Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: 5ImoCuVabO9XBue62X//pNgAOdHjmrrT9hxxjsMvjnw=
Subject key identifier: B4:33:75:64:6B:39:BB:37:A7:B7:E6:80:1E:97:08:9E:41:AE:56:65
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019D9B19E9C3A08DC39BF5277154319CDD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 1089
Signing time: Fri 17 Apr 2026 11:00:59 +0000
Manifest this update: Fri 17 Apr 2026 11:00:59 +0000
Manifest next update: Sat 18 Apr 2026 11:00:59 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: 75/b1xekSMy7qHEjlM//RdOjkWfnzR0byGMheuw4fSQ=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e9:c3:a0:8d:c3:9b:f5:27:71:54:31:9c:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Apr 17 11:00:59 2026 GMT
Not After : Apr 18 11:00:59 2026 GMT
Subject: CN=b43375646b39bb37a7b7e6801e97089e41ae5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:ed:6e:97:a4:f2:39:50:91:cf:22:74:93:
ca:4f:a3:da:5c:1f:d2:1b:bb:de:d0:9d:12:af:77:
cf:b6:79:c5:65:cf:2c:bb:01:50:05:1c:f5:0f:a3:
57:34:f9:e1:af:1d:34:3e:3c:35:18:65:21:9f:d5:
0c:fc:2c:34:43:e1:4d:4f:5c:8f:6e:95:61:ff:62:
fa:0c:24:3f:e7:19:bb:01:53:bd:2a:d0:73:f2:b9:
b2:bc:5c:96:ba:3a:05:e5:0d:0a:39:c5:6e:3f:e7:
5c:e9:8c:54:29:5b:25:e6:f5:ff:99:31:33:29:60:
e4:2f:39:22:4e:7d:46:11:03:11:ec:4a:ea:ac:3f:
2c:f9:f8:02:6a:ac:7e:ef:f5:74:f4:43:56:08:e6:
b1:55:8b:ef:5d:8f:74:61:88:13:78:f0:be:28:0a:
68:02:24:3e:98:d2:93:93:27:b7:dc:a1:97:d3:99:
36:e8:a4:04:ba:80:07:73:56:db:27:1c:39:df:05:
3a:a5:f4:cf:3d:18:02:c8:01:f0:36:30:a7:d4:db:
d6:98:1d:e6:17:11:3c:22:e7:38:fe:12:fb:cb:c7:
15:07:ce:9d:ea:ba:10:3e:95:66:00:ef:8d:bb:ad:
cb:70:eb:1c:7f:7f:ee:ce:f3:12:ce:de:60:3d:24:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:75:64:6B:39:BB:37:A7:B7:E6:80:1E:97:08:9E:41:AE:56:65
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:2c:99:6d:7e:2a:d5:e7:19:a9:87:06:32:8d:2f:5e:f3:
58:4e:3d:9a:0e:8b:ca:09:fa:05:ef:20:83:e1:0a:cb:6c:f5:
c1:74:82:b8:a3:ec:bd:ba:85:3a:7d:7f:04:84:0d:bd:93:e2:
df:06:39:8a:19:e7:c9:46:92:03:61:05:01:c4:a5:9b:15:77:
d1:bb:5c:36:24:cc:e7:f8:af:10:bc:16:bf:cc:b8:be:c0:99:
bf:15:a8:3a:1b:1d:2b:76:ff:d8:4f:04:a0:ba:f7:0e:11:2c:
c0:f7:a1:43:69:7d:4a:ee:b9:37:f7:80:59:02:3c:78:8f:c2:
e6:da:09:ee:08:7d:7c:cd:39:b0:8a:88:8b:47:32:c3:df:8b:
40:17:60:da:3e:f0:e8:98:25:fa:f0:99:af:a3:95:bb:cf:44:
63:85:fa:cd:2f:32:da:77:c4:fe:20:c7:97:49:7a:b7:6d:b7:
d2:4e:79:12:66:de:70:d9:71:0b:cf:75:d8:e5:a7:5d:60:8a:
d0:21:a8:a2:61:c5:01:3a:71:91:0f:da:cc:85:ea:b6:1c:55:
17:64:b6:71:20:43:a7:9c:e1:fe:d2:5a:99:48:c6:16:16:17:
44:00:90:9c:5a:c8:4c:67:a6:fa:35:bf:45:81:3f:6b:49:25:
11:52:04:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGenDoI3Dm/UncVQxnN1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjYwNDE3MTEwMDU5WhcNMjYwNDE4MTEwMDU5WjAzMTEwLwYDVQQD
EyhiNDMzNzU2NDZiMzliYjM3YTdiN2U2ODAxZTk3MDg5ZTQxYWU1NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m3tbpek8jlQkc8idJPKT6PaXB/S
G7ve0J0Sr3fPtnnFZc8suwFQBRz1D6NXNPnhrx00Pjw1GGUhn9UM/Cw0Q+FNT1yP
bpVh/2L6DCQ/5xm7AVO9KtBz8rmyvFyWujoF5Q0KOcVuP+dc6YxUKVsl5vX/mTEz
KWDkLzkiTn1GEQMR7ErqrD8s+fgCaqx+7/V09ENWCOaxVYvvXY90YYgTePC+KApo
AiQ+mNKTkye33KGX05k26KQEuoAHc1bbJxw53wU6pfTPPRgCyAHwNjCn1NvWmB3m
FxE8Iuc4/hL7y8cVB86d6roQPpVmAO+Nu63LcOscf3/uzvMSzt5gPSR96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQzdWRrObs3p7fmgB6XCJ5BrlZlMB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVUsmW1+
KtXnGamHBjKNL17zWE49mg6Lygn6Be8gg+EKy2z1wXSCuKPsvbqFOn1/BIQNvZPi
3wY5ihnnyUaSA2EFAcSlmxV30btcNiTM5/ivELwWv8y4vsCZvxWoOhsdK3b/2E8E
oLr3DhEswPehQ2l9Su65N/eAWQI8eI/C5toJ7gh9fM05sIqIi0cyw9+LQBdg2j7w
6Jgl+vCZr6OVu89EY4X6zS8y2nfE/iDHl0l6t2230k55EmbecNlxC8912OWnXWCK
0CGoomHFATpxkQ/azIXqthxVF2S2cSBDp5zh/tJamUjGFhYXRACQnFrITGem+jW/
RYE/a0klEVIEFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:56 2026 by rpki-client