Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: zeQgMI/Ddgoz96OwSye1t7h2jt3hyov8LrRegVSbvVo=
Subject key identifier: 76:B6:18:D8:36:C9:60:1D:C5:79:6C:20:ED:D0:D5:39:B0:6A:34:C6
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 019D9CD0E29EDDD19315F51F690AC3C48FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 0BE4
Signing time: Fri 17 Apr 2026 19:00:28 +0000
Manifest this update: Fri 17 Apr 2026 19:00:28 +0000
Manifest next update: Sat 18 Apr 2026 19:00:28 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: pYbwRJ01Y79TOOQp4JK9tG5JWxmtrLOAtmIzf5v9Ej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:e2:9e:dd:d1:93:15:f5:1f:69:0a:c3:c4:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Apr 17 19:00:28 2026 GMT
Not After : Apr 18 19:00:28 2026 GMT
Subject: CN=76b618d836c9601dc5796c20edd0d539b06a34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:d7:35:89:9d:4e:24:ed:e7:ae:13:88:17:
5a:68:7b:10:e2:75:93:17:b5:9d:64:05:6d:c4:59:
8f:a9:2f:8a:f6:d5:3a:76:45:d1:c0:da:2b:fc:bb:
f1:68:e7:4a:b0:ec:7b:52:da:c0:97:8d:c0:19:7c:
6d:87:f2:62:99:30:0e:6a:94:3d:00:84:a4:22:29:
a4:45:6f:03:4b:2d:60:c4:85:c4:f1:9f:d7:f6:c9:
11:64:a1:6f:28:33:5f:29:c0:7c:14:54:8f:a5:90:
56:b2:17:4d:d6:cb:3e:2c:c1:e9:f5:26:54:29:0f:
fc:5d:75:32:03:62:91:49:16:73:36:05:d4:6c:5c:
11:da:af:c3:5a:49:a0:93:a3:13:dd:c1:05:b1:7e:
31:c6:3d:18:44:d7:9d:77:c7:4d:e6:59:f3:9c:6d:
68:5a:79:d8:37:68:54:aa:c7:f2:35:2f:d4:1a:32:
5b:12:4e:4b:02:8a:a0:e8:ab:a7:10:11:bf:90:3c:
bb:d1:e4:1e:13:97:a4:42:29:1f:78:be:be:d0:93:
ba:4f:4a:eb:c6:bb:d7:24:94:8b:b1:94:01:8c:15:
62:f3:c6:ba:d2:8c:33:e7:3d:f5:73:64:18:eb:6b:
6a:51:64:d9:41:18:d5:c3:26:07:f8:8f:00:5b:1f:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:18:D8:36:C9:60:1D:C5:79:6C:20:ED:D0:D5:39:B0:6A:34:C6
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:03:58:d3:87:19:88:41:5b:f6:92:c6:fc:49:8f:58:00:
8e:47:32:1b:73:be:84:1a:d3:a9:29:0a:6a:a8:e8:58:0f:88:
cf:22:92:8d:c7:dc:b7:68:92:2d:2c:77:d5:ae:7f:2c:bc:ef:
fd:fb:06:28:e6:82:40:8e:55:b8:0d:f4:a0:17:68:22:6d:b5:
3b:b3:81:4d:35:ca:e4:50:42:11:53:bd:04:85:84:3a:b3:5c:
e0:22:60:e4:5f:b0:0d:26:58:6d:7c:34:ad:fc:88:4e:a8:de:
12:7c:8b:51:64:75:df:9c:8a:af:30:d7:13:b5:2d:94:f7:a7:
fa:39:c8:fc:b9:5f:2a:71:8e:2e:7a:cd:5e:d6:09:6c:57:b5:
56:01:1f:4e:cf:0c:5a:1d:dc:ab:eb:d2:f9:d3:c6:9c:e6:01:
2c:4f:a5:57:5c:c8:e0:47:5f:05:45:c6:d5:47:35:bd:82:68:
a8:9a:9f:b4:d2:f6:93:60:34:8f:a3:e1:33:a0:a3:6a:7b:dd:
77:6b:fc:b4:db:d1:52:a7:d1:cf:14:8a:47:b3:1d:fb:ae:9f:
39:50:1e:94:71:5b:0b:fd:51:7a:76:1a:f1:a8:bd:7a:9f:29:
29:58:51:e5:1c:ee:a1:1e:5a:2e:d2:be:87:00:ca:d1:37:dc:
ed:a7:23:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0OKe3dGTFfUfaQrDxI/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh
NDFiMzUwHhcNMjYwNDE3MTkwMDI4WhcNMjYwNDE4MTkwMDI4WjAzMTEwLwYDVQQD
Eyg3NmI2MThkODM2Yzk2MDFkYzU3OTZjMjBlZGQwZDUzOWIwNmEzNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU/XNYmdTiTt564TiBdaaHsQ4nWT
F7WdZAVtxFmPqS+K9tU6dkXRwNor/LvxaOdKsOx7UtrAl43AGXxth/JimTAOapQ9
AISkIimkRW8DSy1gxIXE8Z/X9skRZKFvKDNfKcB8FFSPpZBWshdN1ss+LMHp9SZU
KQ/8XXUyA2KRSRZzNgXUbFwR2q/DWkmgk6MT3cEFsX4xxj0YRNedd8dN5lnznG1o
WnnYN2hUqsfyNS/UGjJbEk5LAoqg6KunEBG/kDy70eQeE5ekQikfeL6+0JO6T0rr
xrvXJJSLsZQBjBVi88a60owz5z31c2QY62tqUWTZQRjVwyYH+I8AWx+amQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa2GNg2yWAdxXlsIO3Q1TmwajTGMB8GA1UdIwQY
MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt
NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm
LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAwDWNOH
GYhBW/aSxvxJj1gAjkcyG3O+hBrTqSkKaqjoWA+IzyKSjcfct2iSLSx31a5/LLzv
/fsGKOaCQI5VuA30oBdoIm21O7OBTTXK5FBCEVO9BIWEOrNc4CJg5F+wDSZYbXw0
rfyITqjeEnyLUWR135yKrzDXE7UtlPen+jnI/LlfKnGOLnrNXtYJbFe1VgEfTs8M
Wh3cq+vS+dPGnOYBLE+lV1zI4EdfBUXG1Uc1vYJoqJqftNL2k2A0j6PhM6Cjanvd
d2v8tNvRUqfRzxSKR7Md+66fOVAelHFbC/1RenYa8ai9ep8pKVhR5RzuoR5aLtK+
hwDK0Tfc7acjdw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:14 2026 by rpki-client