Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: xaon7rbZFMn2Nqdbb73EEd1pyFWNHZMpvlo4RWyEA30=
Subject key identifier: EC:0C:C3:04:05:2D:12:41:DD:76:90:01:C1:7F:55:63:C7:5E:ED:15
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019D99624B27A699C97332FA24FD5FDC291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 12BB
Signing time: Fri 17 Apr 2026 03:00:48 +0000
Manifest this update: Fri 17 Apr 2026 03:00:48 +0000
Manifest next update: Sat 18 Apr 2026 03:00:48 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: 4YG8SR8T87E4JLwQXFZ6HqwQPbaXrORJw+dsJDNrSmY=)
2: Xp-6MgKL7FDxA8beZ_B2_voMBOA.roa (hash: RTnZFx7lRZDDt83YmwGHtedrtI7DlR7GynWDCNcROwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4b:27:a6:99:c9:73:32:fa:24:fd:5f:dc:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Apr 17 03:00:48 2026 GMT
Not After : Apr 18 03:00:48 2026 GMT
Subject: CN=ec0cc304052d1241dd769001c17f5563c75eed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:c0:59:bf:66:6c:53:81:4d:5d:25:6b:24:
99:f1:82:45:5c:e6:1c:49:c8:37:76:31:81:4e:e2:
c4:e8:50:6f:a9:50:52:6e:46:c1:b8:ff:4c:c3:9e:
c7:d8:7e:9c:f6:32:34:04:cd:ee:36:78:fe:c1:a8:
95:f7:9b:56:54:cc:1b:09:8f:68:a3:b7:ad:d0:4d:
18:06:76:be:44:af:18:5c:f3:b0:66:4f:3a:d9:e5:
b2:f3:11:24:78:6f:69:d0:27:39:2b:45:b6:d1:bb:
7f:95:7e:2f:42:e9:30:e8:4d:30:fe:92:81:d0:a6:
d0:7e:50:51:e4:bf:70:58:4d:20:4d:98:af:48:67:
aa:1d:6c:44:15:c0:5b:ce:e1:a8:59:99:ee:72:0e:
e0:b0:70:5c:03:3b:e5:1c:4a:f8:c6:cc:49:0b:8f:
53:74:ca:8d:da:bb:27:07:af:44:81:81:f1:3e:0b:
77:04:b2:e7:53:a0:57:40:ec:19:fe:57:58:1e:28:
8d:06:42:ff:af:a9:36:90:07:3f:52:4d:f0:41:9b:
d7:67:88:8f:a7:1c:da:cb:22:c7:9d:24:00:99:53:
87:2f:fb:9b:04:20:f7:23:1f:52:2b:0a:be:c3:a8:
14:6b:78:95:45:91:38:c8:08:20:62:1a:29:02:69:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:C3:04:05:2D:12:41:DD:76:90:01:C1:7F:55:63:C7:5E:ED:15
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:21:d6:2b:ed:4e:4d:04:75:92:fa:0a:e4:97:f9:e4:4f:
28:5f:14:d2:58:64:43:c9:d1:7c:54:e8:a7:f0:20:b4:5a:77:
e8:67:66:c1:93:4b:38:bc:c8:b4:db:5e:fe:9f:fa:f3:82:08:
e1:f6:1d:8e:d7:37:9b:d4:62:76:95:de:b8:69:5f:73:5c:09:
48:de:e3:84:63:cc:1e:a4:0e:7a:d5:c2:20:ce:18:0e:3f:65:
97:79:31:1f:2d:01:c6:c7:7b:d7:50:a7:8e:e9:b1:ae:c2:8b:
a6:6f:82:61:4f:b0:62:79:fb:ae:ee:49:48:92:e3:bd:8a:c3:
60:a7:cf:3b:e3:94:03:83:8a:fc:7c:ca:d8:65:63:60:7f:11:
3a:1a:00:ab:e2:41:cb:b1:fc:92:31:ee:3b:cc:f6:6b:46:e5:
e4:f6:80:08:75:3e:d5:2a:f2:0b:dc:fa:18:9a:ee:c2:a1:0f:
c8:36:f2:cc:44:6e:d1:d6:e3:02:ee:68:bd:aa:aa:7c:bf:14:
51:2f:79:7e:c3:85:a2:91:9b:2a:45:12:0f:eb:f0:4a:b2:07:
e3:f4:7b:de:32:a0:16:1d:d5:a6:de:79:c3:ea:18:86:dd:3f:
e2:d8:e5:8d:35:96:8f:8f:c0:ad:ba:59:79:c0:64:8d:f0:b2:
88:ef:1c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYksnppnJczL6JP1f3CkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0
ZWQ3ODgwHhcNMjYwNDE3MDMwMDQ4WhcNMjYwNDE4MDMwMDQ4WjAzMTEwLwYDVQQD
EyhlYzBjYzMwNDA1MmQxMjQxZGQ3NjkwMDFjMTdmNTU2M2M3NWVlZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBbAWb9mbFOBTV0laySZ8YJFXOYc
Scg3djGBTuLE6FBvqVBSbkbBuP9Mw57H2H6c9jI0BM3uNnj+waiV95tWVMwbCY9o
o7et0E0YBna+RK8YXPOwZk862eWy8xEkeG9p0Cc5K0W20bt/lX4vQukw6E0w/pKB
0KbQflBR5L9wWE0gTZivSGeqHWxEFcBbzuGoWZnucg7gsHBcAzvlHEr4xsxJC49T
dMqN2rsnB69EgYHxPgt3BLLnU6BXQOwZ/ldYHiiNBkL/r6k2kAc/Uk3wQZvXZ4iP
pxzayyLHnSQAmVOHL/ubBCD3Ix9SKwq+w6gUa3iVRZE4yAggYhopAmlV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwMwwQFLRJB3XaQAcF/VWPHXu0VMB8GA1UdIwQY
MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt
OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4
LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2Qh1ivt
Tk0EdZL6CuSX+eRPKF8U0lhkQ8nRfFTop/AgtFp36GdmwZNLOLzItNte/p/684II
4fYdjtc3m9RidpXeuGlfc1wJSN7jhGPMHqQOetXCIM4YDj9ll3kxHy0Bxsd711Cn
jumxrsKLpm+CYU+wYnn7ru5JSJLjvYrDYKfPO+OUA4OK/HzK2GVjYH8ROhoAq+JB
y7H8kjHuO8z2a0bl5PaACHU+1SryC9z6GJruwqEPyDbyzERu0dbjAu5ovaqqfL8U
US95fsOFopGbKkUSD+vwSrIH4/R73jKgFh3Vpt55w+oYht0/4tjljTWWj4/ArbpZ
ecBkjfCyiO8c1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:08 2026 by rpki-client