Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: MnJhtF0h5H8huQopbBF7TTBIougcGXewpdPVUMi/iCA=
Subject key identifier: D8:29:9C:FE:69:55:19:A5:9B:99:04:AB:49:81:0E:1D:40:00:28:C3
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019D99CFD094169DEF8A55CE25C6EFA3CF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:26 +0000
Manifest this update: Fri 17 Apr 2026 05:00:26 +0000
Manifest next update: Sat 18 Apr 2026 05:00:26 +0000
Files and hashes: 1: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (hash: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0=)
2: eByvcSZKJ0C054yav4nbHodBBYg.roa (hash: iRSBboUDEVdKSWCvgZE0xP0Y8IB0acvS1GqTMfNLmr8=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: eKx726yGMHLjKkzGcnp50dNNujh6ZjyHgKhKlJFZRE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d0:94:16:9d:ef:8a:55:ce:25:c6:ef:a3:cf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Apr 17 05:00:26 2026 GMT
Not After : Apr 18 05:00:26 2026 GMT
Subject: CN=d8299cfe695519a59b9904ab49810e1d400028c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:86:30:58:7a:59:58:c5:a3:f6:ed:bd:be:
2d:db:93:ea:16:6f:76:38:67:2e:40:52:b4:1a:9e:
ba:cf:93:ef:29:74:a5:b7:22:05:09:36:fe:3a:03:
46:77:00:2c:7d:c3:04:31:0f:92:78:4e:a2:52:1b:
6c:92:aa:cb:c3:fe:82:59:1f:51:5d:fa:84:d3:52:
52:31:13:f6:3d:8e:5b:78:6e:e5:08:63:f5:ab:8e:
1c:09:b3:0f:1a:18:a7:0c:44:49:ed:0d:03:20:23:
f9:08:27:5c:ad:c1:a1:d4:d2:fd:b5:16:a4:d1:a2:
61:0d:5b:f6:db:36:0a:31:c2:f5:cb:38:9d:86:00:
19:0a:22:2e:c3:38:79:68:d1:f2:2e:89:22:7c:44:
b9:dd:fb:df:ea:fa:01:48:c6:38:dd:0c:7b:50:f1:
c8:56:af:bf:61:b5:33:07:91:03:dc:c5:68:f2:dd:
99:2f:82:46:dd:0f:39:91:2b:86:e2:b5:db:3f:47:
61:5c:ae:bb:d5:78:1c:5d:0a:b5:e1:2f:e7:96:e1:
a2:c2:19:52:82:68:6a:cc:c1:bd:28:59:97:50:e3:
2c:64:7b:18:44:d2:1d:8c:0e:59:1d:9c:37:8b:9f:
69:8d:4d:64:c5:fa:cb:78:5a:a6:06:b1:28:94:78:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:9C:FE:69:55:19:A5:9B:99:04:AB:49:81:0E:1D:40:00:28:C3
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:79:2b:40:3b:44:5b:4e:4f:9c:dc:fd:36:e3:d1:ca:bd:bf:
84:45:64:7f:6c:22:57:24:67:a8:b5:bc:16:9d:9c:a2:64:8f:
ef:67:e7:75:a9:2f:aa:df:47:9a:e5:8d:64:5f:48:06:d0:16:
6c:2f:06:f3:d5:76:12:a7:d6:01:6c:89:db:41:c9:90:2f:f6:
af:ca:ad:78:a7:66:34:58:14:ec:f5:18:fd:77:16:e6:6c:04:
9f:73:71:75:37:0e:e7:8d:3a:fc:8f:48:a4:d4:dd:e2:50:88:
41:58:5c:e0:20:6e:da:07:df:16:3c:17:0d:a5:b5:39:f8:32:
9f:fd:4f:f4:8c:f6:ef:dc:e0:40:41:76:bc:66:cf:ee:e7:f9:
1c:da:1b:f6:a8:6e:17:60:88:a6:93:d5:af:cb:18:ee:84:04:
06:b5:b1:38:2b:04:ac:88:04:dd:a1:95:85:78:be:70:65:7b:
da:99:34:25:45:d4:73:4a:db:2d:7a:b9:1a:dd:2e:11:b8:6e:
83:82:1d:97:bb:3f:2a:1d:b9:22:6b:2d:69:c0:64:77:0d:c2:
c5:6b:f6:27:65:0c:07:fd:b3:b2:21:d9:17:04:4e:88:6e:b8:
92:7e:22:57:2d:04:cb:e6:46:20:c8:db:d1:cc:48:74:6a:c1:
d0:ce:ad:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9CUFp3vilXOJcbvo891MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl
MDgyODcwHhcNMjYwNDE3MDUwMDI2WhcNMjYwNDE4MDUwMDI2WjAzMTEwLwYDVQQD
EyhkODI5OWNmZTY5NTUxOWE1OWI5OTA0YWI0OTgxMGUxZDQwMDAyOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTeGMFh6WVjFo/btvb4t25PqFm92
OGcuQFK0Gp66z5PvKXSltyIFCTb+OgNGdwAsfcMEMQ+SeE6iUhtskqrLw/6CWR9R
XfqE01JSMRP2PY5beG7lCGP1q44cCbMPGhinDERJ7Q0DICP5CCdcrcGh1NL9tRak
0aJhDVv22zYKMcL1yzidhgAZCiIuwzh5aNHyLokifES53fvf6voBSMY43Qx7UPHI
Vq+/YbUzB5ED3MVo8t2ZL4JG3Q85kSuG4rXbP0dhXK671XgcXQq14S/nluGiwhlS
gmhqzMG9KFmXUOMsZHsYRNIdjA5ZHZw3i59pjU1kxfrLeFqmBrEolHji4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgpnP5pVRmlm5kEq0mBDh1AACjDMB8GA1UdIwQY
MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt
ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi
LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3krQDtE
W05PnNz9NuPRyr2/hEVkf2wiVyRnqLW8Fp2comSP72fndakvqt9HmuWNZF9IBtAW
bC8G89V2EqfWAWyJ20HJkC/2r8qteKdmNFgU7PUY/XcW5mwEn3NxdTcO5406/I9I
pNTd4lCIQVhc4CBu2gffFjwXDaW1Ofgyn/1P9Iz279zgQEF2vGbP7uf5HNob9qhu
F2CIppPVr8sY7oQEBrWxOCsErIgE3aGVhXi+cGV72pk0JUXUc0rbLXq5Gt0uEbhu
g4Idl7s/Kh25ImstacBkdw3CxWv2J2UMB/2zsiHZFwROiG64kn4iVy0Ey+ZGIMjb
0cxIdGrB0M6tZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:48 2026 by rpki-client