Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier: RC/mL7Fq/HKz4k359nmvP+2Jy/4xzjXE75YtBO0DVd8=
Subject key identifier: 12:23:A3:8B:5A:06:BC:70:2E:46:03:8F:8E:80:88:68:66:1A:42:96
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019D9886A81E5BB79A27E0A3656B1D3D9AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number: 18E1
Signing time: Thu 16 Apr 2026 23:00:54 +0000
Manifest this update: Thu 16 Apr 2026 23:00:54 +0000
Manifest next update: Fri 17 Apr 2026 23:00:54 +0000
Files and hashes: 1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
2: PjFMEAMN046NMpzBfiyNN8yjdm0.roa (hash: Whh7oGBU8ez0qOcGw3H29bTvnY4RX3Rk5yKQaymKBS0=)
3: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
4: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: MHZ5M69oJ0qrPyVGFzneU+H+sP+rG3/PFzbnFV0dZDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:a8:1e:5b:b7:9a:27:e0:a3:65:6b:1d:3d:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 16 23:00:54 2026 GMT
Not After : Apr 17 23:00:54 2026 GMT
Subject: CN=1223a38b5a06bc702e46038f8e808868661a4296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:2c:96:16:44:6d:b9:68:e8:7a:53:56:87:
6d:91:1b:38:69:cd:b7:66:ea:f6:ee:82:2a:71:32:
73:e4:3e:45:8b:ec:53:b8:77:0f:00:a0:ac:81:e1:
4c:e7:18:d2:b2:7c:9a:69:ee:6d:2f:8a:31:b6:c5:
f8:10:3c:5b:1d:98:93:ad:18:33:b2:bf:d9:b2:55:
e3:fc:5b:6d:ae:50:17:6d:e2:5d:64:ff:62:d3:0e:
a7:92:43:c8:fc:f0:28:e5:5f:eb:dd:05:1e:9e:dc:
91:fa:18:df:e4:fc:29:73:eb:ec:c1:4a:98:85:fe:
c0:cf:e5:27:b9:d9:96:52:96:26:a6:3b:1d:62:ea:
dc:64:31:29:70:21:ef:7c:a6:5d:b0:9d:90:94:4f:
b3:72:4b:f6:26:c6:60:6c:ec:d3:00:fd:24:c7:e8:
77:f9:2b:45:30:13:f0:9f:01:6d:44:93:9e:4a:c3:
c4:07:79:be:8f:75:92:79:9d:04:a2:cd:d2:e5:74:
76:45:cd:f3:dd:93:7b:6a:e8:41:e1:ed:a6:11:de:
68:6a:e2:bf:f6:d0:08:ed:3f:6d:2c:91:8a:4a:c6:
8a:81:41:f1:ec:9f:42:62:5d:63:be:f3:6a:85:b8:
d7:03:95:2f:33:e5:99:c3:6b:8f:b2:fd:27:55:9b:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:A3:8B:5A:06:BC:70:2E:46:03:8F:8E:80:88:68:66:1A:42:96
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:ce:4b:77:ff:79:40:eb:d3:8c:cd:14:b8:2f:07:2b:0e:
b2:6f:9a:6b:71:e3:19:b2:6b:77:dc:86:f8:3a:80:ef:de:3e:
2e:ad:e6:15:6f:19:17:eb:50:14:d0:2f:80:05:cf:b1:04:09:
e6:86:9d:8b:46:b8:c0:40:c2:b8:32:5c:ee:ae:0e:5c:0d:7d:
6c:98:39:3e:4d:55:88:64:cc:06:99:42:aa:57:cc:a3:38:12:
3e:8c:0b:5c:04:8c:e1:54:08:d0:54:da:e9:75:84:b2:26:ae:
2a:7d:ec:0a:93:c5:d1:24:2f:61:ab:06:48:67:d3:97:6a:4a:
9a:c9:2f:50:6b:51:7e:13:d0:8a:2b:cd:1c:5c:51:6b:9b:6b:
1d:41:75:9e:a5:6e:3d:33:84:b4:12:de:d5:e3:18:bf:83:f2:
87:ff:cf:7f:f9:e0:5b:bf:ca:1c:99:ee:3c:2a:58:da:b6:6a:
6c:a4:95:0f:82:4d:ea:14:15:25:46:7d:fe:43:21:3f:7e:e6:
dc:76:1b:7a:20:cb:cc:05:d6:f3:71:c7:22:67:d9:d0:05:1f:
f7:cc:5c:8a:ad:54:39:16:98:c0:6e:82:72:5f:12:c1:af:c8:
ae:b0:c5:4e:d3:d8:31:4d:5e:5f:74:4a:74:4a:9a:e8:3f:d2:
b6:92:6c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhqgeW7eaJ+CjZWsdPZr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjYwNDE2MjMwMDU0WhcNMjYwNDE3MjMwMDU0WjAzMTEwLwYDVQQD
EygxMjIzYTM4YjVhMDZiYzcwMmU0NjAzOGY4ZTgwODg2ODY2MWE0Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGIslhZEbblo6HpTVodtkRs4ac23
Zur27oIqcTJz5D5Fi+xTuHcPAKCsgeFM5xjSsnyaae5tL4oxtsX4EDxbHZiTrRgz
sr/ZslXj/FttrlAXbeJdZP9i0w6nkkPI/PAo5V/r3QUentyR+hjf5Pwpc+vswUqY
hf7Az+UnudmWUpYmpjsdYurcZDEpcCHvfKZdsJ2QlE+zckv2JsZgbOzTAP0kx+h3
+StFMBPwnwFtRJOeSsPEB3m+j3WSeZ0Eos3S5XR2Rc3z3ZN7auhB4e2mEd5oauK/
9tAI7T9tLJGKSsaKgUHx7J9CYl1jvvNqhbjXA5UvM+WZw2uPsv0nVZv/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIjo4taBrxwLkYDj46AiGhmGkKWMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGvOS3f/
eUDr04zNFLgvBysOsm+aa3HjGbJrd9yG+DqA794+Lq3mFW8ZF+tQFNAvgAXPsQQJ
5oadi0a4wEDCuDJc7q4OXA19bJg5Pk1ViGTMBplCqlfMozgSPowLXASM4VQI0FTa
6XWEsiauKn3sCpPF0SQvYasGSGfTl2pKmskvUGtRfhPQiivNHFxRa5trHUF1nqVu
PTOEtBLe1eMYv4Pyh//Pf/ngW7/KHJnuPCpY2rZqbKSVD4JN6hQVJUZ9/kMhP37m
3HYbeiDLzAXW83HHImfZ0AUf98xciq1UORaYwG6Ccl8Swa/IrrDFTtPYMU1eX3RK
dEqa6D/StpJsbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:21 2026 by rpki-client