Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: 1TnalApsE0XHiW2WBDfmMiTx1xDtsjBgu7YLjIzvl0E=
Subject key identifier: E4:A4:23:DB:4F:9F:06:0D:99:F1:51:37:1B:77:08:96:A4:E1:54:3D
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 019D9B51797FC2D299B9F334BA58E657E189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 12BE
Signing time: Fri 17 Apr 2026 12:01:41 +0000
Manifest this update: Fri 17 Apr 2026 12:01:41 +0000
Manifest next update: Sat 18 Apr 2026 12:01:41 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: QaxHA1ChVnSZnHxuiiPHvOMQdKugTjnY6C7qKUFyK5w=)
2: Pgbn6hrf4EkvsSBtNvev-Bd5nHU.roa (hash: 3rY+o6/gK4Ian4zoARE3q3IlKhQ6YIhyFaECvqjHp7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:79:7f:c2:d2:99:b9:f3:34:ba:58:e6:57:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Apr 17 12:01:41 2026 GMT
Not After : Apr 18 12:01:41 2026 GMT
Subject: CN=e4a423db4f9f060d99f151371b770896a4e1543d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:54:09:4d:8d:12:29:53:6b:86:7c:f4:e5:
08:47:67:72:29:af:27:0c:c5:56:db:66:cd:b5:01:
87:53:0a:44:73:8a:87:4b:40:76:cc:a7:30:fb:f5:
1f:05:1f:3d:da:aa:bc:0c:f6:88:5e:92:c0:19:8a:
0b:c5:61:27:a4:5d:2c:0c:a9:e9:de:1c:d9:37:5e:
32:9e:07:ed:c0:87:09:7a:62:24:e3:92:d8:cb:37:
53:55:ec:ac:c9:e7:b4:10:f4:f3:fc:8f:b2:93:7e:
e8:5b:8d:23:be:84:e9:ef:95:ef:91:b6:97:1f:8d:
37:b2:5a:15:51:df:de:9a:7f:03:c1:7c:6b:9f:08:
97:20:1d:d4:94:5f:05:a1:54:5b:3c:f9:a9:50:43:
07:a3:7c:06:89:61:92:c3:d8:e9:34:ad:f7:2b:f5:
fb:42:76:15:0a:84:5e:f1:9a:fc:9c:0e:09:10:c6:
ff:01:1a:32:a8:4d:28:01:09:5a:d9:57:19:38:32:
56:ec:e2:6e:29:a5:31:d8:00:be:8b:75:5e:28:54:
f2:25:54:16:3f:53:18:96:1b:e8:1c:de:ec:45:1b:
bd:05:bd:54:09:7e:d9:3f:b8:5f:43:7a:58:06:be:
cf:88:11:fb:31:5f:08:2d:9a:61:15:0e:4f:99:69:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:23:DB:4F:9F:06:0D:99:F1:51:37:1B:77:08:96:A4:E1:54:3D
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:9b:97:56:4f:d4:a7:c4:99:f8:83:d7:2a:22:86:eb:ea:
68:c1:cf:3a:3e:56:31:e0:23:9f:34:b5:bb:ea:4d:b8:06:f8:
20:bd:61:24:01:38:e9:c9:cc:a1:a5:64:2d:eb:9d:b0:bf:48:
03:9e:f1:1d:02:0c:50:91:22:fb:c7:ed:88:69:73:89:86:3a:
1c:32:c0:e8:b0:96:59:40:75:61:6d:5f:53:e0:11:c4:c1:1b:
87:02:12:72:9a:3f:b2:42:d3:ff:a0:9e:2b:89:e7:2b:7e:5e:
c8:43:62:c5:11:5f:30:4f:ac:46:5e:ad:77:88:f3:51:c8:1f:
63:2d:a5:6f:52:09:ab:31:e8:51:f8:0f:6a:c3:9e:6f:8b:e3:
c5:66:5a:e1:33:39:20:83:51:bf:fa:70:01:1e:82:a5:e0:1d:
04:bb:77:91:6d:b4:47:26:12:ee:5c:17:f7:f3:ad:9a:db:bd:
9e:91:75:38:c5:62:44:7c:93:28:01:d8:e8:d1:74:5e:14:8c:
28:47:81:9f:05:20:10:0f:bb:7a:fd:cc:8a:15:eb:89:36:cf:
8e:e2:5a:3d:08:7b:a5:7f:1b:81:16:86:db:33:d8:bf:41:ca:
3e:cd:cd:dc:57:ec:d8:89:e7:92:db:75:e1:e4:5f:69:fc:e8:
44:6e:b8:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUXl/wtKZufM0uljmV+GJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx
NDVkYjAwHhcNMjYwNDE3MTIwMTQxWhcNMjYwNDE4MTIwMTQxWjAzMTEwLwYDVQQD
EyhlNGE0MjNkYjRmOWYwNjBkOTlmMTUxMzcxYjc3MDg5NmE0ZTE1NDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AhUCU2NEilTa4Z89OUIR2dyKa8n
DMVW22bNtQGHUwpEc4qHS0B2zKcw+/UfBR892qq8DPaIXpLAGYoLxWEnpF0sDKnp
3hzZN14yngftwIcJemIk45LYyzdTVeysyee0EPTz/I+yk37oW40jvoTp75XvkbaX
H403sloVUd/emn8DwXxrnwiXIB3UlF8FoVRbPPmpUEMHo3wGiWGSw9jpNK33K/X7
QnYVCoRe8Zr8nA4JEMb/ARoyqE0oAQla2VcZODJW7OJuKaUx2AC+i3VeKFTyJVQW
P1MYlhvoHN7sRRu9Bb1UCX7ZP7hfQ3pYBr7PiBH7MV8ILZphFQ5PmWmWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSkI9tPnwYNmfFRNxt3CJak4VQ9MB8GA1UdIwQY
MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt
YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3
LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvebl1ZP
1KfEmfiD1yoihuvqaMHPOj5WMeAjnzS1u+pNuAb4IL1hJAE46cnMoaVkLeudsL9I
A57xHQIMUJEi+8ftiGlziYY6HDLA6LCWWUB1YW1fU+ARxMEbhwIScpo/skLT/6Ce
K4nnK35eyENixRFfME+sRl6td4jzUcgfYy2lb1IJqzHoUfgPasOeb4vjxWZa4TM5
IINRv/pwAR6CpeAdBLt3kW20RyYS7lwX9/Otmtu9npF1OMViRHyTKAHY6NF0XhSM
KEeBnwUgEA+7ev3MihXriTbPjuJaPQh7pX8bgRaG2zPYv0HKPs3N3Ffs2Innktt1
4eRfafzoRG648Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:35 2026 by rpki-client