Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: C6KOjVrehZv3Zbqkm10dfVa+4VRkbb/KX8yZGQX5/TM=
Subject key identifier: 86:66:C0:96:5B:74:BF:5B:F6:D6:C7:F2:AF:8B:AC:0F:D7:53:5F:9B
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019DA378256DB19996914D577FC999D4B328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 08D4
Signing time: Sun 19 Apr 2026 02:00:53 +0000
Manifest this update: Sun 19 Apr 2026 02:00:53 +0000
Manifest next update: Mon 20 Apr 2026 02:00:53 +0000
Files and hashes: 1: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (hash: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4=)
2: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: kOddMHMZdhxZBI/6jAoWkR0j99tkwUETz1moPL41l+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:25:6d:b1:99:96:91:4d:57:7f:c9:99:d4:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Apr 19 02:00:53 2026 GMT
Not After : Apr 20 02:00:53 2026 GMT
Subject: CN=8666c0965b74bf5bf6d6c7f2af8bac0fd7535f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:a3:43:56:7d:ac:49:61:bb:3f:59:71:e9:
24:a7:25:4c:dc:5c:e5:09:c9:24:c2:51:5e:04:7b:
63:a4:15:e5:ad:a7:78:aa:98:c4:a7:6c:0b:7b:e5:
95:e9:b6:fe:2e:fd:11:c9:0e:45:7c:44:32:f1:36:
c3:d9:16:8d:0f:ea:56:0e:43:b5:72:05:d3:de:23:
df:4a:d3:eb:25:73:36:39:90:c9:81:db:57:24:4b:
ad:59:0e:11:30:77:aa:ed:27:fa:36:2a:6b:40:6f:
12:e3:63:d7:b3:92:e1:dd:ef:f3:c9:e7:e2:e7:5e:
0b:6f:45:a6:6d:32:e4:77:bc:ae:1a:3a:7f:67:48:
19:65:3c:c5:0b:43:f8:ac:be:2b:96:d6:a5:44:59:
f6:d4:c0:26:70:61:27:92:0d:cb:12:4a:51:b7:f8:
0b:07:d8:97:08:c7:51:c4:f2:44:7f:45:74:33:31:
be:de:9a:4f:fd:b5:16:3d:2e:db:6f:cc:da:38:7a:
90:14:24:d3:7a:26:1d:cf:f7:9c:32:bf:00:07:af:
f8:f9:61:64:ac:b0:81:92:80:d7:ce:b3:e9:2b:b6:
c8:2e:31:f6:29:85:09:0c:34:8c:f3:8b:96:f4:c4:
bf:09:aa:fa:2b:00:68:a4:1c:fa:49:a5:04:e9:12:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:C0:96:5B:74:BF:5B:F6:D6:C7:F2:AF:8B:AC:0F:D7:53:5F:9B
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:97:48:fd:82:fd:76:0c:8d:b9:17:d9:c3:6c:79:5a:b4:32:
6d:6f:68:80:e9:57:06:3d:37:c8:09:11:a4:1e:bc:6a:c4:df:
32:eb:14:18:02:07:73:b9:c4:f5:40:03:d3:14:0f:ac:d5:d8:
ae:99:3b:79:cb:27:cd:59:51:c9:cf:50:9d:cd:0d:eb:52:7c:
e6:89:b8:23:09:95:3d:60:9e:4e:2f:38:2f:b1:0a:77:17:16:
4c:50:83:81:7e:2d:3e:62:90:89:39:b7:f2:be:dc:a6:4b:42:
03:31:fb:98:6e:d7:5a:c0:53:4e:2a:f5:6c:f7:72:a7:d0:18:
f7:61:b7:b0:15:dd:26:bb:75:a7:52:d6:5e:34:74:8e:d6:0c:
a3:f1:7c:d9:43:e8:77:98:41:95:05:c0:10:15:77:ce:ec:af:
c4:df:e1:d9:94:e4:38:05:15:5a:bc:a4:9a:28:b3:5b:21:56:
78:2d:02:5a:77:07:8f:1d:44:c3:f0:bd:33:5d:86:b9:4f:57:
a2:90:52:1b:02:10:4a:24:db:16:22:19:d8:7b:b4:a2:a5:77:
69:23:07:18:af:5b:ef:0c:9f:a9:58:7c:57:f4:68:ee:34:4f:
e3:da:a2:47:ce:a3:84:22:7d:f2:13:f2:19:9a:70:10:04:6c:
94:11:28:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeCVtsZmWkU1Xf8mZ1LMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNTU2NDFhMDdiMWU0NTViNzg5MmI5MmQ4MGQ2MDkxMjM5
MWIyMGQwHhcNMjYwNDE5MDIwMDUzWhcNMjYwNDIwMDIwMDUzWjAzMTEwLwYDVQQD
Eyg4NjY2YzA5NjViNzRiZjViZjZkNmM3ZjJhZjhiYWMwZmQ3NTM1ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7mjQ1Z9rElhuz9ZcekkpyVM3Fzl
CckkwlFeBHtjpBXlrad4qpjEp2wLe+WV6bb+Lv0RyQ5FfEQy8TbD2RaND+pWDkO1
cgXT3iPfStPrJXM2OZDJgdtXJEutWQ4RMHeq7Sf6NiprQG8S42PXs5Lh3e/zyefi
514Lb0WmbTLkd7yuGjp/Z0gZZTzFC0P4rL4rltalRFn21MAmcGEnkg3LEkpRt/gL
B9iXCMdRxPJEf0V0MzG+3ppP/bUWPS7bb8zaOHqQFCTTeiYdz/ecMr8AB6/4+WFk
rLCBkoDXzrPpK7bILjH2KYUJDDSM84uW9MS/Car6KwBopBz6SaUE6RIsxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZmwJZbdL9b9tbH8q+LrA/XU1+bMB8GA1UdIwQY
MBaAFJFVZBoHseRVt4krktgNYJEjkbINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEt
YmNiZmIyMTdiYzhmLzEva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEtYmNiZmIyMTdiYzhm
LzEva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJdI/YL9
dgyNuRfZw2x5WrQybW9ogOlXBj03yAkRpB68asTfMusUGAIHc7nE9UAD0xQPrNXY
rpk7ecsnzVlRyc9Qnc0N61J85om4IwmVPWCeTi84L7EKdxcWTFCDgX4tPmKQiTm3
8r7cpktCAzH7mG7XWsBTTir1bPdyp9AY92G3sBXdJrt1p1LWXjR0jtYMo/F82UPo
d5hBlQXAEBV3zuyvxN/h2ZTkOAUVWrykmiizWyFWeC0CWncHjx1Ew/C9M12GuU9X
opBSGwIQSiTbFiIZ2Hu0oqV3aSMHGK9b7wyfqVh8V/Ro7jRP49qiR86jhCJ98hPy
GZpwEARslBEoxg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:54 2026 by rpki-client