Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: kvWQuOg5BElM+cALFmqGoWWE5W4/eYOtd3dMvBSdIpw=
Subject key identifier: EB:AD:66:61:FE:21:A8:11:77:0E:57:7D:58:F5:4D:32:F2:3C:A6:83
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 019D992AF9EAF5A6DEA714551CAFC2EA2197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 0C33
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: HedsGQinxKEoucD_-YwSKpsXVyE.roa (hash: Xcrwx8/CkX+Fe5VSYvO/6Sz1NsHEDec2ei5HK0TdHo4=)
2: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: QAUKJrV5zJE/eQ6UnHYALqdLYIIOStIS5FD/8rhR/yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f9:ea:f5:a6:de:a7:14:55:1c:af:c2:ea:21:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=ebad6661fe21a811770e577d58f54d32f23ca683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:3c:b7:e8:9d:cb:06:c7:8f:42:dc:81:92:
54:64:33:d1:43:4c:b5:13:41:95:28:87:c6:f9:78:
32:5e:30:bf:59:b5:b9:23:f8:87:d1:5c:27:d6:72:
a6:d6:0c:0b:f2:0b:45:a9:b5:a0:68:53:9e:63:35:
65:7b:64:ec:ba:03:9e:64:99:b6:b8:61:57:c6:20:
62:d1:b0:33:44:db:ad:29:5a:ab:3c:9d:da:a4:b2:
eb:d3:c9:24:c7:77:1e:4e:5e:14:ab:04:c9:39:fa:
14:b2:bc:70:9e:cf:df:a8:78:f0:f4:3d:dc:11:09:
c3:5b:02:4b:0e:60:a0:28:89:3e:a3:6a:ac:62:da:
35:35:46:67:b2:9a:90:7e:27:ba:6d:15:5c:c7:fa:
d4:a9:a2:d1:2d:62:bf:00:7f:5e:ae:ea:dd:86:af:
01:a9:af:c0:8b:62:f4:8f:8e:fc:0a:e6:38:16:77:
79:61:18:7f:52:ed:eb:36:c0:d0:26:22:b2:e4:3e:
44:f1:aa:9e:c4:8e:a0:dc:a2:0a:27:09:4e:5b:8b:
b4:16:5e:63:39:f1:a7:9b:4a:d6:23:7d:64:7c:c5:
ab:83:21:98:9e:9c:8b:fe:31:6c:69:3c:64:a5:2f:
4e:19:f9:53:fc:6f:9b:b5:9c:14:2b:49:fb:ff:90:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:66:61:FE:21:A8:11:77:0E:57:7D:58:F5:4D:32:F2:3C:A6:83
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:98:46:db:d2:4f:05:f3:b7:fa:bf:3b:9d:5d:22:5e:33:b6:
31:3d:ea:ae:fe:d3:95:96:d9:32:05:cc:de:40:46:41:df:8b:
d6:5d:15:3d:0e:42:7f:8c:0a:e5:41:1d:82:d6:2f:00:e4:f2:
9f:1f:de:34:9c:75:54:0b:fc:8a:bd:26:8e:be:56:32:29:43:
81:d2:84:f3:e6:19:8e:eb:43:de:68:dd:60:a0:e0:ee:dc:a2:
15:57:da:8a:13:ce:1c:84:34:05:38:0c:a6:0c:51:c0:2e:3a:
68:cc:c2:86:11:9d:e6:9e:29:f0:87:2e:0d:07:41:a2:dc:19:
04:e5:8a:c8:13:6c:ad:84:dc:55:26:03:6f:b0:e5:38:bd:4e:
ad:ee:b1:cf:52:89:1a:2a:1a:95:6a:21:ee:7a:e5:77:10:6c:
ea:9a:79:1c:11:84:97:82:23:0b:7d:d6:45:bb:9c:ea:4b:b8:
72:cb:28:3b:1a:17:a0:ca:72:91:68:8c:2f:04:f6:b4:a2:57:
cb:30:7c:16:58:a9:05:d3:59:e3:fb:23:2a:d0:ff:c6:ba:ec:
bd:1e:f7:bd:3a:8e:89:fd:7d:88:57:1c:9d:0a:89:c9:0b:e0:
41:c4:4d:80:b2:a8:41:87:8d:a4:c8:48:a5:b1:dd:96:48:46:
bc:49:66:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvnq9abepxRVHK/C6iGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYzU3YjQ3NTE2YTkwZTBjZmUwNzIxNTc5MzdhNzMzYmQ1
MDNiZTAwHhcNMjYwNDE3MDIwMDIzWhcNMjYwNDE4MDIwMDIzWjAzMTEwLwYDVQQD
EyhlYmFkNjY2MWZlMjFhODExNzcwZTU3N2Q1OGY1NGQzMmYyM2NhNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt88t+idywbHj0LcgZJUZDPRQ0y1
E0GVKIfG+XgyXjC/WbW5I/iH0Vwn1nKm1gwL8gtFqbWgaFOeYzVle2TsugOeZJm2
uGFXxiBi0bAzRNutKVqrPJ3apLLr08kkx3ceTl4UqwTJOfoUsrxwns/fqHjw9D3c
EQnDWwJLDmCgKIk+o2qsYto1NUZnspqQfie6bRVcx/rUqaLRLWK/AH9erurdhq8B
qa/Ai2L0j478CuY4Fnd5YRh/Uu3rNsDQJiKy5D5E8aqexI6g3KIKJwlOW4u0Fl5j
OfGnm0rWI31kfMWrgyGYnpyL/jFsaTxkpS9OGflT/G+btZwUK0n7/5D7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOutZmH+IagRdw5XfVj1TTLyPKaDMB8GA1UdIwQY
MBaAFJDFe0dRapDgz+ByFXk3pzO9UDvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDct
Y2ZhY2IyNTA4NGQ3LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDctY2ZhY2IyNTA4NGQ3
LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5hG29JP
BfO3+r87nV0iXjO2MT3qrv7TlZbZMgXM3kBGQd+L1l0VPQ5Cf4wK5UEdgtYvAOTy
nx/eNJx1VAv8ir0mjr5WMilDgdKE8+YZjutD3mjdYKDg7tyiFVfaihPOHIQ0BTgM
pgxRwC46aMzChhGd5p4p8IcuDQdBotwZBOWKyBNsrYTcVSYDb7DlOL1Ore6xz1KJ
GioalWoh7nrldxBs6pp5HBGEl4IjC33WRbuc6ku4cssoOxoXoMpykWiMLwT2tKJX
yzB8FlipBdNZ4/sjKtD/xrrsvR73vTqOif19iFccnQqJyQvgQcRNgLKoQYeNpMhI
pbHdlkhGvElm6A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:16 2026 by rpki-client