Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: Y+OKM5ssUWXSvCiHRcUla0LwEnibSWBeWyD/uPQaVLI=
Subject key identifier: 23:E4:2C:11:A2:2A:33:1B:01:94:E6:BF:B6:17:60:63:74:9E:F6:13
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019D99CFCC7422EB0709EF96AE08B1E622D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 1668
Signing time: Fri 17 Apr 2026 05:00:25 +0000
Manifest this update: Fri 17 Apr 2026 05:00:25 +0000
Manifest next update: Sat 18 Apr 2026 05:00:25 +0000
Files and hashes: 1: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: gtyU3mnUPqpGHFwLrSpIGCFzprFkeRdQGC7UsU8km8s=)
2: jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa (hash: zoeDpAsCDg15ZqeXjdLWt/zPvQ+0f3jQu+TzTt0DwhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:cc:74:22:eb:07:09:ef:96:ae:08:b1:e6:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Apr 17 05:00:25 2026 GMT
Not After : Apr 18 05:00:25 2026 GMT
Subject: CN=23e42c11a22a331b0194e6bfb6176063749ef613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:4d:db:cc:7e:1e:c5:29:f8:db:4c:ac:3c:
f3:3f:cf:a7:83:24:dd:59:f4:bb:76:b7:64:71:bf:
58:c0:9d:e4:63:86:30:33:1a:27:4d:bd:d7:cf:99:
73:a9:8f:95:91:a8:9d:39:8e:0f:ad:fd:99:b4:d4:
58:ce:9a:a6:33:93:36:09:1f:53:88:5f:cc:86:e2:
ed:56:b2:1e:ad:fd:2f:57:70:72:32:46:43:2d:36:
07:8a:11:6a:36:10:f1:09:3c:46:df:d6:ff:86:bd:
df:3c:e8:f2:ed:1b:22:10:79:79:cb:2b:10:ed:42:
b9:05:9f:c9:45:f0:d0:62:74:4d:5b:d3:c7:4c:31:
42:3d:3d:b3:e8:aa:71:b0:da:14:2d:5d:ae:31:11:
95:f2:78:9f:9d:e3:fe:79:55:cc:cc:67:26:eb:ff:
ce:54:c6:3e:8a:ca:96:da:d1:25:4f:86:89:a7:0c:
6b:7c:b5:a8:a5:b3:25:5e:68:2e:b0:fc:cc:c7:9a:
61:e2:40:2e:d0:1f:5d:f6:c6:a8:cd:f3:46:ba:bc:
62:41:7d:cf:4c:0b:36:08:4f:91:cc:f7:e0:66:1d:
fa:56:f8:fd:0e:4d:3b:91:90:58:c1:f4:b1:48:1a:
01:40:64:77:c5:5f:e3:02:cb:b3:22:e9:c4:09:e2:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:2C:11:A2:2A:33:1B:01:94:E6:BF:B6:17:60:63:74:9E:F6:13
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fc:ba:89:cf:22:46:c3:e7:9c:40:51:b6:33:51:df:0c:3f:
4c:47:ed:3e:ed:8d:20:1a:0f:8b:0b:8d:3e:df:82:3e:29:c6:
d3:15:a5:d1:ed:08:fd:3d:92:00:c2:ae:59:f7:fb:d3:5e:c4:
fd:0b:75:3f:56:6e:cd:40:1c:7a:86:4b:9b:16:5d:30:f3:5d:
03:21:c2:c7:b9:44:ab:99:6a:51:68:c0:c9:46:5c:f5:4c:72:
ee:97:29:be:2b:36:d2:1f:5b:c9:7a:02:24:3c:66:c5:4a:14:
03:96:92:8b:a9:70:88:37:1d:79:18:fc:e7:4b:60:98:a8:21:
ec:df:1f:87:f6:cb:84:c3:32:5d:6e:73:55:7b:db:63:4d:ae:
75:71:49:fc:c4:6e:b9:57:fa:57:48:f8:29:65:6b:23:ae:0c:
0f:b0:18:d4:45:7b:00:e1:7f:5c:e2:2a:ee:72:28:ab:79:17:
f2:11:09:d8:07:a5:2e:50:80:f3:99:c9:74:9f:6d:78:56:b4:
51:84:54:9b:16:69:17:95:11:79:b6:cd:7e:ae:78:60:a6:32:
a8:78:0e:8f:1a:b4:24:4e:78:ec:ad:d0:6a:c1:03:93:b4:88:
ed:93:be:70:2c:f6:a0:b7:c3:28:1e:9d:3e:a2:8a:49:f2:1f:
d5:dc:bd:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8x0IusHCe+Wrgix5iLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Y2I2NjFhNjQzOTY4ZjNmODFlN2IxMTllZWI5NmM1MGQy
ZDM5YzcwHhcNMjYwNDE3MDUwMDI1WhcNMjYwNDE4MDUwMDI1WjAzMTEwLwYDVQQD
EygyM2U0MmMxMWEyMmEzMzFiMDE5NGU2YmZiNjE3NjA2Mzc0OWVmNjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3FN28x+HsUp+NtMrDzzP8+ngyTd
WfS7drdkcb9YwJ3kY4YwMxonTb3Xz5lzqY+VkaidOY4Prf2ZtNRYzpqmM5M2CR9T
iF/MhuLtVrIerf0vV3ByMkZDLTYHihFqNhDxCTxG39b/hr3fPOjy7RsiEHl5yysQ
7UK5BZ/JRfDQYnRNW9PHTDFCPT2z6KpxsNoULV2uMRGV8nifneP+eVXMzGcm6//O
VMY+isqW2tElT4aJpwxrfLWopbMlXmgusPzMx5ph4kAu0B9d9saozfNGurxiQX3P
TAs2CE+RzPfgZh36Vvj9Dk07kZBYwfSxSBoBQGR3xV/jAsuzIunECeIt9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPkLBGiKjMbAZTmv7YXYGN0nvYTMB8GA1UdIwQY
MBaAFCjLZhpkOWjz+B57EZ7rlsUNLTnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYt
N2Q0ZTY4ZGQ0Y2NlLzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYtN2Q0ZTY4ZGQ0Y2Nl
LzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/y6ic8i
RsPnnEBRtjNR3ww/TEftPu2NIBoPiwuNPt+CPinG0xWl0e0I/T2SAMKuWff7017E
/Qt1P1ZuzUAceoZLmxZdMPNdAyHCx7lEq5lqUWjAyUZc9Uxy7pcpvis20h9byXoC
JDxmxUoUA5aSi6lwiDcdeRj850tgmKgh7N8fh/bLhMMyXW5zVXvbY02udXFJ/MRu
uVf6V0j4KWVrI64MD7AY1EV7AOF/XOIq7nIoq3kX8hEJ2AelLlCA85nJdJ9teFa0
UYRUmxZpF5URebbNfq54YKYyqHgOjxq0JE547K3QasEDk7SI7ZO+cCz2oLfDKB6d
PqKKSfIf1dy9Yw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:32 2026 by rpki-client