Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: 6OKcuNb3dfbinpKWLWa76qxKEgW/6vz2RoVlzyMtVIo=
Subject key identifier: 1C:B1:18:57:89:53:F9:32:69:8E:E6:83:5F:84:EF:D7:71:3A:AC:01
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 019D988635BF04FE783B02F3BEA83E37BF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 17F0
Signing time: Thu 16 Apr 2026 23:00:25 +0000
Manifest this update: Thu 16 Apr 2026 23:00:25 +0000
Manifest next update: Fri 17 Apr 2026 23:00:25 +0000
Files and hashes: 1: 5QmOeOcUdY7PgR2mhomMmURmuqs.roa (hash: nAdOMEid1C3Yq0ETT9B3VCzoGTlapbIXU3Ku/VQ6Zh4=)
2: eyf8XzSbncmCJU29RuqgmWhSNro.roa (hash: mUIcsYMRdVByHfVcrIRSb1EWADuJM/ORhSKfGGlrQmI=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: KDRD0xs568psv8p/KwJy3JgvAmd199cGrwn6PDB47rI=)
4: vlBm4myZdQP1ohfAJP8Wn0CKhfM.roa (hash: A7mI2HH8XjzLQexitcPz+d6p5dC+aDvH0ocwPRoRwa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:35:bf:04:fe:78:3b:02:f3:be:a8:3e:37:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Apr 16 23:00:25 2026 GMT
Not After : Apr 17 23:00:25 2026 GMT
Subject: CN=1cb118578953f932698ee6835f84efd7713aac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c5:ec:98:f1:28:31:61:9d:1f:7f:93:1e:8f:
ec:91:b2:1b:25:94:06:09:3a:fe:2a:0a:5e:da:b5:
ff:ce:2a:2a:62:18:c2:2a:0a:6d:f5:d1:ac:c0:f5:
d2:1d:0c:d9:c7:01:7f:7c:06:db:34:09:c7:53:fc:
3a:cd:c9:dd:c5:d9:2c:8b:3d:d5:36:29:8d:2d:e5:
ee:0a:48:d8:92:9a:7e:a9:24:6b:b9:31:e2:7b:4e:
e0:41:43:a9:62:d7:74:94:6a:1a:98:ae:0e:70:b1:
a6:60:aa:84:96:16:46:e4:85:c9:31:50:5e:a3:06:
e5:e1:d1:96:cb:ce:9e:f3:e9:45:47:35:04:a8:71:
75:5f:aa:0a:ac:f1:a1:2f:4b:3c:dd:77:fe:53:94:
45:6d:5a:8b:ba:8e:21:ea:a5:9c:bc:63:0c:6b:ba:
3f:0d:d4:aa:36:e2:6a:1b:59:a5:8d:cf:f3:f2:7e:
19:cb:f1:a9:e1:0e:af:6b:86:1a:fe:d2:e9:c1:2f:
19:d1:2e:9b:58:25:59:8e:c9:5e:18:62:33:a1:a4:
a7:a1:6e:dd:5d:e6:35:0b:a4:f1:b7:77:04:65:01:
35:db:c2:75:ab:4f:59:0b:8c:75:3a:c1:2d:af:4f:
d8:e3:65:b7:f9:62:98:ff:37:f4:b2:75:86:a6:88:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:18:57:89:53:F9:32:69:8E:E6:83:5F:84:EF:D7:71:3A:AC:01
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:32:f4:d8:b7:23:8a:aa:5f:32:13:59:85:ee:99:bc:50:43:
e9:b3:b5:2b:0f:ef:a7:2b:af:22:51:93:49:1a:61:5f:12:7c:
6a:ac:d2:18:1e:c1:e4:b7:68:f0:26:dd:02:21:ea:0e:25:85:
b8:ac:cf:10:b6:a7:3a:1d:10:7a:cd:27:11:3a:9c:8d:3b:0e:
3d:9a:31:0e:8e:fe:99:52:ec:d7:aa:f9:c2:57:17:94:9b:a8:
f5:0b:5c:45:61:ae:f5:53:31:c8:83:c1:b0:39:b2:f6:77:c3:
5a:6a:e7:7d:ea:ad:c2:ba:d3:5c:42:08:8f:9e:c8:2a:e3:af:
ce:e4:da:ef:c5:12:09:42:fe:ea:27:92:58:28:c8:ce:04:25:
ac:5d:a1:1a:72:45:2a:61:ab:f9:e9:c4:72:99:ea:e5:13:1a:
02:25:5b:c0:34:22:70:55:96:50:8b:ab:37:0d:e6:72:40:fd:
d8:25:33:22:1b:04:7e:8f:68:b2:cf:00:9b:e8:ff:e9:4d:77:
cd:84:56:31:d1:53:df:46:79:0c:2f:87:61:54:85:9a:d7:4d:
e6:b7:cf:f5:a8:94:9d:82:72:c4:45:59:66:43:cc:c9:08:8b:
ca:90:01:95:16:b5:2a:b3:41:6f:b7:0f:4b:16:af:29:e5:a3:
68:ce:d2:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhjW/BP54OwLzvqg+N78PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDAxYzQ3ZjAwZTY0ZjM1Y2M3NTJkMDNiMzRhNzFiNzE0
MDZiM2YwHhcNMjYwNDE2MjMwMDI1WhcNMjYwNDE3MjMwMDI1WjAzMTEwLwYDVQQD
EygxY2IxMTg1Nzg5NTNmOTMyNjk4ZWU2ODM1Zjg0ZWZkNzcxM2FhYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8XsmPEoMWGdH3+THo/skbIbJZQG
CTr+Kgpe2rX/zioqYhjCKgpt9dGswPXSHQzZxwF/fAbbNAnHU/w6zcndxdksiz3V
NimNLeXuCkjYkpp+qSRruTHie07gQUOpYtd0lGoamK4OcLGmYKqElhZG5IXJMVBe
owbl4dGWy86e8+lFRzUEqHF1X6oKrPGhL0s83Xf+U5RFbVqLuo4h6qWcvGMMa7o/
DdSqNuJqG1mljc/z8n4Zy/Gp4Q6va4Ya/tLpwS8Z0S6bWCVZjsleGGIzoaSnoW7d
XeY1C6Txt3cEZQE128J1q09ZC4x1OsEtr0/Y42W3+WKY/zf0snWGpoi+NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByxGFeJU/kyaY7mg1+E79dxOqwBMB8GA1UdIwQY
MBaAFJHQHEfwDmTzXMdS0Ds0pxtxQGs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWIt
NTZiMDA2ZWYwZDNiLzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWItNTZiMDA2ZWYwZDNi
LzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTL02Lcj
iqpfMhNZhe6ZvFBD6bO1Kw/vpyuvIlGTSRphXxJ8aqzSGB7B5Ldo8CbdAiHqDiWF
uKzPELanOh0Qes0nETqcjTsOPZoxDo7+mVLs16r5wlcXlJuo9QtcRWGu9VMxyIPB
sDmy9nfDWmrnfeqtwrrTXEIIj57IKuOvzuTa78USCUL+6ieSWCjIzgQlrF2hGnJF
KmGr+enEcpnq5RMaAiVbwDQicFWWUIurNw3mckD92CUzIhsEfo9oss8Am+j/6U13
zYRWMdFT30Z5DC+HYVSFmtdN5rfP9aiUnYJyxEVZZkPMyQiLypABlRa1KrNBb7cP
SxavKeWjaM7Sew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:18 2026 by rpki-client