subject key identifier: 79:0E:3C:1D:EE:1F:2F:F0:C2:74:DB:88:2D:85:CA:CB:94:92:46:43
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019D9A3ECAE0409963E3BA8FFCD911249908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 08DA
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: Muk/JXzLbmwmGJijoDnXjsPrXDVFjYJj9piEIVTndz0=)
2: ynuNLafz9LbBB3yzoCWMv9fdVAw.roa (hash: ggLRVHISQxu3PXeYplz4bZPnG+60dpFC8ZQ4LkB5T9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ca:e0:40:99:63:e3:ba:8f:fc:d9:11:24:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=790e3c1dee1f2ff0c274db882d85cacb94924643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:fe:cb:fc:92:88:fb:4a:2d:6b:8b:31:e5:
cc:bf:d8:d3:1e:8d:4f:4c:3d:1e:bb:04:99:3c:5b:
06:9f:8c:bb:a1:8d:6f:00:0f:8f:df:46:da:f1:9f:
4f:a7:d1:a2:e9:ae:38:10:0f:4b:80:d2:9f:9a:59:
c6:31:95:96:bf:15:b4:ec:92:72:69:bc:c9:f9:20:
8d:91:16:0a:60:bc:71:f3:45:ea:71:cf:27:04:85:
6f:14:15:22:a4:72:86:fa:0c:37:b9:40:65:bd:6e:
5b:f2:e8:7e:ec:ef:03:8a:9f:70:6a:41:66:77:69:
63:c8:76:53:15:33:b1:7a:5b:9d:73:2c:02:12:4c:
8e:f1:ac:08:9e:91:5f:7f:10:9a:54:2d:80:9a:02:
0c:15:69:86:bc:52:33:cc:cb:06:55:f2:10:9e:3e:
ef:78:60:62:51:07:8c:71:08:3e:05:9e:88:83:e6:
af:11:38:db:c0:59:12:a8:9c:5b:c9:af:c5:ec:73:
2f:e3:49:c3:e7:12:75:b5:89:20:32:9d:6a:fd:da:
02:ba:a5:ba:8c:45:fe:98:56:6c:f1:65:4c:ed:c5:
d4:66:fb:27:a7:23:d3:5e:f7:2b:b1:c9:7f:32:8d:
cc:82:01:a1:ac:23:53:37:b9:5b:be:ef:e8:fd:a0:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:3C:1D:EE:1F:2F:F0:C2:74:DB:88:2D:85:CA:CB:94:92:46:43
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:1f:37:3a:90:96:21:2e:23:91:17:ff:51:9d:b4:c6:87:
31:dd:c6:a5:81:98:dc:d7:b6:f9:88:8d:b5:96:74:22:4f:8c:
7c:86:85:dc:cb:44:a6:42:a6:84:e9:4d:98:5e:56:13:c1:0c:
af:ff:0d:c2:68:f2:c8:eb:2b:6d:8d:60:85:5a:85:e2:8b:c6:
fb:1b:c3:4d:a7:db:70:eb:f9:31:e1:a1:a3:99:b7:d7:ed:ca:
39:b9:6d:e4:97:90:c0:b2:ad:d2:c7:f1:de:90:6c:94:dd:93:
54:47:6b:ae:c2:8a:dd:56:10:a6:30:b0:a3:49:8a:08:e1:56:
97:0c:22:ab:81:96:bd:4a:77:f2:7e:68:fa:99:86:46:13:9f:
05:97:e3:f5:14:3c:7e:79:92:a6:e1:53:32:cb:bd:f4:a1:3a:
67:d5:ea:43:dc:4d:c7:c9:0d:f6:62:26:66:d6:02:76:d7:13:
a7:d7:02:9f:0c:aa:32:a6:c9:89:42:eb:14:92:e6:31:cd:dc:
68:f1:f2:98:b5:b5:1e:02:55:70:17:cd:a1:f3:25:09:f4:87:
d0:8e:40:b6:60:a2:46:0c:13:1d:68:ec:e6:0d:ed:3d:28:f2:
78:99:9a:8a:b7:60:9d:d7:ff:50:19:6f:28:05:cf:e2:29:5b:
0f:46:4e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPsrgQJlj47qP/NkRJJkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz
ZWIzMDIwHhcNMjYwNDE3MDcwMTM5WhcNMjYwNDE4MDcwMTM5WjAzMTEwLwYDVQQD
Eyg3OTBlM2MxZGVlMWYyZmYwYzI3NGRiODgyZDg1Y2FjYjk0OTI0NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6r+y/ySiPtKLWuLMeXMv9jTHo1P
TD0euwSZPFsGn4y7oY1vAA+P30ba8Z9Pp9Gi6a44EA9LgNKfmlnGMZWWvxW07JJy
abzJ+SCNkRYKYLxx80Xqcc8nBIVvFBUipHKG+gw3uUBlvW5b8uh+7O8Dip9wakFm
d2ljyHZTFTOxeludcywCEkyO8awInpFffxCaVC2AmgIMFWmGvFIzzMsGVfIQnj7v
eGBiUQeMcQg+BZ6Ig+avETjbwFkSqJxbya/F7HMv40nD5xJ1tYkgMp1q/doCuqW6
jEX+mFZs8WVM7cXUZvsnpyPTXvcrscl/Mo3MggGhrCNTN7lbvu/o/aCfIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkOPB3uHy/wwnTbiC2FysuUkkZDMB8GA1UdIwQY
MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt
NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0
LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUIfNzqQ
liEuI5EX/1GdtMaHMd3GpYGY3Ne2+YiNtZZ0Ik+MfIaF3MtEpkKmhOlNmF5WE8EM
r/8NwmjyyOsrbY1ghVqF4ovG+xvDTafbcOv5MeGho5m31+3KOblt5JeQwLKt0sfx
3pBslN2TVEdrrsKK3VYQpjCwo0mKCOFWlwwiq4GWvUp38n5o+pmGRhOfBZfj9RQ8
fnmSpuFTMsu99KE6Z9XqQ9xNx8kN9mImZtYCdtcTp9cCnwyqMqbJiULrFJLmMc3c
aPHymLW1HgJVcBfNofMlCfSH0I5AtmCiRgwTHWjs5g3tPSjyeJmairdgndf/UBlv
KAXP4ilbD0ZOhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:03 2026 by rpki-client