Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: 78rRRcs0Vu40t1QytSW58NzEx4ymQaIhinZcZBzAsiM=
Subject key identifier: 89:B3:59:62:5B:52:17:D4:0C:8C:AB:A0:7C:3B:3E:B8:52:AD:F7:BA
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 019DA378CF178FCEB8F0B93B66FEF452920C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:36 +0000
Manifest this update: Sun 19 Apr 2026 02:01:36 +0000
Manifest next update: Mon 20 Apr 2026 02:01:36 +0000
Files and hashes: 1: LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa (hash: jiCfpWdQJgmhdXrUcXRoAo1coGe6/NfMrbeXLLnoEiM=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: scLR87//WUS0mD32U8DM36xTByoVsf4aSQQcFjO26t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:cf:17:8f:ce:b8:f0:b9:3b:66:fe:f4:52:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Apr 19 02:01:36 2026 GMT
Not After : Apr 20 02:01:36 2026 GMT
Subject: CN=89b359625b5217d40c8caba07c3b3eb852adf7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:51:9f:bf:c7:8c:55:e6:99:88:30:0e:0e:
ad:50:1b:f2:e9:b7:20:cb:c3:31:d3:77:54:5a:96:
10:07:4e:0a:96:bb:89:5f:9e:2b:05:a9:ca:bb:95:
25:ae:44:9d:6b:4f:41:df:20:03:97:d7:a5:97:a9:
94:56:e4:9e:46:0b:dd:f2:50:44:66:72:d7:3a:1a:
91:9c:95:19:c5:77:cb:99:c8:f0:41:2e:19:49:d0:
eb:8f:1d:e8:d5:12:24:0c:76:89:b7:56:2d:f7:53:
9e:d2:06:1b:93:c9:19:00:80:f7:cb:17:cc:37:99:
5f:c2:8f:b3:59:fa:53:e4:37:5d:31:ab:1b:87:fb:
33:05:ee:9d:9f:01:87:1d:3f:2b:59:4b:e2:0e:4c:
32:c8:07:07:ef:3e:39:6f:d7:8c:ee:f0:c9:94:4b:
30:c9:6f:22:b8:a1:07:8c:18:9a:78:bc:f4:b3:9a:
73:a1:69:80:db:f9:51:e3:98:42:90:6b:b8:4c:7d:
2f:9d:7e:c3:88:09:20:b5:ae:aa:41:0d:80:98:96:
d1:5e:4e:db:ce:fd:23:7e:78:ed:69:7c:7a:da:c5:
20:79:9c:fe:2b:fe:37:ed:6f:02:c4:c8:b9:a1:17:
bf:09:19:15:59:35:66:78:2e:ce:84:d7:89:da:fa:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:59:62:5B:52:17:D4:0C:8C:AB:A0:7C:3B:3E:B8:52:AD:F7:BA
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:1f:bd:2e:11:d9:04:23:12:3a:bb:49:4c:fe:cd:13:46:
33:d1:61:0e:ac:e3:af:85:ca:8b:8f:6a:f4:5a:b0:fe:d2:29:
c3:9b:cf:91:d4:60:f7:06:39:80:15:ab:7d:7d:c4:8b:52:6c:
00:55:9f:2f:de:a6:0c:8a:2f:97:bf:51:6d:f3:89:4c:2a:0f:
99:b2:ac:af:b4:9d:a4:c5:dc:de:c8:9e:a5:b8:fa:37:7e:cc:
98:76:8c:9b:03:c1:43:c9:f8:7e:cf:2d:f7:7a:fd:09:66:7f:
18:3b:55:ce:16:79:6e:84:0a:9a:f4:81:1a:85:10:31:7b:d5:
00:0e:28:a4:54:be:0a:11:83:53:9d:5c:ee:a9:7a:f0:ad:cc:
a2:c2:4e:35:0d:9f:70:41:f8:b2:7a:66:2d:ca:0a:3a:98:e7:
b0:0f:ef:c7:fe:e3:14:80:1e:8f:f5:c0:6c:b4:24:18:e7:fc:
10:02:bf:1c:07:26:ec:9d:bf:1c:a3:14:13:1d:8c:08:80:61:
f8:7b:a8:31:ec:2a:ab:24:aa:13:5b:01:c3:af:8e:44:61:7d:
78:7e:d7:22:5b:5b:09:f2:cb:68:f5:5b:57:10:7b:b2:8f:d6:
b3:ba:a3:d1:c3:73:6e:02:d0:b8:8c:d3:9a:4c:ae:07:04:b1:
c6:ad:b7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeM8Xj8648Lk7Zv70UpIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk
ZWJmNzYwHhcNMjYwNDE5MDIwMTM2WhcNMjYwNDIwMDIwMTM2WjAzMTEwLwYDVQQD
Eyg4OWIzNTk2MjViNTIxN2Q0MGM4Y2FiYTA3YzNiM2ViODUyYWRmN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA231Rn7/HjFXmmYgwDg6tUBvy6bcg
y8Mx03dUWpYQB04KlruJX54rBanKu5UlrkSda09B3yADl9ell6mUVuSeRgvd8lBE
ZnLXOhqRnJUZxXfLmcjwQS4ZSdDrjx3o1RIkDHaJt1Yt91Oe0gYbk8kZAID3yxfM
N5lfwo+zWfpT5DddMasbh/szBe6dnwGHHT8rWUviDkwyyAcH7z45b9eM7vDJlEsw
yW8iuKEHjBiaeLz0s5pzoWmA2/lR45hCkGu4TH0vnX7DiAkgta6qQQ2AmJbRXk7b
zv0jfnjtaXx62sUgeZz+K/437W8CxMi5oRe/CRkVWTVmeC7OhNeJ2vrWDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImzWWJbUhfUDIyroHw7PrhSrfe6MB8GA1UdIwQY
MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt
MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz
LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkwfvS4R
2QQjEjq7SUz+zRNGM9FhDqzjr4XKi49q9Fqw/tIpw5vPkdRg9wY5gBWrfX3Ei1Js
AFWfL96mDIovl79RbfOJTCoPmbKsr7SdpMXc3siepbj6N37MmHaMmwPBQ8n4fs8t
93r9CWZ/GDtVzhZ5boQKmvSBGoUQMXvVAA4opFS+ChGDU51c7ql68K3MosJONQ2f
cEH4snpmLcoKOpjnsA/vx/7jFIAej/XAbLQkGOf8EAK/HAcm7J2/HKMUEx2MCIBh
+HuoMewqqySqE1sBw6+ORGF9eH7XIltbCfLLaPVbVxB7so/Ws7qj0cNzbgLQuIzT
mkyuBwSxxq23Uw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:14 2026 by rpki-client