Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: kuxo7ds8wtiSNfFwu1SdN2GKCSRrSb7vXqxP+FmdYQg=
Subject key identifier: F5:5D:77:27:87:33:C9:E9:BF:F9:72:A5:B1:6F:7F:82:1F:FB:7B:9C
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019D985020FF3AFD1580C0BAC1D4B7B99AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:21 +0000
Manifest this update: Thu 16 Apr 2026 22:01:21 +0000
Manifest next update: Fri 17 Apr 2026 22:01:21 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: e6VTTnKHaiEbsb6lXPT8li6ab0qU4EjmPTWPHEjKK2A=)
2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:20:ff:3a:fd:15:80:c0:ba:c1:d4:b7:b9:9a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Apr 16 22:01:21 2026 GMT
Not After : Apr 17 22:01:21 2026 GMT
Subject: CN=f55d77278733c9e9bff972a5b16f7f821ffb7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:21:db:c0:9d:06:ab:c8:13:b7:e9:5f:7f:
10:86:90:1d:34:67:7a:d6:a0:89:1b:d2:49:12:83:
05:30:5e:8c:6b:72:fe:d7:f5:7a:a3:35:f6:f8:e9:
06:d2:f0:c7:1b:1d:68:53:01:4d:3b:ea:bf:22:93:
74:c8:ff:9c:a7:91:0e:4c:f9:5f:b8:f1:2b:f5:aa:
9a:5e:6b:5c:90:ff:a1:98:d7:82:5b:b6:38:ca:97:
a0:2b:00:8d:e8:cc:f2:9d:9c:b6:ac:88:73:18:93:
48:c5:a5:76:f9:c4:cb:8d:4a:9a:06:58:e4:a3:55:
9d:24:b5:e3:d1:c2:f7:4c:c5:a9:bf:4d:fc:a3:42:
3c:b8:62:3e:ea:fc:b4:ae:c1:1b:db:cc:48:43:5b:
b3:e6:ba:e9:7f:bf:f7:1b:6a:61:0d:eb:20:79:34:
7c:d4:5e:2a:ec:bf:5c:3e:0f:3c:69:68:7f:95:68:
f4:17:31:bd:cf:37:c5:5a:f3:1d:97:a8:7a:10:dc:
e8:06:9d:a5:6f:6d:4e:1d:25:70:1d:b4:96:a3:92:
f4:a3:11:a2:56:ea:67:a1:de:7d:79:67:2a:fe:3b:
80:36:f2:14:b6:ae:8b:70:d4:27:64:b6:59:82:14:
81:3d:34:1d:e0:31:d7:47:b4:2e:b4:09:48:30:fc:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:77:27:87:33:C9:E9:BF:F9:72:A5:B1:6F:7F:82:1F:FB:7B:9C
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:06:98:70:e3:f1:7a:f2:78:ed:01:e0:e9:cc:5d:5d:8b:8d:
97:bf:3e:dc:32:a8:8b:78:f4:aa:2b:3b:51:00:9e:d0:59:61:
db:29:ed:30:31:a1:ec:63:ac:da:f3:fd:66:e4:c4:15:46:e2:
8a:ef:ee:71:85:fc:fe:ab:56:f9:ff:18:ab:85:78:64:99:01:
b0:f1:47:bb:43:60:ba:cc:92:e1:1e:d8:68:ab:fe:59:bd:63:
85:96:39:7e:0d:57:a2:86:c3:28:89:d3:b3:78:b9:83:2a:16:
c7:72:d8:01:f2:e1:f3:bf:a5:85:e8:cd:f1:7e:70:61:9d:6e:
2a:c5:0c:36:06:e2:39:26:f0:39:30:fe:ca:08:b6:4d:d3:3e:
90:95:ce:90:91:e5:12:14:13:56:81:92:b5:8e:65:a2:4a:1c:
e4:5b:3f:19:ef:a1:57:24:87:4f:5f:42:8c:3b:18:c4:03:7d:
cd:7c:a1:19:04:15:3e:fa:29:83:88:af:c0:d4:67:02:66:93:
7a:61:8e:e4:b3:9d:b4:31:9e:52:0f:d2:f2:32:2d:75:70:40:
56:6f:3d:68:b8:89:28:53:13:d2:9e:58:a0:07:a1:64:53:0c:
b4:22:f9:fd:6a:d1:a5:64:79:16:08:41:14:cb:96:a6:cd:e2:
98:53:5b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUCD/Ov0VgMC6wdS3uZr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmYxNTU4MWJiOTA0ZjFiOTA1Mzg3NDIxMThiMDFmOWVm
YWE2NjIwHhcNMjYwNDE2MjIwMTIxWhcNMjYwNDE3MjIwMTIxWjAzMTEwLwYDVQQD
EyhmNTVkNzcyNzg3MzNjOWU5YmZmOTcyYTViMTZmN2Y4MjFmZmI3YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V0h28CdBqvIE7fpX38QhpAdNGd6
1qCJG9JJEoMFMF6Ma3L+1/V6ozX2+OkG0vDHGx1oUwFNO+q/IpN0yP+cp5EOTPlf
uPEr9aqaXmtckP+hmNeCW7Y4ypegKwCN6MzynZy2rIhzGJNIxaV2+cTLjUqaBljk
o1WdJLXj0cL3TMWpv038o0I8uGI+6vy0rsEb28xIQ1uz5rrpf7/3G2phDesgeTR8
1F4q7L9cPg88aWh/lWj0FzG9zzfFWvMdl6h6ENzoBp2lb21OHSVwHbSWo5L0oxGi
Vupnod59eWcq/juANvIUtq6LcNQnZLZZghSBPTQd4DHXR7QutAlIMPxZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVddyeHM8npv/lypbFvf4If+3ucMB8GA1UdIwQY
MBaAFCn/FVgbuQTxuQU4dCEYsB+e+qZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUt
M2I4ZDhiNzZiN2Y2LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUtM2I4ZDhiNzZiN2Y2
LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAaYcOPx
evJ47QHg6cxdXYuNl78+3DKoi3j0qis7UQCe0Flh2yntMDGh7GOs2vP9ZuTEFUbi
iu/ucYX8/qtW+f8Yq4V4ZJkBsPFHu0NgusyS4R7YaKv+Wb1jhZY5fg1XoobDKInT
s3i5gyoWx3LYAfLh87+lhejN8X5wYZ1uKsUMNgbiOSbwOTD+ygi2TdM+kJXOkJHl
EhQTVoGStY5lokoc5Fs/Ge+hVySHT19CjDsYxAN9zXyhGQQVPvopg4ivwNRnAmaT
emGO5LOdtDGeUg/S8jItdXBAVm89aLiJKFMT0p5YoAehZFMMtCL5/WrRpWR5FghB
FMuWps3imFNbMw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:07 2026 by rpki-client