Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: nmAoMXBJJY5uB9LAmTnYn8/rrJ5eyzIrfdAcG6iZptM=
Subject key identifier: 4C:BD:22:FB:E7:4D:79:66:46:0D:70:FA:11:78:C3:6F:81:EF:5E:17
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019D9AE34F78FFC2AFDF2AA8DA15DD8158CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:21 +0000
Manifest this update: Fri 17 Apr 2026 10:01:21 +0000
Manifest next update: Sat 18 Apr 2026 10:01:21 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: wQZ+lZse2xTt02RoJhC4FyCm4Z1P/MvKgJBMilW3650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4f:78:ff:c2:af:df:2a:a8:da:15:dd:81:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Apr 17 10:01:21 2026 GMT
Not After : Apr 18 10:01:21 2026 GMT
Subject: CN=4cbd22fbe74d7966460d70fa1178c36f81ef5e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:fd:fd:14:c8:3e:ea:47:a7:57:14:e6:80:
55:6f:cf:7b:47:88:4d:e9:de:45:37:88:8d:1f:e3:
76:bb:55:3d:d7:43:de:bd:e1:fd:1b:44:f4:54:d5:
98:d8:c2:c0:9a:b1:07:27:ff:e0:e8:f5:6a:97:e5:
39:60:1e:f7:5b:c5:a1:7e:df:e7:8b:e8:41:a9:97:
71:38:0a:89:cc:a5:2d:da:cf:81:cf:da:ab:96:bc:
4b:4b:7f:1b:67:49:f8:07:07:14:44:71:a2:52:af:
e9:19:b4:4e:af:d4:77:04:be:5b:85:6c:b0:18:24:
c0:46:d9:03:45:89:50:eb:52:0b:97:67:12:23:aa:
60:21:ef:49:87:87:05:10:2d:64:43:c7:f9:4e:e4:
17:95:eb:9c:1c:8c:34:94:83:c9:90:f1:70:fc:d4:
1f:fc:83:d4:b5:95:28:39:73:00:15:5b:8d:25:7e:
f6:87:be:36:06:cb:6d:cb:e4:0b:2c:aa:5d:ba:48:
5d:74:bc:25:c1:76:82:b9:50:65:73:af:81:42:38:
fc:54:01:06:25:00:4f:78:2d:d2:a9:e9:c7:ba:ef:
23:d7:3e:ef:44:c2:5e:bd:c2:d6:71:f1:23:fa:b8:
bb:13:13:b2:65:59:fe:23:61:bc:d7:ab:3e:aa:dd:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:22:FB:E7:4D:79:66:46:0D:70:FA:11:78:C3:6F:81:EF:5E:17
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:75:2a:15:e1:30:f7:e8:6f:c1:75:11:4c:2a:89:91:86:f8:
a2:f9:bb:48:30:57:00:a8:1e:e5:c9:6b:24:45:ff:cb:8e:c0:
cb:e6:21:93:cd:b4:94:f6:41:fc:d1:5b:8f:88:13:37:e7:9b:
81:13:9c:c2:f2:91:97:90:49:00:3f:f7:da:09:3b:13:bd:89:
81:67:cb:df:d7:c1:67:3f:7d:19:f1:03:f5:bb:a9:91:32:19:
83:01:f2:f3:75:9d:16:2b:7a:08:5d:a5:c6:dd:7d:dc:8d:14:
15:83:ed:1a:fd:f4:e5:04:22:50:31:0e:b1:c6:f5:e1:dc:39:
e2:f5:98:ec:b0:a6:cc:30:cb:93:d7:82:cc:94:0e:24:1a:24:
95:d8:0c:bf:bf:77:e8:01:56:8b:08:5e:17:9a:71:b7:79:a1:
f6:f7:78:44:c2:11:5b:6f:65:20:f6:64:d4:aa:81:83:22:29:
a1:b9:f0:b3:8b:66:82:25:c7:9b:f2:5f:67:cb:79:fa:88:87:
c6:fd:6c:01:53:a8:af:f8:5a:b9:0f:25:67:5b:c0:07:1a:99:
b7:09:09:11:e1:12:ad:c1:83:dc:44:01:ee:d8:cd:e0:83:5e:
fc:52:48:fa:76:96:7d:e3:58:81:85:5e:d6:aa:a8:37:20:60:
56:de:7d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4094/8Kv3yqo2hXdgVjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjYwNDE3MTAwMTIxWhcNMjYwNDE4MTAwMTIxWjAzMTEwLwYDVQQD
Eyg0Y2JkMjJmYmU3NGQ3OTY2NDYwZDcwZmExMTc4YzM2ZjgxZWY1ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokn9/RTIPupHp1cU5oBVb897R4hN
6d5FN4iNH+N2u1U910PeveH9G0T0VNWY2MLAmrEHJ//g6PVql+U5YB73W8Whft/n
i+hBqZdxOAqJzKUt2s+Bz9qrlrxLS38bZ0n4BwcURHGiUq/pGbROr9R3BL5bhWyw
GCTARtkDRYlQ61ILl2cSI6pgIe9Jh4cFEC1kQ8f5TuQXleucHIw0lIPJkPFw/NQf
/IPUtZUoOXMAFVuNJX72h742Bstty+QLLKpdukhddLwlwXaCuVBlc6+BQjj8VAEG
JQBPeC3SqenHuu8j1z7vRMJevcLWcfEj+ri7ExOyZVn+I2G816s+qt0IfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy9IvvnTXlmRg1w+hF4w2+B714XMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXUqFeEw
9+hvwXURTCqJkYb4ovm7SDBXAKge5clrJEX/y47Ay+Yhk820lPZB/NFbj4gTN+eb
gROcwvKRl5BJAD/32gk7E72JgWfL39fBZz99GfED9bupkTIZgwHy83WdFit6CF2l
xt193I0UFYPtGv305QQiUDEOscb14dw54vWY7LCmzDDLk9eCzJQOJBokldgMv793
6AFWiwheF5pxt3mh9vd4RMIRW29lIPZk1KqBgyIpobnws4tmgiXHm/JfZ8t5+oiH
xv1sAVOor/hauQ8lZ1vABxqZtwkJEeESrcGD3EQB7tjN4INe/FJI+naWfeNYgYVe
1qqoNyBgVt59Bg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:18 2026 by rpki-client