Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier: 29dXbIRvWzh2zbxjjtLPSWPlG2g5oCrC56v4vSLFhXc=
Subject key identifier: C1:08:79:B5:10:AF:3C:9E:74:9A:B8:CC:DC:F6:7B:AB:45:72:F9:A0
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial: 019D98F50753E9F7FE94CF112D34DB72C9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number: 12D6
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: VUW7mj8TXTAglkfwsCe3w1U3Ed7cobXCmSvUYd9sT+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:07:53:e9:f7:fe:94:cf:11:2d:34:db:72:c9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=c10879b510af3c9e749ab8ccdcf67bab4572f9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:97:6c:1b:b6:fa:fe:a9:99:b2:14:3a:11:
7b:93:34:e9:d3:6f:6a:3f:dd:14:0c:5f:a8:f9:1c:
62:79:ae:0f:0b:73:bc:76:11:42:ec:77:4f:e4:57:
11:e2:61:b4:ee:19:95:2a:b2:94:b4:2e:2c:41:12:
d2:38:42:32:a5:92:ec:56:1c:d9:f5:cb:1f:95:64:
6a:a9:5d:f6:99:ef:6b:f3:60:8a:e4:0c:1e:94:2f:
60:8a:24:88:d3:30:fa:b3:c8:5e:1d:57:f2:24:53:
f7:84:1a:3d:bc:d0:7f:5b:76:78:34:cd:86:75:a1:
02:4c:1b:33:f4:ef:f3:e6:56:e4:d0:55:ff:24:a1:
93:e8:a5:0b:0f:3a:86:e3:8c:a9:14:6b:cb:ba:0b:
af:5f:b0:79:e5:37:96:98:52:89:c5:3c:c5:9a:60:
29:68:2a:0e:f5:ce:90:a6:14:98:9f:ba:35:75:9a:
8f:0e:30:13:8f:a9:4e:b1:e6:17:0f:a5:c7:21:17:
53:1c:0b:13:1c:1d:5e:a7:b5:04:a2:2a:c9:b3:76:
d0:cd:9f:54:24:c7:01:cc:dd:d8:3a:02:2c:1c:d5:
1a:cf:ad:af:e3:a3:50:c0:ea:ab:03:86:46:68:55:
e2:97:3c:51:ce:fb:8e:cc:81:a9:8b:3d:c2:cf:ca:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:79:B5:10:AF:3C:9E:74:9A:B8:CC:DC:F6:7B:AB:45:72:F9:A0
X509v3 Authority Key Identifier:
keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:f9:c5:9c:d3:0b:6e:fc:d4:e2:60:fc:02:57:ae:39:ee:
a5:44:b9:68:e4:08:bc:77:a0:44:98:57:75:8e:04:3c:f2:20:
f9:0c:9e:76:f7:93:3d:c6:d9:8e:98:d7:c9:4c:ae:80:54:3e:
22:7d:ea:af:44:4d:be:26:4b:3b:0e:e8:fe:9c:7d:b7:c5:81:
24:f5:ad:98:5a:4a:89:5a:5c:5c:29:9e:dc:3d:b4:fd:12:dc:
16:81:ce:34:ed:fc:8d:ac:69:41:e2:27:84:e1:1e:d6:15:d3:
47:77:1d:4a:4d:4e:e1:ef:7f:e9:50:9b:1f:e0:4f:1c:e3:78:
d1:57:ac:c9:90:e5:4d:a1:37:15:29:ed:23:89:c6:ba:00:43:
dc:a2:6f:0e:5a:04:0d:f0:ce:01:2c:a4:d4:29:a1:9a:80:25:
e7:a9:f3:01:20:38:6d:95:29:45:ce:d4:1b:2f:e2:7d:dc:37:
63:53:48:85:b9:05:4d:eb:f1:0c:8f:6d:a8:c4:f4:32:55:fc:
a2:ac:e7:41:17:e4:b6:05:25:2a:e2:a2:ae:4d:1e:9d:be:ee:
a5:80:5b:8a:fa:a7:5f:5b:46:52:39:b9:a3:3a:b1:ef:83:de:
57:9a:7c:e9:f0:39:82:10:b6:37:a2:9d:1b:d0:97:1d:54:64:
f8:6e:2b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9QdT6ff+lM8RLTTbcsmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2E0ZDEyOTI0YjUzNTdlMzAyNjdhZmUzYzVjYzczNjQy
NDExNTgwHhcNMjYwNDE3MDEwMTI3WhcNMjYwNDE4MDEwMTI3WjAzMTEwLwYDVQQD
EyhjMTA4NzliNTEwYWYzYzllNzQ5YWI4Y2NkY2Y2N2JhYjQ1NzJmOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2liXbBu2+v6pmbIUOhF7kzTp029q
P90UDF+o+Rxiea4PC3O8dhFC7HdP5FcR4mG07hmVKrKUtC4sQRLSOEIypZLsVhzZ
9csflWRqqV32me9r82CK5AwelC9giiSI0zD6s8heHVfyJFP3hBo9vNB/W3Z4NM2G
daECTBsz9O/z5lbk0FX/JKGT6KULDzqG44ypFGvLuguvX7B55TeWmFKJxTzFmmAp
aCoO9c6QphSYn7o1dZqPDjATj6lOseYXD6XHIRdTHAsTHB1ep7UEoirJs3bQzZ9U
JMcBzN3YOgIsHNUaz62v46NQwOqrA4ZGaFXilzxRzvuOzIGpiz3Cz8omDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEIebUQrzyedJq4zNz2e6tFcvmgMB8GA1UdIwQY
MBaAFJB6TRKSS1NX4wJnr+PFzHNkJBFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEt
NjIxYTJiYjQwYzY2LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEtNjIxYTJiYjQwYzY2
LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3H5xZzT
C2781OJg/AJXrjnupUS5aOQIvHegRJhXdY4EPPIg+QyedveTPcbZjpjXyUyugFQ+
In3qr0RNviZLOw7o/px9t8WBJPWtmFpKiVpcXCme3D20/RLcFoHONO38jaxpQeIn
hOEe1hXTR3cdSk1O4e9/6VCbH+BPHON40VesyZDlTaE3FSntI4nGugBD3KJvDloE
DfDOASyk1CmhmoAl56nzASA4bZUpRc7UGy/ifdw3Y1NIhbkFTevxDI9tqMT0MlX8
oqznQRfktgUlKuKirk0enb7upYBbivqnX1tGUjm5ozqx74PeV5p86fA5ghC2N6Kd
G9CXHVRk+G4r+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:01 2026 by rpki-client