Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: VATFZK+LiP5upKAbHdPbfqGXbWKbFNSOEWBF/hBhvaM=
Subject key identifier: 29:6A:EE:5E:B8:43:4E:E9:87:95:58:A4:4B:1E:E7:F9:A3:CE:ED:51
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019DA29C66C6FB679040783308953D8FC5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 1115
Signing time: Sat 18 Apr 2026 22:00:52 +0000
Manifest this update: Sat 18 Apr 2026 22:00:52 +0000
Manifest next update: Sun 19 Apr 2026 22:00:52 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: IL3v1+pJX9AgxEU9MyF5t5hygSkIaSTNO4as8xt71Hw=)
2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:66:c6:fb:67:90:40:78:33:08:95:3d:8f:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Apr 18 22:00:52 2026 GMT
Not After : Apr 19 22:00:52 2026 GMT
Subject: CN=296aee5eb8434ee9879558a44b1ee7f9a3ceed51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:16:85:7f:5a:9a:fe:e7:41:c6:fb:8d:c0:
d2:44:45:3a:91:a0:2f:22:54:83:c9:7f:d5:68:80:
65:ff:22:d3:09:75:7b:78:7f:26:d1:7e:5c:cc:ba:
84:3f:40:b5:cc:60:82:fb:10:9c:e6:85:d7:6c:29:
f1:74:c7:cf:94:c1:1d:48:ea:a6:b8:cb:bb:e3:6a:
47:1e:e4:df:c1:27:85:62:7d:4e:8a:32:06:4a:1d:
56:62:56:fa:78:c4:a8:e8:40:a5:94:aa:42:fe:eb:
65:73:50:18:3e:4a:47:6d:26:2a:ee:83:4b:ff:68:
ba:7e:27:1a:12:45:6c:47:59:89:e7:e0:b4:01:ab:
4c:1d:3a:e8:4a:32:75:fa:4d:8b:43:51:b6:e6:5c:
be:9f:6e:3e:60:09:ae:c8:c3:2e:1b:fc:67:78:50:
ac:b6:e6:01:56:9a:93:ec:88:43:c7:7b:19:98:df:
3c:d5:06:72:1e:15:30:93:3e:cf:2a:1a:2b:23:c4:
67:f3:78:db:ce:63:b8:9c:7b:50:d0:ed:bc:97:c1:
e2:6b:ab:7d:5d:f6:01:d5:73:3d:71:da:21:1d:b8:
75:b0:29:c5:23:5c:8a:7b:ed:e8:60:01:5a:8f:71:
71:75:21:a4:a0:83:b7:06:6e:01:a8:ed:ca:c6:22:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:EE:5E:B8:43:4E:E9:87:95:58:A4:4B:1E:E7:F9:A3:CE:ED:51
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5a:bd:c5:76:0f:cd:af:00:cb:77:0c:26:3c:84:77:41:17:
84:76:39:dd:cc:48:57:4b:59:ba:51:d7:10:3e:72:93:1d:97:
5e:de:af:ac:e0:02:ce:68:b1:da:1d:c6:79:2a:71:b2:b3:24:
49:0f:a8:e8:1e:2f:52:64:42:94:6d:2a:5d:01:6a:ac:1c:4f:
93:5c:62:cc:67:40:be:93:c1:27:72:1e:e5:e7:4f:ef:ac:66:
15:6c:dc:da:61:94:87:35:1f:f1:ae:da:8a:53:b6:9a:b6:26:
bc:93:5b:2c:2c:12:f1:9d:cf:cf:1d:a4:39:07:bf:4e:15:50:
7f:0a:0e:17:1c:72:42:4f:c0:4c:b7:8b:5e:94:58:1d:ff:d7:
a6:1d:23:37:b0:78:bc:d6:f7:49:71:f0:8b:92:15:7b:0a:ba:
a8:0b:6a:cf:9e:93:ce:4a:36:26:1f:db:bc:37:5b:ad:a5:b8:
6b:f8:3c:08:75:f0:c2:f2:cf:33:48:bf:5e:9c:34:c0:38:bf:
d9:3c:d9:d9:ae:9e:fa:35:1f:4c:a1:35:b7:55:c3:e4:5d:f1:
4a:45:c1:b5:89:10:ef:56:c6:33:c0:46:f8:0f:0a:cf:8a:e2:
38:ce:9f:7e:44:04:98:92:e6:e2:80:f0:5d:2f:54:4f:fb:10:
26:7b:7e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inGbG+2eQQHgzCJU9j8XWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4
ZmUzY2EwHhcNMjYwNDE4MjIwMDUyWhcNMjYwNDE5MjIwMDUyWjAzMTEwLwYDVQQD
EygyOTZhZWU1ZWI4NDM0ZWU5ODc5NTU4YTQ0YjFlZTdmOWEzY2VlZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQWhX9amv7nQcb7jcDSREU6kaAv
IlSDyX/VaIBl/yLTCXV7eH8m0X5czLqEP0C1zGCC+xCc5oXXbCnxdMfPlMEdSOqm
uMu742pHHuTfwSeFYn1OijIGSh1WYlb6eMSo6ECllKpC/utlc1AYPkpHbSYq7oNL
/2i6ficaEkVsR1mJ5+C0AatMHTroSjJ1+k2LQ1G25ly+n24+YAmuyMMuG/xneFCs
tuYBVpqT7IhDx3sZmN881QZyHhUwkz7PKhorI8Rn83jbzmO4nHtQ0O28l8Hia6t9
XfYB1XM9cdohHbh1sCnFI1yKe+3oYAFaj3FxdSGkoIO3Bm4BqO3KxiKR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClq7l64Q07ph5VYpEse5/mjzu1RMB8GA1UdIwQY
MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt
MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2
LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1q9xXYP
za8Ay3cMJjyEd0EXhHY53cxIV0tZulHXED5ykx2XXt6vrOACzmix2h3GeSpxsrMk
SQ+o6B4vUmRClG0qXQFqrBxPk1xizGdAvpPBJ3Ie5edP76xmFWzc2mGUhzUf8a7a
ilO2mrYmvJNbLCwS8Z3Pzx2kOQe/ThVQfwoOFxxyQk/ATLeLXpRYHf/Xph0jN7B4
vNb3SXHwi5IVewq6qAtqz56Tzko2Jh/bvDdbraW4a/g8CHXwwvLPM0i/Xpw0wDi/
2TzZ2a6e+jUfTKE1t1XD5F3xSkXBtYkQ71bGM8BG+A8Kz4riOM6ffkQEmJLm4oDw
XS9UT/sQJnt+sA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:52 2026 by rpki-client