Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: zc4YqYT7EDADWl8Xv2puy7pxSkXq71BrOqPbc5foVow=
Subject key identifier: D7:04:B9:CF:59:C4:E3:CA:57:05:10:E1:3F:AA:6D:75:F7:67:66:6E
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 019D9A3DF680F6BAC411C265D9432C0249BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: uVKEOGzfkffIqwNkvBGu11Q2b+U/iSK4kitPtcbPLlg=)
2: roC7E9RumHxLB3VVJXEkh6LWBXY.roa (hash: ZVaSktEMxUUuiyBU7JPF0ZEtx8YRLICCeEQDBd6wK6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f6:80:f6:ba:c4:11:c2:65:d9:43:2c:02:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=d704b9cf59c4e3ca570510e13faa6d75f767666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:4c:77:02:3c:36:dc:da:c6:1a:de:42:89:
45:3d:2b:bf:26:6c:67:fd:df:d1:04:9c:52:b1:e9:
ce:65:9f:dd:52:80:d8:c6:4f:08:11:69:e5:91:eb:
fb:70:d5:4d:81:23:ee:05:42:ff:0a:a4:a3:4d:87:
ec:11:48:d6:5e:43:31:b1:bd:c3:62:bc:bd:70:7f:
68:e9:38:d4:7e:8c:47:77:83:06:08:1b:44:b2:33:
c0:d0:d0:31:61:6e:47:a8:c3:e1:ff:9f:93:c4:83:
c8:8b:95:ae:c6:66:5f:8f:82:43:84:1f:5d:1a:ca:
a4:e8:f0:3e:80:68:d3:49:79:e5:c7:4e:77:cb:c6:
1d:04:4c:97:74:6e:8f:fd:55:a4:91:39:f4:c8:d0:
93:74:71:bc:ea:54:2c:1d:73:ca:7d:db:54:6e:f4:
db:dc:df:ca:d7:8c:b2:b7:1e:eb:7a:0f:a0:05:b1:
10:81:1c:e0:8f:36:1c:cb:f8:45:99:0f:ec:53:50:
a6:10:60:bc:f5:63:44:58:5e:95:72:42:b7:ff:8c:
f1:19:dc:31:01:d9:a6:05:41:d1:c6:94:04:53:e1:
65:af:83:1a:9a:0a:c6:47:d3:bf:6b:b7:41:62:4d:
35:1a:93:6e:d7:09:dd:65:a0:4d:c8:96:b9:33:f4:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:B9:CF:59:C4:E3:CA:57:05:10:E1:3F:AA:6D:75:F7:67:66:6E
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9c:43:d7:27:59:12:39:08:9b:3e:18:72:4f:36:d5:56:82:
95:0f:5f:67:2b:52:d2:9b:3e:4b:e9:4a:46:99:23:bf:f9:aa:
f0:fb:15:a0:d0:96:06:49:aa:e1:7d:3a:49:ec:f4:6a:35:d4:
7a:1c:9b:92:d1:a0:58:17:08:71:5f:1f:b1:9a:0e:c9:27:61:
c5:bf:fc:f0:31:5f:ec:8b:e4:76:aa:68:8b:6d:a7:b2:99:03:
c2:a1:c6:8d:86:12:99:2f:ce:5e:5f:82:ae:00:31:90:38:22:
a7:69:69:f6:f3:2c:f9:89:ee:91:6a:93:9e:e2:34:e9:14:a3:
93:fd:42:d6:8c:17:6e:36:35:79:a4:fe:d6:86:78:75:d7:98:
3d:f8:f8:d1:26:c8:59:88:ab:6e:a1:e2:5b:df:2c:6f:62:e5:
7f:49:77:1a:a0:64:ea:6b:9f:89:a4:f8:a8:d9:49:b5:59:ba:
70:00:61:18:4b:a8:43:43:a0:4e:a7:c8:ed:a6:03:8f:ab:d4:
75:24:77:e5:04:79:8a:ad:c2:8d:02:02:09:e9:8b:d6:c0:cc:
00:21:16:e1:bb:03:af:e2:1f:90:30:f5:c6:0d:cf:52:b0:8d:
bc:6e:48:2f:c3:e2:fb:b3:a5:de:de:d8:27:5f:33:43:6a:55:
2f:c8:81:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPfaA9rrEEcJl2UMsAkm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl
NzNiZTMwHhcNMjYwNDE3MDcwMDQ1WhcNMjYwNDE4MDcwMDQ1WjAzMTEwLwYDVQQD
EyhkNzA0YjljZjU5YzRlM2NhNTcwNTEwZTEzZmFhNmQ3NWY3Njc2NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt1MdwI8NtzaxhreQolFPSu/Jmxn
/d/RBJxSsenOZZ/dUoDYxk8IEWnlkev7cNVNgSPuBUL/CqSjTYfsEUjWXkMxsb3D
Yry9cH9o6TjUfoxHd4MGCBtEsjPA0NAxYW5HqMPh/5+TxIPIi5WuxmZfj4JDhB9d
Gsqk6PA+gGjTSXnlx053y8YdBEyXdG6P/VWkkTn0yNCTdHG86lQsHXPKfdtUbvTb
3N/K14yytx7reg+gBbEQgRzgjzYcy/hFmQ/sU1CmEGC89WNEWF6VckK3/4zxGdwx
AdmmBUHRxpQEU+Flr4MamgrGR9O/a7dBYk01GpNu1wndZaBNyJa5M/TXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcEuc9ZxOPKVwUQ4T+qbXX3Z2ZuMB8GA1UdIwQY
MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt
OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl
LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZxD1ydZ
EjkImz4Yck821VaClQ9fZytS0ps+S+lKRpkjv/mq8PsVoNCWBkmq4X06Sez0ajXU
ehybktGgWBcIcV8fsZoOySdhxb/88DFf7Ivkdqpoi22nspkDwqHGjYYSmS/OXl+C
rgAxkDgip2lp9vMs+YnukWqTnuI06RSjk/1C1owXbjY1eaT+1oZ4ddeYPfj40SbI
WYirbqHiW98sb2Llf0l3GqBk6mufiaT4qNlJtVm6cABhGEuoQ0OgTqfI7aYDj6vU
dSR35QR5iq3CjQICCemL1sDMACEW4bsDr+IfkDD1xg3PUrCNvG5IL8Pi+7Ol3t7Y
J18zQ2pVL8iBuw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:16 2026 by rpki-client