Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: gMaKCBFDFEX0xRvwidj+93zvxiGRKoLaOIXvvcOghPk=
Subject key identifier: E4:CF:E0:AE:7D:2E:E7:17:61:A9:15:B9:28:AD:D7:44:0E:F6:D8:2C
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019D9AABF6208412397677BFE751617CDB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: E1
Signing time: Fri 17 Apr 2026 09:00:53 +0000
Manifest this update: Fri 17 Apr 2026 09:00:53 +0000
Manifest next update: Sat 18 Apr 2026 09:00:53 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: Uduj2yaIDkrl5PMZIHXVRknqaSZNJLfdubwers1xVcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f6:20:84:12:39:76:77:bf:e7:51:61:7c:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Apr 17 09:00:53 2026 GMT
Not After : Apr 18 09:00:53 2026 GMT
Subject: CN=e4cfe0ae7d2ee71761a915b928add7440ef6d82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:6a:a9:d9:9d:06:46:22:96:37:16:66:9b:
d9:19:7b:60:99:f2:67:b3:21:33:ce:0e:e5:07:cc:
b4:6f:f8:93:7f:84:7f:fc:fe:7d:ab:c0:03:86:d7:
0f:7c:53:a5:1b:18:68:34:8f:4b:89:75:bf:b7:4d:
62:4c:6f:84:c9:7f:2a:63:0d:8d:7a:b7:f6:51:70:
40:ec:5e:e8:1b:8d:1a:ad:01:78:3f:5c:75:42:2a:
e8:b9:dd:71:d3:56:b7:7b:4a:c7:8e:09:cd:b0:42:
92:58:d4:3a:1b:ea:d8:80:ee:b2:b0:52:c0:33:18:
07:1d:80:e6:7e:23:23:76:1e:27:8f:e3:1a:33:bd:
32:1e:d8:de:b1:3f:2b:28:45:dd:1f:f6:80:50:3f:
c8:54:d5:be:ac:41:72:93:6d:b1:4e:32:b8:5e:25:
9c:ca:7d:1c:0b:45:3e:a7:48:6d:e0:d9:56:b6:06:
5a:b9:bf:8d:db:81:c4:97:6d:17:3e:1c:29:7d:88:
a1:8f:6e:01:51:66:53:1e:55:d9:e6:87:f5:a3:3b:
a5:7e:84:47:a5:76:50:49:b6:3e:f7:5a:1a:57:07:
06:a1:54:3a:3e:06:68:e3:34:c9:dc:45:66:a6:c0:
04:6a:2f:b0:c2:3b:1d:1b:f5:38:a3:80:86:e8:88:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:E0:AE:7D:2E:E7:17:61:A9:15:B9:28:AD:D7:44:0E:F6:D8:2C
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:cf:5f:82:31:36:d9:73:0c:c2:ee:c9:d7:ad:16:90:fe:
06:5e:bb:de:99:b7:9b:ba:8d:7a:ac:0f:e1:26:2a:da:69:ac:
97:22:3e:d4:ce:20:ce:cc:99:2f:7b:e2:80:88:70:eb:1a:2d:
6d:e3:9c:ab:8c:9d:e2:53:a8:1b:03:79:55:33:96:dd:cf:88:
7a:1d:4d:20:15:ad:c0:0d:52:8e:14:cf:ec:f2:2f:ca:f8:08:
ba:98:ea:dc:66:eb:48:0c:11:a4:29:69:ea:08:c9:71:03:e7:
d8:2e:bb:2b:bf:39:52:46:80:2e:12:98:96:c2:e4:26:aa:30:
49:b1:05:5c:8f:e5:c0:1d:a5:b3:f2:f9:0f:8f:35:8b:0b:ff:
7c:85:7b:33:ef:b6:ac:17:7a:ef:fd:00:36:77:89:a0:0d:8b:
2f:2f:91:e7:0d:a2:4a:d3:0e:e1:0b:ab:45:eb:52:fd:a8:1a:
1f:e1:06:4d:c1:cc:6e:dc:3c:3a:38:93:82:66:44:9b:fd:90:
6b:0a:0d:fb:0b:03:bf:e1:30:9a:a8:1c:0d:14:b7:b4:71:8b:
86:8e:1f:7e:8e:97:ee:2b:23:39:5d:ff:4e:47:13:15:44:e7:
10:95:bb:15:8d:19:7e:41:bd:34:48:3c:53:c8:7d:06:2f:e7:
a8:43:54:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq/YghBI5dne/51FhfNtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz
NDhmNDYwHhcNMjYwNDE3MDkwMDUzWhcNMjYwNDE4MDkwMDUzWjAzMTEwLwYDVQQD
EyhlNGNmZTBhZTdkMmVlNzE3NjFhOTE1YjkyOGFkZDc0NDBlZjZkODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnttqqdmdBkYiljcWZpvZGXtgmfJn
syEzzg7lB8y0b/iTf4R//P59q8ADhtcPfFOlGxhoNI9LiXW/t01iTG+EyX8qYw2N
erf2UXBA7F7oG40arQF4P1x1Qiroud1x01a3e0rHjgnNsEKSWNQ6G+rYgO6ysFLA
MxgHHYDmfiMjdh4nj+MaM70yHtjesT8rKEXdH/aAUD/IVNW+rEFyk22xTjK4XiWc
yn0cC0U+p0ht4NlWtgZaub+N24HEl20XPhwpfYihj24BUWZTHlXZ5of1ozulfoRH
pXZQSbY+91oaVwcGoVQ6PgZo4zTJ3EVmpsAEai+wwjsdG/U4o4CG6IhkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTP4K59LucXYakVuSit10QO9tgsMB8GA1UdIwQY
MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt
YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx
LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUHPX4Ix
NtlzDMLuydetFpD+Bl673pm3m7qNeqwP4SYq2mmslyI+1M4gzsyZL3vigIhw6xot
beOcq4yd4lOoGwN5VTOW3c+Ieh1NIBWtwA1SjhTP7PIvyvgIupjq3GbrSAwRpClp
6gjJcQPn2C67K785UkaALhKYlsLkJqowSbEFXI/lwB2ls/L5D481iwv/fIV7M++2
rBd67/0ANneJoA2LLy+R5w2iStMO4QurRetS/agaH+EGTcHMbtw8OjiTgmZEm/2Q
awoN+wsDv+EwmqgcDRS3tHGLho4ffo6X7isjOV3/TkcTFUTnEJW7FY0ZfkG9NEg8
U8h9Bi/nqENU5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:45 2026 by rpki-client