Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: xvTl+qp7kA5lLlSsy5KWk+pSKZe3Xt013J/+ET6OaGE=
Subject key identifier: 07:CE:3D:7E:C3:3C:25:F8:CE:5A:0E:1C:73:B5:73:BB:EB:D7:43:44
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019D9A3EF66ECD5C9534977D73DA0CEEB8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0DE4
Signing time: Fri 17 Apr 2026 07:01:50 +0000
Manifest this update: Fri 17 Apr 2026 07:01:50 +0000
Manifest next update: Sat 18 Apr 2026 07:01:50 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: k8GsDN0JucP5ooi08jqKtEaxE3TVo7TVK3oE43xF640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f6:6e:cd:5c:95:34:97:7d:73:da:0c:ee:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Apr 17 07:01:50 2026 GMT
Not After : Apr 18 07:01:50 2026 GMT
Subject: CN=07ce3d7ec33c25f8ce5a0e1c73b573bbebd74344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:6d:23:4e:fd:7f:95:7d:c2:75:e4:3a:86:
3d:ca:e3:c1:99:a9:55:cd:82:76:61:16:d1:fe:a8:
92:ff:b6:68:dc:df:d0:eb:e9:72:82:7d:64:48:95:
a5:47:54:8f:c3:51:13:9e:39:b3:32:0d:7d:f9:9d:
11:8b:bb:49:80:77:aa:3c:65:78:cd:5b:b6:23:af:
1c:1f:61:8b:72:eb:38:5c:38:8b:54:92:ce:03:f9:
19:c2:bc:1c:48:b6:a2:42:65:b5:10:38:ca:8f:fb:
4b:d5:07:4d:9c:df:c6:e1:76:83:ac:3c:32:68:78:
98:be:18:82:f4:b8:f2:e0:25:30:3d:09:74:78:da:
cb:1f:57:93:96:33:bf:fa:30:72:c5:a6:3a:8d:cf:
cd:de:5e:3d:bf:3f:84:3a:70:e6:b4:6a:f5:67:ae:
1f:2a:6a:78:c4:12:d5:25:8b:52:84:fd:ab:e5:d0:
d6:d1:11:ed:5c:6a:da:7c:b0:2f:4c:8a:7b:ad:9c:
aa:3b:ef:2b:d6:99:c4:f3:b3:2d:b1:0f:87:2a:48:
c5:16:c6:26:8e:ac:a1:c1:2c:df:79:13:b0:0a:5c:
83:66:a0:79:36:ad:3f:c0:7f:a2:8c:31:7d:2b:ec:
0e:15:23:92:37:75:da:5b:48:2f:78:01:69:d5:bc:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:3D:7E:C3:3C:25:F8:CE:5A:0E:1C:73:B5:73:BB:EB:D7:43:44
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:77:c4:d1:c1:86:f6:0d:ba:56:ab:1d:52:20:54:d6:d1:
43:97:8a:97:23:88:ab:00:ab:2f:54:bb:d6:f9:78:c7:ed:a7:
fb:92:81:9c:6a:c6:4d:92:60:18:ae:e6:5f:8e:9e:21:e7:4e:
c7:65:44:5d:c9:2b:4d:40:e0:c6:d1:6f:63:98:7a:ef:2b:7c:
84:f9:7e:62:9f:73:0c:50:d9:a9:ed:c1:97:a0:62:9a:0c:3d:
2c:11:3d:2d:e1:06:ce:e2:ee:35:bf:a8:3e:ad:c6:60:f0:02:
65:04:aa:09:43:b5:53:a1:04:38:73:4e:ae:42:07:f0:43:43:
39:78:b7:bb:2a:5b:ad:67:9f:d6:81:5c:9a:58:b8:b1:0b:6f:
48:22:55:2c:35:be:bc:37:fc:38:6a:97:f4:19:4c:c7:f8:c2:
ce:90:16:00:4e:85:16:c8:19:36:3a:a3:4c:70:a1:2b:82:5e:
bc:bd:c7:68:39:d9:9b:60:bd:f6:a6:53:e1:01:96:71:03:dc:
40:76:6f:5c:16:d6:bb:c0:17:ee:2e:45:77:b3:7c:de:30:7f:
6a:0c:1c:8c:a9:38:45:ce:53:4e:30:1f:1c:a1:f6:bb:29:b7:
37:88:5a:b7:3f:ee:f2:35:99:d8:39:d3:29:35:1c:6c:4c:f7:
2d:2a:34:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPvZuzVyVNJd9c9oM7rirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjYwNDE3MDcwMTUwWhcNMjYwNDE4MDcwMTUwWjAzMTEwLwYDVQQD
EygwN2NlM2Q3ZWMzM2MyNWY4Y2U1YTBlMWM3M2I1NzNiYmViZDc0MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBtI079f5V9wnXkOoY9yuPBmalV
zYJ2YRbR/qiS/7Zo3N/Q6+lygn1kSJWlR1SPw1ETnjmzMg19+Z0Ri7tJgHeqPGV4
zVu2I68cH2GLcus4XDiLVJLOA/kZwrwcSLaiQmW1EDjKj/tL1QdNnN/G4XaDrDwy
aHiYvhiC9Ljy4CUwPQl0eNrLH1eTljO/+jByxaY6jc/N3l49vz+EOnDmtGr1Z64f
Kmp4xBLVJYtShP2r5dDW0RHtXGrafLAvTIp7rZyqO+8r1pnE87MtsQ+HKkjFFsYm
jqyhwSzfeROwClyDZqB5Nq0/wH+ijDF9K+wOFSOSN3XaW0gveAFp1bxRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfOPX7DPCX4zloOHHO1c7vr10NEMB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4V3xNHB
hvYNularHVIgVNbRQ5eKlyOIqwCrL1S71vl4x+2n+5KBnGrGTZJgGK7mX46eIedO
x2VEXckrTUDgxtFvY5h67yt8hPl+Yp9zDFDZqe3Bl6Bimgw9LBE9LeEGzuLuNb+o
Pq3GYPACZQSqCUO1U6EEOHNOrkIH8ENDOXi3uypbrWef1oFcmli4sQtvSCJVLDW+
vDf8OGqX9BlMx/jCzpAWAE6FFsgZNjqjTHChK4JevL3HaDnZm2C99qZT4QGWcQPc
QHZvXBbWu8AX7i5Fd7N83jB/agwcjKk4Rc5TTjAfHKH2uym3N4hatz/u8jWZ2DnT
KTUcbEz3LSo09g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:26 2026 by rpki-client