Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: 3WHMiBovbrEEtBP96nsI+MlaANkWe1Y+oQiIdbeKaAg=
Subject key identifier: C1:B4:D9:31:3A:88:96:17:C3:E9:C4:AB:9D:7D:EB:0E:16:7F:8F:B8
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019D9A74A4002B58AF427D102811044AA1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 095D
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: CY1+X387KGFqF9ke11jEvWhIkR4nYZ9XTXlfy3RMRns=)
2: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (hash: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a4:00:2b:58:af:42:7d:10:28:11:04:4a:a1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=c1b4d9313a889617c3e9c4ab9d7deb0e167f8fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:a1:7d:0d:46:97:91:11:2d:30:c2:63:ba:
39:56:c5:93:bf:6f:da:ab:cf:74:c9:c5:3c:c8:d2:
56:9f:f4:a6:44:b7:ca:e9:cd:cb:43:9b:af:8c:9a:
24:c0:b9:99:ef:f0:ca:9d:9d:2f:6d:11:bd:88:0a:
32:56:c1:3f:4e:54:1a:cf:c2:ea:69:19:26:9c:53:
49:51:d0:1f:4a:79:41:e8:1c:d7:f7:99:05:1d:ef:
bc:89:16:12:65:c6:97:01:56:13:29:34:3c:ae:58:
23:0a:f9:91:42:bb:c3:71:77:ab:5c:fc:0b:03:f4:
11:48:d3:81:7b:9e:de:e6:e5:95:12:5e:43:9d:a2:
8a:7b:92:7a:45:76:a6:7d:f7:dd:f2:fc:2c:f7:3b:
c0:26:86:38:3b:b5:c3:5f:3e:23:2c:ef:6d:5a:db:
eb:c9:36:55:c0:38:54:d0:96:3c:cf:e6:63:f8:c0:
72:20:be:67:3f:5f:da:d2:95:52:ff:bb:3d:38:ee:
50:a9:31:a2:fc:5f:db:88:09:b8:63:72:31:c4:b5:
42:97:fe:51:9e:fb:d7:e8:34:54:e0:5f:2e:18:ce:
aa:20:c9:04:08:d0:d3:91:ac:b3:5f:aa:bd:54:22:
80:ef:34:05:11:37:ba:54:fa:2a:ae:13:d2:ee:81:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:D9:31:3A:88:96:17:C3:E9:C4:AB:9D:7D:EB:0E:16:7F:8F:B8
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:a7:00:e4:4a:31:36:69:c0:15:e9:aa:fb:7e:c2:bf:eb:
98:fe:4c:e0:db:cc:27:cd:ad:0e:f2:0e:c7:38:b2:9d:c3:0a:
13:21:20:69:ab:18:a8:b9:b1:51:a0:cc:fa:88:e8:e2:0e:ff:
4d:6a:c4:9c:b7:88:3f:c0:3f:28:b4:b9:7d:e6:0b:f8:21:43:
54:e9:a2:6b:f2:a1:bc:14:04:25:15:c0:bf:94:45:b7:d0:ee:
73:65:a6:b3:58:c9:5f:71:29:85:fe:33:f1:bd:64:6e:db:77:
2d:1c:f4:9a:21:ea:57:2a:be:0c:66:86:21:42:b5:af:61:46:
b3:7e:65:78:00:1b:3a:ab:36:56:60:d5:9b:84:07:c1:1e:64:
70:53:39:97:96:e8:79:08:ef:00:ed:c6:d3:9a:4f:3f:9c:a8:
09:12:28:77:74:33:42:da:63:09:19:26:2a:de:74:45:85:58:
92:29:c1:6b:81:9d:6d:3e:5f:c5:b3:94:e8:47:e3:da:3d:67:
73:26:b5:fa:e2:f3:76:f4:83:e3:bc:8e:b3:ba:72:16:46:be:
2f:4a:75:4d:dc:7a:d0:78:f7:96:a7:6c:96:92:43:a7:18:1f:
4d:d9:4d:33:5d:22:6f:0c:0c:4f:49:21:a1:cd:9f:82:f9:a6:
8e:67:92:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKQAK1ivQn0QKBEESqHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1
NjA2NmUwHhcNMjYwNDE3MDgwMDI4WhcNMjYwNDE4MDgwMDI4WjAzMTEwLwYDVQQD
EyhjMWI0ZDkzMTNhODg5NjE3YzNlOWM0YWI5ZDdkZWIwZTE2N2Y4ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv+hfQ1Gl5ERLTDCY7o5VsWTv2/a
q890ycU8yNJWn/SmRLfK6c3LQ5uvjJokwLmZ7/DKnZ0vbRG9iAoyVsE/TlQaz8Lq
aRkmnFNJUdAfSnlB6BzX95kFHe+8iRYSZcaXAVYTKTQ8rlgjCvmRQrvDcXerXPwL
A/QRSNOBe57e5uWVEl5DnaKKe5J6RXamfffd8vws9zvAJoY4O7XDXz4jLO9tWtvr
yTZVwDhU0JY8z+Zj+MByIL5nP1/a0pVS/7s9OO5QqTGi/F/biAm4Y3IxxLVCl/5R
nvvX6DRU4F8uGM6qIMkECNDTkayzX6q9VCKA7zQFETe6VPoqrhPS7oHG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG02TE6iJYXw+nEq5196w4Wf4+4MB8GA1UdIwQY
MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt
ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw
LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlinAORK
MTZpwBXpqvt+wr/rmP5M4NvMJ82tDvIOxziyncMKEyEgaasYqLmxUaDM+ojo4g7/
TWrEnLeIP8A/KLS5feYL+CFDVOmia/KhvBQEJRXAv5RFt9Duc2Wms1jJX3Ephf4z
8b1kbtt3LRz0miHqVyq+DGaGIUK1r2FGs35leAAbOqs2VmDVm4QHwR5kcFM5l5bo
eQjvAO3G05pPP5yoCRIod3QzQtpjCRkmKt50RYVYkinBa4GdbT5fxbOU6Efj2j1n
cya1+uLzdvSD47yOs7pyFka+L0p1Tdx60Hj3lqdslpJDpxgfTdlNM10ibwwMT0kh
oc2fgvmmjmeSZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:35 2026 by rpki-client