Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: O/igb//rf1AZymMpg+9vlND33Dn4OYGB3dzxnJJ/Zm8=
Subject key identifier: 2C:3F:2D:98:62:A6:44:34:D8:63:80:E9:12:0B:6E:75:21:03:C3:D7
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019D98F4A2A5F67D036A461E3B49D1EA4BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0EF6
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: wJ+ajtIzVkSKxj5cbd9EWZ5eZj24CB6wQ3HFFc6fHEk=)
2: Ws4in-OWRWSEcoBN7waoCEBULUk.roa (hash: Uju7zYqejr4rhXJP4MJKAs7Vc49ym9vbx4ol+jWt7tA=)
3: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (hash: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a2:a5:f6:7d:03:6a:46:1e:3b:49:d1:ea:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=2c3f2d9862a64434d86380e9120b6e752103c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:89:b2:56:8c:ae:af:96:20:d5:e2:e4:fa:
1a:c1:ec:b9:36:aa:fe:c5:d2:08:64:16:59:9e:27:
2f:8e:4e:4e:2f:a7:0d:c8:5f:ef:ba:fd:88:90:13:
35:91:b9:6b:ca:d2:de:6f:a2:34:b3:d0:c7:9f:41:
2b:00:e7:36:ef:ab:60:95:f2:9e:bd:f3:38:00:da:
11:1a:3e:6e:61:90:55:6b:42:74:c5:a9:c4:0f:91:
1c:bb:8e:96:71:d5:7f:de:45:46:b8:75:8a:74:ad:
ac:b1:89:a2:03:38:4b:97:9f:62:cd:45:a6:47:c9:
ea:7c:ff:c0:62:cd:b0:3b:1e:94:e8:70:ea:ff:ad:
76:2f:46:2c:a2:e8:0c:9d:cc:a4:d5:60:cf:83:14:
03:26:d0:1c:28:a6:e0:09:4c:ff:1a:8f:64:3a:04:
20:e8:c9:0b:3d:07:d8:6e:85:d6:96:95:53:68:f3:
15:a6:04:8e:ed:87:72:60:c0:04:b4:af:11:f7:12:
e3:eb:93:f1:df:e1:82:71:f4:32:28:17:87:51:7b:
d9:c4:79:94:ed:19:1f:11:54:13:4d:3d:5a:13:2b:
f5:b3:07:9c:0f:9a:ba:03:2c:87:ed:89:30:38:42:
8f:df:4f:72:87:57:2d:a4:61:39:a5:37:37:af:89:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:2D:98:62:A6:44:34:D8:63:80:E9:12:0B:6E:75:21:03:C3:D7
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2b:b0:71:9c:eb:46:fa:09:3f:db:d3:5d:97:f5:44:0b:a4:
f9:1b:02:ff:81:de:73:a9:dd:b7:20:cb:f5:cf:a7:0b:3f:16:
92:d0:71:04:75:c4:51:88:cd:2b:97:55:c2:2b:2b:2b:d1:08:
b4:aa:c8:a9:ae:00:57:9b:9f:6d:ab:76:6c:d2:fe:9e:0a:16:
d9:b6:98:ec:62:23:d7:84:33:ed:f2:7d:4a:3a:4e:c1:95:30:
cf:84:9a:dc:22:b5:30:9f:00:02:95:6a:fb:71:7e:66:c7:0b:
d5:4b:75:cc:0f:92:75:11:e0:f8:4b:a9:85:3f:e7:e0:6e:39:
4f:36:f5:fa:36:b9:35:08:e2:bc:6f:9d:c6:94:1e:d6:5d:68:
8a:8a:ae:a6:26:fd:c1:ca:72:6b:2a:95:22:3c:c0:b1:aa:55:
4e:71:3b:60:11:4a:85:1f:a8:d5:6f:a4:1c:06:34:25:c0:72:
3c:6e:c5:31:d0:fd:ad:fd:32:81:36:e1:36:f2:f3:53:97:19:
0a:f4:0c:28:7c:b8:97:41:f0:d5:76:d2:f1:41:97:b0:dc:9e:
1e:05:86:d5:e7:f1:a0:21:23:63:0e:06:27:7c:de:0a:25:04:
69:1d:40:c5:8e:6d:28:25:06:b0:b7:fd:54:4e:2d:39:45:f8:
34:e8:2f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9KKl9n0DakYeO0nR6kvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0
ZDY0YjEwHhcNMjYwNDE3MDEwMTAyWhcNMjYwNDE4MDEwMTAyWjAzMTEwLwYDVQQD
EygyYzNmMmQ5ODYyYTY0NDM0ZDg2MzgwZTkxMjBiNmU3NTIxMDNjM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb2JslaMrq+WINXi5Poawey5Nqr+
xdIIZBZZnicvjk5OL6cNyF/vuv2IkBM1kblrytLeb6I0s9DHn0ErAOc276tglfKe
vfM4ANoRGj5uYZBVa0J0xanED5Ecu46WcdV/3kVGuHWKdK2ssYmiAzhLl59izUWm
R8nqfP/AYs2wOx6U6HDq/612L0YsougMncyk1WDPgxQDJtAcKKbgCUz/Go9kOgQg
6MkLPQfYboXWlpVTaPMVpgSO7YdyYMAEtK8R9xLj65Px3+GCcfQyKBeHUXvZxHmU
7RkfEVQTTT1aEyv1swecD5q6AyyH7YkwOEKP309yh1ctpGE5pTc3r4mt/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw/LZhipkQ02GOA6RILbnUhA8PXMB8GA1UdIwQY
MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt
NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4
LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiuwcZzr
RvoJP9vTXZf1RAuk+RsC/4Hec6ndtyDL9c+nCz8WktBxBHXEUYjNK5dVwisrK9EI
tKrIqa4AV5ufbat2bNL+ngoW2baY7GIj14Qz7fJ9SjpOwZUwz4Sa3CK1MJ8AApVq
+3F+ZscL1Ut1zA+SdRHg+EuphT/n4G45Tzb1+ja5NQjivG+dxpQe1l1oioqupib9
wcpyayqVIjzAsapVTnE7YBFKhR+o1W+kHAY0JcByPG7FMdD9rf0ygTbhNvLzU5cZ
CvQMKHy4l0Hw1XbS8UGXsNyeHgWG1efxoCEjYw4GJ3zeCiUEaR1AxY5tKCUGsLf9
VE4tOUX4NOgv+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:31 2026 by rpki-client