Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: BOoCBbpOkDyuSqur9r3h9Pvs+pkXtRF64fg7VV9mn94=
Subject key identifier: 76:A1:2B:09:43:4B:67:18:54:51:46:BD:CF:2E:2B:53:11:EF:B1:03
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019D992BB4CBA4053BB26F4F6E702774A764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 05D8
Signing time: Fri 17 Apr 2026 02:01:11 +0000
Manifest this update: Fri 17 Apr 2026 02:01:11 +0000
Manifest next update: Sat 18 Apr 2026 02:01:11 +0000
Files and hashes: 1: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: x6ML2oFP1IdTIvFfCChyqRicTGbs3oqh1q+W758Glec=)
2: gn61ce9ALlX0-z3Eczgbb3WMtWI.roa (hash: RHps1AzWEmNAJdqDkFEU6I0uU1ebWVTlEieytsZ34D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:b4:cb:a4:05:3b:b2:6f:4f:6e:70:27:74:a7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Apr 17 02:01:11 2026 GMT
Not After : Apr 18 02:01:11 2026 GMT
Subject: CN=76a12b09434b6718545146bdcf2e2b5311efb103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:ff:09:ae:37:4f:dd:f4:66:9f:d7:1f:e5:
21:ae:bd:4e:be:4a:b0:77:cb:e3:6b:00:7b:75:36:
18:de:56:01:95:bf:21:6a:e0:5a:f7:19:d9:92:ce:
0f:01:00:29:73:f3:8b:0d:b4:b8:ce:7b:2e:07:af:
e5:fe:97:97:3f:c3:d4:9d:76:bb:82:ae:a2:ea:34:
0d:3a:5c:c2:ce:34:57:8e:c4:8e:f6:6e:ef:6a:cc:
81:7b:68:2c:82:e3:66:73:0f:af:36:31:b0:23:e9:
20:fd:7c:f5:15:b0:99:58:c2:27:c4:23:f2:01:3f:
56:1c:42:24:1c:b4:62:b8:2d:04:9d:a6:54:2e:44:
d9:39:24:c8:99:be:ef:67:42:2b:0c:02:28:98:e4:
7d:ce:f7:14:93:b9:9b:7c:ee:48:28:16:7d:c1:c8:
9e:e2:fd:a3:92:c3:5d:be:a0:0f:f7:42:34:16:1e:
15:02:71:4d:d5:d9:38:81:80:83:38:76:09:db:19:
f6:de:04:46:71:6a:11:81:90:76:fb:79:cf:22:33:
a0:3d:67:8c:24:ae:af:70:4c:90:aa:0a:e8:ee:02:
c8:17:35:b1:6a:ba:cb:0e:8a:88:14:d5:2a:97:ed:
c7:36:d5:1d:f5:23:cf:d0:1a:7d:b5:42:55:7b:a1:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A1:2B:09:43:4B:67:18:54:51:46:BD:CF:2E:2B:53:11:EF:B1:03
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:0d:e1:49:ee:a6:df:88:df:e2:8f:62:75:f2:79:d5:0a:
8b:c4:4e:ed:1a:7e:24:3c:96:90:87:fc:eb:7e:32:d0:dd:5b:
8b:74:18:5b:0f:61:1a:9c:10:90:59:14:00:1b:eb:70:53:b0:
24:7b:44:99:f1:ce:43:ae:ec:32:4c:bf:d8:45:09:38:10:d1:
e1:1c:a5:ff:45:4b:01:a4:bf:80:60:b5:5b:0f:2d:ef:1a:85:
b8:21:34:1d:9f:04:6d:47:a9:54:44:65:bc:2c:d3:e9:91:be:
ad:fb:fa:66:30:4d:95:2c:05:2d:a3:fb:66:86:f1:c4:2b:18:
e4:1e:64:42:e5:73:0a:7b:d0:36:60:f0:ea:ef:5e:ee:00:ec:
13:3e:5e:bf:97:95:77:78:5e:a3:e5:f2:44:2b:bb:79:96:76:
1d:61:8d:83:42:c9:b2:e3:f1:58:b9:7a:5f:80:81:07:77:35:
b1:2b:9e:bb:87:cb:e1:a8:ae:49:05:08:0a:42:7e:2b:ee:53:
a3:c8:0f:4d:d7:97:2c:5e:a2:05:58:71:54:2e:71:40:62:84:
30:f7:e7:2a:82:04:4c:9e:63:bf:01:35:75:83:ea:45:11:a1:
a0:fc:d9:c5:27:f8:c6:e6:45:88:a2:af:48:29:66:15:fa:58:
15:62:60:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK7TLpAU7sm9PbnAndKdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjYwNDE3MDIwMTExWhcNMjYwNDE4MDIwMTExWjAzMTEwLwYDVQQD
Eyg3NmExMmIwOTQzNGI2NzE4NTQ1MTQ2YmRjZjJlMmI1MzExZWZiMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+v/Ca43T930Zp/XH+Uhrr1Ovkqw
d8vjawB7dTYY3lYBlb8hauBa9xnZks4PAQApc/OLDbS4znsuB6/l/peXP8PUnXa7
gq6i6jQNOlzCzjRXjsSO9m7vasyBe2gsguNmcw+vNjGwI+kg/Xz1FbCZWMInxCPy
AT9WHEIkHLRiuC0EnaZULkTZOSTImb7vZ0IrDAIomOR9zvcUk7mbfO5IKBZ9wcie
4v2jksNdvqAP90I0Fh4VAnFN1dk4gYCDOHYJ2xn23gRGcWoRgZB2+3nPIjOgPWeM
JK6vcEyQqgro7gLIFzWxarrLDoqIFNUql+3HNtUd9SPP0Bp9tUJVe6FPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHahKwlDS2cYVFFGvc8uK1MR77EDMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi28N4Unu
pt+I3+KPYnXyedUKi8RO7Rp+JDyWkIf8634y0N1bi3QYWw9hGpwQkFkUABvrcFOw
JHtEmfHOQ67sMky/2EUJOBDR4Ryl/0VLAaS/gGC1Ww8t7xqFuCE0HZ8EbUepVERl
vCzT6ZG+rfv6ZjBNlSwFLaP7ZobxxCsY5B5kQuVzCnvQNmDw6u9e7gDsEz5ev5eV
d3heo+XyRCu7eZZ2HWGNg0LJsuPxWLl6X4CBB3c1sSueu4fL4aiuSQUICkJ+K+5T
o8gPTdeXLF6iBVhxVC5xQGKEMPfnKoIETJ5jvwE1dYPqRRGhoPzZxSf4xuZFiKKv
SClmFfpYFWJgNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:37 2026 by rpki-client