Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: ROW1qa1jGeGvJhPr8yqWxl/TmtWvjMg/4STAUER2eY4=
Subject key identifier: 86:40:87:46:CA:29:10:F6:91:A0:53:8F:09:FD:93:E0:54:28:8B:46
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019D98BDD2E5DD923D6F04FBC77A6B1022FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 10D0
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa (hash: Da6u9ERoM1g/y/tKKfNZmlBoBL9DF5Ukejxp9AtmT+E=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: +WQLZ0fL9dNFTN8pPpZ84ZP4OCjOya0ZZcLEmux22Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d2:e5:dd:92:3d:6f:04:fb:c7:7a:6b:10:22:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=86408746ca2910f691a0538f09fd93e054288b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:78:72:29:fb:d0:83:39:fe:d2:e4:57:7e:
38:08:f3:5f:69:cb:8e:d5:db:e0:e5:b9:92:ed:17:
22:96:87:e2:e8:6e:3e:b6:c1:ca:4b:d6:15:ef:6e:
bb:f6:81:fc:95:72:d1:8e:f4:6f:47:50:a7:30:b5:
2c:fa:f2:b8:33:eb:bc:69:61:16:eb:46:21:61:c4:
2f:d2:d4:64:1a:0f:36:81:59:1a:d3:dd:04:9f:8c:
7c:5a:68:bb:98:fb:a7:c0:d8:cc:5f:da:e6:52:2c:
ac:9b:6f:06:2e:78:31:d3:29:5b:9c:19:3d:00:31:
06:cb:8a:25:03:87:bb:06:10:a7:82:4c:df:ac:00:
db:40:c7:ad:30:c2:9c:1b:f1:7e:5e:c9:f8:4c:9d:
46:49:a5:9a:03:ef:fb:53:5f:be:8f:33:31:24:0e:
d1:ce:a1:60:7c:56:9a:25:76:1c:af:fb:9d:12:5a:
32:b0:d3:21:63:7b:c6:3a:61:6c:d9:f2:ff:57:ce:
77:d7:fd:02:d4:9d:ca:ff:00:40:97:ca:f2:31:7d:
47:e3:34:f9:1f:43:f7:a2:9d:b6:28:ff:d3:f4:f6:
c4:26:aa:2b:ee:1a:c4:3b:21:55:96:bb:0b:a2:d4:
9d:de:b0:9a:3c:cf:cd:2d:a1:14:21:f8:bd:93:37:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:87:46:CA:29:10:F6:91:A0:53:8F:09:FD:93:E0:54:28:8B:46
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:7c:4f:ed:9e:b8:9b:71:74:5b:90:75:02:f8:5c:9a:cf:
3e:af:e9:fe:3d:ac:1b:c8:db:23:77:22:51:55:56:27:40:6c:
93:59:dd:10:54:14:ec:a7:2d:5d:96:4c:c5:23:f7:fc:a5:73:
44:e1:ae:4f:4e:7e:ac:0c:89:00:25:60:9f:74:6b:5a:35:a9:
45:37:e6:32:2c:0c:fa:c1:d8:93:97:79:a8:6f:21:1d:54:6d:
c2:b9:da:f8:07:9f:7f:14:49:68:42:c9:67:26:80:59:92:98:
be:75:67:96:32:49:99:7a:ba:a3:d0:31:1b:19:2b:cd:dd:47:
c0:83:2d:fe:cb:fb:f2:d4:56:46:b8:6a:8c:b9:47:93:bb:76:
88:64:8e:a3:44:e7:58:4c:5f:cc:76:d5:5a:55:f3:93:81:f9:
20:2a:7f:38:16:7e:5a:dc:c7:0c:b3:12:fa:b1:22:08:76:02:
84:93:b9:46:85:bd:51:de:2d:3f:b7:1a:65:6d:31:31:e5:98:
03:65:4d:43:81:04:6e:66:3e:13:73:45:5e:fd:7d:f8:d2:c5:
47:e7:7b:8b:b0:fc:44:7d:05:e9:f5:63:e6:5c:c0:ce:25:95:
a8:ef:64:3d:77:63:e7:08:2e:8d:23:a3:1b:fa:d3:c1:c9:b9:
23:75:96:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvdLl3ZI9bwT7x3prECL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMmYxNjlmYzc0NGNiZTg5NWE5Zjg1ZWRhYjc5NmQ0YWM3
MDAwMjkwHhcNMjYwNDE3MDAwMTEwWhcNMjYwNDE4MDAwMTEwWjAzMTEwLwYDVQQD
Eyg4NjQwODc0NmNhMjkxMGY2OTFhMDUzOGYwOWZkOTNlMDU0Mjg4YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFh4cin70IM5/tLkV344CPNfacuO
1dvg5bmS7Rcilofi6G4+tsHKS9YV72679oH8lXLRjvRvR1CnMLUs+vK4M+u8aWEW
60YhYcQv0tRkGg82gVka090En4x8Wmi7mPunwNjMX9rmUiysm28GLngx0ylbnBk9
ADEGy4olA4e7BhCngkzfrADbQMetMMKcG/F+Xsn4TJ1GSaWaA+/7U1++jzMxJA7R
zqFgfFaaJXYcr/udEloysNMhY3vGOmFs2fL/V8531/0C1J3K/wBAl8ryMX1H4zT5
H0P3op22KP/T9PbEJqor7hrEOyFVlrsLotSd3rCaPM/NLaEUIfi9kzfSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZAh0bKKRD2kaBTjwn9k+BUKItGMB8GA1UdIwQY
MBaAFJEvFp/HRMvolan4Xtq3ltSscAApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzct
YjIyODNjOWE1MzZmLzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzctYjIyODNjOWE1MzZm
LzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZZ8T+2e
uJtxdFuQdQL4XJrPPq/p/j2sG8jbI3ciUVVWJ0Bsk1ndEFQU7KctXZZMxSP3/KVz
ROGuT05+rAyJACVgn3RrWjWpRTfmMiwM+sHYk5d5qG8hHVRtwrna+AeffxRJaELJ
ZyaAWZKYvnVnljJJmXq6o9AxGxkrzd1HwIMt/sv78tRWRrhqjLlHk7t2iGSOo0Tn
WExfzHbVWlXzk4H5ICp/OBZ+WtzHDLMS+rEiCHYChJO5RoW9Ud4tP7caZW0xMeWY
A2VNQ4EEbmY+E3NFXv19+NLFR+d7i7D8RH0F6fVj5lzAziWVqO9kPXdj5wgujSOj
G/rTwcm5I3WWfA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:05 2026 by rpki-client