Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: IJTtp+yF0M4nMCzH8HvDw2wAuPR57p/svI5VH8ItP4w=
Subject key identifier: E5:96:D1:C7:89:94:63:B6:58:87:46:D2:74:BD:9D:82:3B:B3:E8:8C
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019D98185C57B8A9AEB10B8345C326CB41EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: Ds3/i8xbv11U1CSYVGbndQEr4gy5Ev5/Z6GIySvlSvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5c:57:b8:a9:ae:b1:0b:83:45:c3:26:cb:41:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=e596d1c7899463b6588746d274bd9d823bb3e88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:5f:60:2c:09:87:24:7b:40:4b:bc:d7:f9:
a6:b6:e4:72:a6:9d:96:33:01:c9:a6:6c:98:92:a0:
cc:32:33:81:d1:4b:32:f7:f7:16:60:94:72:6a:01:
d3:71:a0:49:15:de:3a:49:17:50:d3:5c:34:21:13:
96:06:18:d0:8c:71:2f:a3:a7:89:5b:42:db:7b:e3:
ff:a0:e7:a3:9d:b3:e3:67:3f:d5:c6:64:90:cb:57:
a7:36:15:68:59:af:c9:e1:d3:09:45:04:97:8a:96:
f1:bb:39:3b:96:11:36:a5:55:87:cc:b7:db:bf:57:
f1:91:f2:18:6a:b8:db:9d:b6:ae:5f:72:74:41:02:
07:f0:20:f9:24:13:bc:72:4b:6a:46:4e:9c:1d:73:
dc:92:4a:15:59:eb:86:85:ef:4a:fa:fe:63:86:35:
0c:4d:2d:05:cf:35:be:f6:34:e8:7b:0a:46:9d:6e:
57:62:64:a4:1e:ae:af:28:3f:06:8c:76:93:6c:e7:
64:ae:f3:8c:90:8c:f9:f5:f5:a9:2a:61:d7:e3:a2:
8d:22:03:cb:ca:4a:69:93:49:0b:af:89:19:35:3e:
97:8d:53:3f:0c:43:b7:c6:41:b0:b6:07:31:30:af:
5f:fc:8e:6b:00:89:53:38:03:04:40:44:ee:38:83:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:D1:C7:89:94:63:B6:58:87:46:D2:74:BD:9D:82:3B:B3:E8:8C
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:30:35:a3:5f:fa:e2:4b:7d:d0:38:c7:5a:ec:06:43:11:af:
b6:bb:8e:2e:67:6a:87:99:d0:2a:69:68:b6:c9:fb:fa:fa:f2:
31:fa:8d:82:cb:67:e6:7f:2b:d7:b6:bf:57:df:47:3a:e3:e8:
5e:59:9f:c2:33:14:40:74:47:af:d6:6a:62:da:f4:59:1e:f9:
73:fe:d9:83:2c:bd:1e:69:8b:bc:56:3e:7b:25:70:19:49:28:
ca:07:c3:35:70:d7:30:af:31:c8:91:61:de:6f:47:80:5d:4a:
2a:10:f2:57:3a:84:49:6e:56:26:31:cf:e2:c6:8b:23:c9:af:
41:e0:17:b4:4e:b6:cd:01:f5:fe:26:b8:b6:35:d5:21:ca:bf:
3e:a1:39:c0:94:32:43:95:51:c0:27:5e:bb:fb:46:48:10:b3:
99:9c:4c:0f:e0:bf:35:d0:dd:8f:96:47:91:33:58:c9:b8:4f:
4b:bd:39:91:aa:1f:20:99:0b:c3:c7:8b:cd:b4:bb:b6:0e:c2:
7e:5c:e3:dd:41:c5:2d:cb:df:c9:89:c1:44:d1:7d:d6:1c:ca:
90:55:09:0a:5e:6c:58:df:ec:38:1a:84:7d:64:4c:0c:37:54:
81:1a:26:53:3f:f0:4a:01:4d:15:54:c7:49:8c:b9:2a:cc:86:
e3:c4:51:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGFxXuKmusQuDRcMmy0HvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw
MWFhZTEwHhcNMjYwNDE2MjEwMDI2WhcNMjYwNDE3MjEwMDI2WjAzMTEwLwYDVQQD
EyhlNTk2ZDFjNzg5OTQ2M2I2NTg4NzQ2ZDI3NGJkOWQ4MjNiYjNlODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnndfYCwJhyR7QEu81/mmtuRypp2W
MwHJpmyYkqDMMjOB0Usy9/cWYJRyagHTcaBJFd46SRdQ01w0IROWBhjQjHEvo6eJ
W0Lbe+P/oOejnbPjZz/VxmSQy1enNhVoWa/J4dMJRQSXipbxuzk7lhE2pVWHzLfb
v1fxkfIYarjbnbauX3J0QQIH8CD5JBO8cktqRk6cHXPckkoVWeuGhe9K+v5jhjUM
TS0FzzW+9jToewpGnW5XYmSkHq6vKD8GjHaTbOdkrvOMkIz59fWpKmHX46KNIgPL
ykppk0kLr4kZNT6XjVM/DEO3xkGwtgcxMK9f/I5rAIlTOAMEQETuOINmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWW0ceJlGO2WIdG0nS9nYI7s+iMMB8GA1UdIwQY
MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt
MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2
LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjA1o1/6
4kt90DjHWuwGQxGvtruOLmdqh5nQKmlotsn7+vryMfqNgstn5n8r17a/V99HOuPo
XlmfwjMUQHRHr9ZqYtr0WR75c/7Zgyy9HmmLvFY+eyVwGUkoygfDNXDXMK8xyJFh
3m9HgF1KKhDyVzqESW5WJjHP4saLI8mvQeAXtE62zQH1/ia4tjXVIcq/PqE5wJQy
Q5VRwCdeu/tGSBCzmZxMD+C/NdDdj5ZHkTNYybhPS705kaofIJkLw8eLzbS7tg7C
flzj3UHFLcvfyYnBRNF91hzKkFUJCl5sWN/sOBqEfWRMDDdUgRomUz/wSgFNFVTH
SYy5KsyG48RRwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:59:05 2026 by rpki-client