Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: 2kobscE7OBXBQc2mTps/X5RfKWNKeGETur/J5CL0APw=
Subject key identifier: DB:3F:4E:FD:52:D7:54:14:D3:88:06:B9:0C:23:D2:DD:84:A7:90:C6
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019D992B716BE8F462E6A9EE81AF0083CDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
2: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: 4iFlNu9PE9p253a89QPXHyYPYHOGQzzqx0OOS2/3Qog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:71:6b:e8:f4:62:e6:a9:ee:81:af:00:83:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=db3f4efd52d75414d38806b90c23d2dd84a790c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:2e:97:1a:bc:32:68:39:4d:48:47:cd:d5:
2a:6d:07:98:66:38:f1:01:c8:15:c8:d6:28:b1:25:
6a:ac:75:53:5b:ca:30:64:c6:02:bd:d3:b6:bc:98:
40:a3:fe:80:e6:31:18:4c:cc:3a:a7:b7:f3:3e:73:
20:cb:52:2e:3d:45:ad:3e:1e:cd:fd:4e:ca:0d:a1:
a3:c5:9c:34:27:c3:da:73:96:f7:87:cb:98:5f:36:
3d:d3:cd:53:99:38:11:ab:d4:29:d0:da:07:55:61:
37:5e:99:75:4e:07:5b:c9:61:df:0e:09:72:ec:26:
68:04:f1:5b:00:63:09:9f:b4:a5:66:d3:4e:d1:a2:
c4:7f:68:43:34:92:2a:aa:ee:38:06:9c:ab:12:50:
26:5f:46:be:6c:a1:4f:e6:1b:37:17:08:88:43:43:
8d:69:a1:f9:8d:99:4d:66:7d:14:13:62:7d:21:ee:
af:88:ed:db:1d:d4:0f:c0:5a:7a:14:f7:68:da:09:
73:a6:b4:a6:d5:52:cc:4f:2b:bc:33:8c:80:e7:4d:
3d:aa:5e:ce:63:0e:37:3f:aa:53:f0:d4:08:ab:d8:
92:e3:eb:fa:aa:80:d2:18:a4:97:00:80:b8:d1:30:
07:2c:d7:84:33:07:43:85:d3:72:2b:70:79:ed:d2:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:4E:FD:52:D7:54:14:D3:88:06:B9:0C:23:D2:DD:84:A7:90:C6
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ad:86:48:52:3c:6c:94:a9:58:11:9b:2f:db:24:01:34:2b:
d2:fe:7f:4e:99:ce:e4:72:78:06:24:46:d9:93:df:ce:c5:bf:
2d:10:01:0a:fe:e4:2e:01:88:98:10:8f:93:d1:b8:58:7b:b3:
b6:4f:9f:92:65:3f:12:30:96:2b:5a:61:e4:06:55:9d:80:cf:
17:e9:db:82:e4:a0:9c:90:e6:37:1e:c7:1c:94:4f:17:5c:79:
12:a4:ef:fd:ef:40:c5:5f:27:87:73:a8:2c:f3:46:0a:16:3c:
62:84:dd:60:a5:ab:f6:47:10:22:7b:e2:93:9b:fb:00:01:0c:
ce:0a:d8:33:16:2e:9e:c6:4c:ad:10:c7:33:52:85:f4:71:98:
86:71:4e:7b:9f:4d:54:6d:f1:a0:a0:d2:3d:eb:b9:c3:b3:ae:
bb:e5:3a:ae:b5:e5:b5:d0:69:fb:ec:6e:e5:43:57:90:1f:70:
cd:3a:46:9d:ba:47:09:5f:66:34:27:8c:9b:e0:69:d9:79:1f:
f8:3f:d9:89:cc:c4:97:13:63:74:53:7e:95:1b:a4:67:03:49:
81:77:27:28:25:61:ab:47:2e:fb:4a:67:9c:af:4c:00:21:ce:
93:2f:20:2c:10:a2:a7:e1:af:9b:2a:eb:7f:16:3e:fa:19:09:
e1:d6:3e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3Fr6PRi5qnuga8Ag83PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjYwNDE3MDIwMDU0WhcNMjYwNDE4MDIwMDU0WjAzMTEwLwYDVQQD
EyhkYjNmNGVmZDUyZDc1NDE0ZDM4ODA2YjkwYzIzZDJkZDg0YTc5MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rQulxq8Mmg5TUhHzdUqbQeYZjjx
AcgVyNYosSVqrHVTW8owZMYCvdO2vJhAo/6A5jEYTMw6p7fzPnMgy1IuPUWtPh7N
/U7KDaGjxZw0J8Pac5b3h8uYXzY9081TmTgRq9Qp0NoHVWE3Xpl1TgdbyWHfDgly
7CZoBPFbAGMJn7SlZtNO0aLEf2hDNJIqqu44BpyrElAmX0a+bKFP5hs3FwiIQ0ON
aaH5jZlNZn0UE2J9Ie6viO3bHdQPwFp6FPdo2glzprSm1VLMTyu8M4yA5009ql7O
Yw43P6pT8NQIq9iS4+v6qoDSGKSXAIC40TAHLNeEMwdDhdNyK3B57dI9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs/Tv1S11QU04gGuQwj0t2Ep5DGMB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK2GSFI8
bJSpWBGbL9skATQr0v5/TpnO5HJ4BiRG2ZPfzsW/LRABCv7kLgGImBCPk9G4WHuz
tk+fkmU/EjCWK1ph5AZVnYDPF+nbguSgnJDmNx7HHJRPF1x5EqTv/e9AxV8nh3Oo
LPNGChY8YoTdYKWr9kcQInvik5v7AAEMzgrYMxYunsZMrRDHM1KF9HGYhnFOe59N
VG3xoKDSPeu5w7Ouu+U6rrXltdBp++xu5UNXkB9wzTpGnbpHCV9mNCeMm+Bp2Xkf
+D/ZiczElxNjdFN+lRukZwNJgXcnKCVhq0cu+0pnnK9MACHOky8gLBCip+Gvmyrr
fxY++hkJ4dY+Cg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:04 2026 by rpki-client