Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: aAH6JFT/vkSTaQ0u83CWP16K3k+CO6SFTiWH0kz0CHc=
Subject key identifier: 24:09:06:4D:95:37:39:BB:B9:9A:45:F0:39:F8:5A:04:5A:68:89:B8
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019D9B878650EEAD58B8138F257A75010D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0D19
Signing time: Fri 17 Apr 2026 13:00:43 +0000
Manifest this update: Fri 17 Apr 2026 13:00:43 +0000
Manifest next update: Sat 18 Apr 2026 13:00:43 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: Jp9xcDX0LCF+bfBFAmrydMjuUQvZ4R6mvpVrsIrVUNQ=)
4: b2hDoC2QeOdetXxS8h0K7-tyYmI.roa (hash: 9C3SPDVj2hN5qln0VFtPBwpA+3WenkqM7y2GLRnn6bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:86:50:ee:ad:58:b8:13:8f:25:7a:75:01:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Apr 17 13:00:43 2026 GMT
Not After : Apr 18 13:00:43 2026 GMT
Subject: CN=2409064d953739bbb99a45f039f85a045a6889b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:07:26:e6:f2:67:b2:2f:18:d4:8d:44:e3:
fe:33:63:fa:81:9f:23:bf:09:20:e2:44:7b:4f:09:
1d:56:3c:9f:1d:c1:39:c4:3e:96:2b:06:61:98:6d:
57:bd:c9:e3:b0:79:a0:4f:cd:d0:79:a9:f4:a6:30:
94:69:39:38:6d:0b:e6:85:eb:31:09:94:af:f0:64:
36:3c:54:2d:2f:d4:30:c4:cf:ac:a8:5e:de:e4:10:
c0:99:29:4c:84:00:79:fc:bc:63:7b:0f:6f:c7:ac:
4f:5a:f1:c3:db:44:c0:1b:e6:c5:65:ee:a8:2e:23:
ef:ac:8a:4e:62:21:17:c6:1b:03:8f:6d:04:6c:16:
c0:9d:18:8e:32:a8:18:e2:07:3d:62:5d:d7:a8:25:
2c:8a:ed:2b:a7:94:0e:54:d4:3a:c6:bf:23:16:8a:
f0:2b:12:3a:d6:07:a0:5f:c1:1d:28:bc:49:79:19:
a3:62:c1:3c:d2:f5:38:38:26:2a:6e:f7:af:b7:dc:
02:93:6a:7e:91:db:9c:3b:c9:48:40:35:5c:ca:5e:
ce:1c:af:73:59:f2:d0:98:07:f8:5a:49:8b:11:aa:
67:fc:5e:da:20:d9:25:fa:43:ee:df:df:2f:42:a4:
64:31:3d:3c:5d:cc:f5:93:29:28:74:f5:b6:85:5a:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:06:4D:95:37:39:BB:B9:9A:45:F0:39:F8:5A:04:5A:68:89:B8
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:49:7a:cf:d3:e5:d8:ce:29:cc:90:32:40:ff:9c:0d:12:10:
db:ef:42:c1:80:e4:70:03:c8:6b:69:c2:44:24:6a:43:62:69:
e4:bc:90:e7:54:d1:21:7a:3f:8b:d8:59:66:f1:81:c5:8e:7e:
ec:ea:53:92:07:09:44:34:08:be:30:1b:2c:ee:82:15:aa:73:
09:94:14:7b:ca:e5:c0:e5:e9:82:a1:aa:73:df:fe:cb:5b:d7:
40:01:f6:de:3b:83:42:b8:a4:e9:29:34:7c:5f:dc:e5:cd:2c:
6a:de:39:71:04:0f:de:a4:e5:33:1b:f9:6c:1b:fd:4a:60:15:
5d:0e:a4:f5:35:54:55:6e:d1:18:6f:d9:37:24:fb:46:b9:6b:
97:f4:99:54:51:e5:5c:00:3d:00:6d:cd:e7:c8:ab:78:55:f3:
de:5d:cb:af:2d:ed:73:29:cc:d8:55:66:32:58:af:d8:34:82:
54:b0:ce:a0:8d:71:cb:83:28:83:78:06:34:0f:eb:50:05:2d:
60:0a:fc:93:2a:0f:09:d3:e3:24:3b:da:3b:61:81:0d:6d:3b:
e8:ac:fb:69:bb:e2:c4:00:c1:33:f8:28:00:03:a7:4e:4f:17:
3a:c8:3a:04:8c:d7:59:26:7c:77:b0:42:48:e1:8f:1a:af:79:
a7:11:22:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4ZQ7q1YuBOPJXp1AQ0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjYwNDE3MTMwMDQzWhcNMjYwNDE4MTMwMDQzWjAzMTEwLwYDVQQD
EygyNDA5MDY0ZDk1MzczOWJiYjk5YTQ1ZjAzOWY4NWEwNDVhNjg4OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOkHJubyZ7IvGNSNROP+M2P6gZ8j
vwkg4kR7TwkdVjyfHcE5xD6WKwZhmG1XvcnjsHmgT83Qean0pjCUaTk4bQvmhesx
CZSv8GQ2PFQtL9QwxM+sqF7e5BDAmSlMhAB5/Lxjew9vx6xPWvHD20TAG+bFZe6o
LiPvrIpOYiEXxhsDj20EbBbAnRiOMqgY4gc9Yl3XqCUsiu0rp5QOVNQ6xr8jForw
KxI61gegX8EdKLxJeRmjYsE80vU4OCYqbvevt9wCk2p+kducO8lIQDVcyl7OHK9z
WfLQmAf4WkmLEapn/F7aINkl+kPu398vQqRkMT08Xcz1kykodPW2hVrHSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQJBk2VNzm7uZpF8Dn4WgRaaIm4MB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEl6z9Pl
2M4pzJAyQP+cDRIQ2+9CwYDkcAPIa2nCRCRqQ2Jp5LyQ51TRIXo/i9hZZvGBxY5+
7OpTkgcJRDQIvjAbLO6CFapzCZQUe8rlwOXpgqGqc9/+y1vXQAH23juDQrik6Sk0
fF/c5c0sat45cQQP3qTlMxv5bBv9SmAVXQ6k9TVUVW7RGG/ZNyT7Rrlrl/SZVFHl
XAA9AG3N58ireFXz3l3Lry3tcynM2FVmMliv2DSCVLDOoI1xy4Mog3gGNA/rUAUt
YAr8kyoPCdPjJDvaO2GBDW076Kz7abvixADBM/goAAOnTk8XOsg6BIzXWSZ8d7BC
SOGPGq95pxEiNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:39 2026 by rpki-client