Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: 6MwLpBQ6kMXveTe+FfY5Mp+3kT7Rd6xOXXh2ZlUd8OI=
Subject key identifier: 53:4B:26:78:60:11:4E:70:6A:37:5A:6C:62:80:0F:30:83:EA:84:89
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019DA41CD2540189576E2C90BCBD8DC70916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0DE4
Signing time: Sun 19 Apr 2026 05:00:45 +0000
Manifest this update: Sun 19 Apr 2026 05:00:45 +0000
Manifest next update: Mon 20 Apr 2026 05:00:45 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: m5alZoi3UfDLOJnXEA0QbBNA343TIAjYIXgNiEmRcgg=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d2:54:01:89:57:6e:2c:90:bc:bd:8d:c7:09:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Apr 19 05:00:45 2026 GMT
Not After : Apr 20 05:00:45 2026 GMT
Subject: CN=534b267860114e706a375a6c62800f3083ea8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:8c:c0:f9:a2:07:2a:9b:8a:82:6f:d6:f1:
e1:76:36:70:e9:92:60:a4:5f:c3:22:65:3d:8f:e3:
66:06:3c:80:11:f8:e5:a8:f5:3a:43:91:5d:be:c2:
7d:14:b1:84:ad:07:62:4a:b1:00:27:ad:7d:5b:72:
63:ae:1c:e1:3f:8b:11:db:a9:b7:f2:7f:39:a7:84:
19:be:bf:45:3a:67:f8:4b:ab:66:ec:da:79:a2:64:
86:ca:54:fa:d8:71:70:47:b9:d6:16:f1:c3:5b:64:
65:5a:69:5d:0f:8d:27:41:65:f9:bb:27:14:3e:83:
c8:a9:cd:5b:57:7d:2c:cd:cd:86:ef:4f:4f:11:5f:
41:56:0c:fa:4b:21:64:ca:89:66:c5:82:98:7c:fe:
da:9e:0f:01:7a:50:39:55:a2:cc:72:05:52:1e:6f:
17:e3:70:76:69:6f:23:2d:95:20:05:c5:ff:fb:3e:
ab:2f:d4:c1:b6:51:1b:c1:00:88:40:54:b4:07:0d:
5c:a9:f4:c0:38:3e:0f:f7:b9:c5:3f:32:62:fe:32:
4f:13:bf:1a:93:23:cd:49:15:f1:1c:9e:03:8c:c1:
f0:12:39:46:f1:cd:f2:d8:1e:d5:de:61:b2:3c:64:
74:4a:23:48:34:3c:bd:16:a2:b3:a9:db:21:b6:8e:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:26:78:60:11:4E:70:6A:37:5A:6C:62:80:0F:30:83:EA:84:89
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0d:19:e8:28:9f:a1:89:43:5b:7f:a9:94:b9:2a:41:5a:50:
90:17:7e:16:c5:33:08:c3:cc:42:42:ab:54:96:fd:cb:d7:df:
98:e6:3f:be:13:ee:1f:15:0e:60:b7:1b:3b:f6:f5:18:fe:4d:
85:eb:b8:e0:50:f1:19:08:e4:9d:60:29:21:76:bb:ba:82:42:
c4:44:b7:09:75:53:6b:b7:0d:e1:50:06:d1:b4:0e:4b:85:88:
c9:2f:5a:23:1b:d2:ef:d6:4c:f5:e7:f3:ef:94:b9:3b:9a:77:
c6:24:9d:fa:44:78:7d:e5:8b:b8:c4:01:ec:42:cd:b2:83:93:
4a:f9:86:b6:c4:d8:d3:19:d7:dd:e8:5d:e6:e9:06:c5:b8:b9:
8d:c0:4c:73:41:f4:12:38:c0:e5:b8:20:a4:f5:dc:df:02:e2:
e4:97:f8:06:6c:11:19:e1:73:87:4d:cb:5f:ef:54:b1:cc:ee:
80:1f:c2:b7:0e:6e:e6:68:75:30:1c:e1:e7:de:94:5e:86:a0:
a9:fb:d8:03:27:d1:d2:f6:f9:82:74:f6:65:4a:36:a0:1f:ef:
1d:1d:2b:49:1d:c0:f4:9b:56:22:43:b6:83:b5:e0:8a:64:ff:
34:8a:c5:00:ce:a9:29:b0:47:98:82:b8:69:bd:f1:c9:65:b4:
80:84:75:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHNJUAYlXbiyQvL2NxwkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjYwNDE5MDUwMDQ1WhcNMjYwNDIwMDUwMDQ1WjAzMTEwLwYDVQQD
Eyg1MzRiMjY3ODYwMTE0ZTcwNmEzNzVhNmM2MjgwMGYzMDgzZWE4NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAromMwPmiByqbioJv1vHhdjZw6ZJg
pF/DImU9j+NmBjyAEfjlqPU6Q5FdvsJ9FLGErQdiSrEAJ619W3JjrhzhP4sR26m3
8n85p4QZvr9FOmf4S6tm7Np5omSGylT62HFwR7nWFvHDW2RlWmldD40nQWX5uycU
PoPIqc1bV30szc2G709PEV9BVgz6SyFkyolmxYKYfP7ang8BelA5VaLMcgVSHm8X
43B2aW8jLZUgBcX/+z6rL9TBtlEbwQCIQFS0Bw1cqfTAOD4P97nFPzJi/jJPE78a
kyPNSRXxHJ4DjMHwEjlG8c3y2B7V3mGyPGR0SiNINDy9FqKzqdshto79SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNLJnhgEU5wajdabGKADzCD6oSJMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ0Z6Cif
oYlDW3+plLkqQVpQkBd+FsUzCMPMQkKrVJb9y9ffmOY/vhPuHxUOYLcbO/b1GP5N
heu44FDxGQjknWApIXa7uoJCxES3CXVTa7cN4VAG0bQOS4WIyS9aIxvS79ZM9efz
75S5O5p3xiSd+kR4feWLuMQB7ELNsoOTSvmGtsTY0xnX3ehd5ukGxbi5jcBMc0H0
EjjA5bggpPXc3wLi5Jf4BmwRGeFzh03LX+9UsczugB/Ctw5u5mh1MBzh596UXoag
qfvYAyfR0vb5gnT2ZUo2oB/vHR0rSR3A9JtWIkO2g7XgimT/NIrFAM6pKbBHmIK4
ab3xyWW0gIR1kw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:22 2026 by rpki-client