Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: 52Y4y73+rXpPOxr8As4OCYvaE1OTTNCV402G2f90jl0=
Subject key identifier: B8:ED:90:57:94:D8:AC:11:4F:ED:7C:C6:1D:F3:65:8B:3D:41:49:51
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019D98F53EACAD49C73A4537BE0F46978675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:42 +0000
Manifest this update: Fri 17 Apr 2026 01:01:42 +0000
Manifest next update: Sat 18 Apr 2026 01:01:42 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: DgI41eMTHyUvSOqwLiOQHQaAsTs7H0VAdVOI4ODjtOs=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:3e:ac:ad:49:c7:3a:45:37:be:0f:46:97:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Apr 17 01:01:42 2026 GMT
Not After : Apr 18 01:01:42 2026 GMT
Subject: CN=b8ed905794d8ac114fed7cc61df3658b3d414951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:e7:f3:fd:4c:09:3d:e8:3f:35:99:f9:95:
a5:5f:33:20:6b:e7:fd:58:eb:39:a2:1d:73:a7:65:
b6:4e:a9:e6:c9:36:86:4f:1a:e9:c5:01:eb:5b:e1:
13:cc:f2:fd:3a:c4:a3:e1:c0:20:6a:12:fe:82:7c:
df:a6:6b:b0:0f:1f:36:cb:1d:c6:9b:94:d6:5f:e3:
a6:bf:bb:d7:01:72:bd:f8:a0:cd:00:85:c1:0b:8b:
88:49:0e:01:48:2f:4c:c5:8f:95:42:bf:f0:b5:d8:
20:57:68:bf:23:b0:6b:f7:e9:22:48:ac:58:74:78:
84:b6:1d:a4:78:aa:56:ac:a0:40:89:04:09:fb:9a:
4d:c8:97:00:6e:0a:5f:4b:97:7c:93:38:12:0c:95:
d9:21:21:30:16:9e:a6:b0:4a:75:82:51:a4:93:82:
21:44:b8:e7:f2:df:b2:04:64:dd:1c:86:2c:70:68:
b6:c7:3e:30:b1:5c:50:f2:d2:20:56:6c:31:60:3d:
43:8f:80:07:c0:74:a3:88:47:05:ca:f9:c6:4e:43:
8b:42:52:23:61:d7:21:2e:21:fa:ee:9b:ab:54:c8:
15:56:a6:38:7b:69:14:55:59:32:2e:81:63:dc:18:
ab:68:54:c9:ef:27:5b:ec:4c:38:53:2e:00:23:5c:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:90:57:94:D8:AC:11:4F:ED:7C:C6:1D:F3:65:8B:3D:41:49:51
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ef:69:80:64:30:70:fb:0b:4e:47:dc:ea:f2:be:18:5d:73:
c0:29:0b:da:88:f9:1e:b3:ba:c7:27:57:5e:f8:7e:73:be:b3:
f8:41:2a:a5:a8:a9:a0:0b:6b:32:be:c8:38:b8:ca:b2:ca:6b:
f9:34:f9:a3:09:51:18:16:63:a0:bb:b9:3a:b3:5e:89:87:63:
10:d7:42:7a:54:86:cb:a0:36:d0:f8:f6:2e:73:0f:4a:ca:77:
20:0a:4f:34:60:4d:b5:36:81:79:0e:ba:9b:9f:e2:ce:3c:f2:
45:c2:08:d7:b1:fe:0d:6c:b2:3a:75:51:67:0e:cf:59:65:5b:
b7:10:f8:50:5f:bb:34:45:5b:bf:60:e9:ae:0f:b0:52:d5:12:
61:93:90:cd:d7:a3:47:97:2f:69:37:d3:77:65:d3:5d:ad:ab:
17:40:8d:2b:a5:7b:c9:73:bd:19:06:fa:88:73:27:de:62:f2:
dc:50:44:c9:df:3d:37:73:84:bb:c2:84:ce:d8:4c:6f:92:71:
6b:cb:be:6b:62:cb:87:73:b7:52:d6:2b:16:2c:5f:b5:cb:1c:
c4:67:a7:16:d1:a9:00:08:31:07:67:05:52:8d:33:24:e4:b6:
97:9e:86:90:de:08:42:0a:28:8a:1e:a0:1e:c4:f2:da:72:b5:
c9:3a:32:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9T6srUnHOkU3vg9Gl4Z1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjYwNDE3MDEwMTQyWhcNMjYwNDE4MDEwMTQyWjAzMTEwLwYDVQQD
EyhiOGVkOTA1Nzk0ZDhhYzExNGZlZDdjYzYxZGYzNjU4YjNkNDE0OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/n8/1MCT3oPzWZ+ZWlXzMga+f9
WOs5oh1zp2W2TqnmyTaGTxrpxQHrW+ETzPL9OsSj4cAgahL+gnzfpmuwDx82yx3G
m5TWX+Omv7vXAXK9+KDNAIXBC4uISQ4BSC9MxY+VQr/wtdggV2i/I7Br9+kiSKxY
dHiEth2keKpWrKBAiQQJ+5pNyJcAbgpfS5d8kzgSDJXZISEwFp6msEp1glGkk4Ih
RLjn8t+yBGTdHIYscGi2xz4wsVxQ8tIgVmwxYD1Dj4AHwHSjiEcFyvnGTkOLQlIj
YdchLiH67purVMgVVqY4e2kUVVkyLoFj3BiraFTJ7ydb7Ew4Uy4AI1xY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjtkFeU2KwRT+18xh3zZYs9QUlRMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPu9pgGQw
cPsLTkfc6vK+GF1zwCkL2oj5HrO6xydXXvh+c76z+EEqpaipoAtrMr7IOLjKsspr
+TT5owlRGBZjoLu5OrNeiYdjENdCelSGy6A20Pj2LnMPSsp3IApPNGBNtTaBeQ66
m5/izjzyRcII17H+DWyyOnVRZw7PWWVbtxD4UF+7NEVbv2Dprg+wUtUSYZOQzdej
R5cvaTfTd2XTXa2rF0CNK6V7yXO9GQb6iHMn3mLy3FBEyd89N3OEu8KEzthMb5Jx
a8u+a2LLh3O3UtYrFixftcscxGenFtGpAAgxB2cFUo0zJOS2l56GkN4IQgooih6g
HsTy2nK1yToySA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:41 2026 by rpki-client