Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: ZpxU3T2L0Lb8excPYaUbX323AU12d/bBOIOKNj+ZjAY=
Subject key identifier: CD:85:E7:92:74:EE:A0:7B:71:B6:5E:76:8B:27:36:3A:D0:54:06:64
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019DA11C2141A15D26607913CE338FAECEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 164A
Signing time: Sat 18 Apr 2026 15:01:08 +0000
Manifest this update: Sat 18 Apr 2026 15:01:08 +0000
Manifest next update: Sun 19 Apr 2026 15:01:08 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: imQRF2Nt6yobJWTC1P+nU1jmDHsLiyyjPyl3vAvjOQg=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1c:21:41:a1:5d:26:60:79:13:ce:33:8f:ae:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Apr 18 15:01:08 2026 GMT
Not After : Apr 19 15:01:08 2026 GMT
Subject: CN=cd85e79274eea07b71b65e768b27363ad0540664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:a9:0b:a1:f7:73:9b:d4:05:39:33:cf:62:
4f:6e:d8:77:d9:ff:ce:14:00:1b:05:73:d3:71:f9:
34:79:cd:e8:f5:b9:05:e0:26:de:29:ba:b8:2b:da:
7a:63:42:9c:f0:f2:c7:be:61:49:d0:96:1d:df:ee:
af:d8:18:ec:26:b0:75:a2:8d:07:f4:1d:35:89:ce:
d0:7c:48:cc:13:0c:09:b7:48:2d:a1:f4:83:5c:bc:
da:55:54:6f:d4:ae:cb:d1:93:a7:75:ea:1d:59:83:
26:38:09:b6:b5:74:3f:14:19:de:e9:e6:76:bc:70:
f9:8b:20:c7:c4:18:41:e3:38:8a:32:81:e7:cc:17:
ec:5b:17:27:26:e7:b8:21:21:02:82:4b:aa:2f:ff:
0b:8f:b9:52:3d:26:4c:df:c8:37:f5:c7:84:eb:b2:
8a:4c:1b:64:29:f7:9c:74:c3:9a:84:45:81:74:0f:
2b:c8:b8:9d:e5:64:51:4b:df:b9:66:1b:f9:3c:18:
fd:ed:66:b4:dc:27:37:1c:25:22:8b:e3:71:13:c5:
89:88:d1:6f:03:39:e0:2c:06:00:8a:80:ba:10:f8:
01:65:11:51:66:1c:3b:80:26:7c:04:da:02:2c:77:
bc:90:32:dd:53:c2:d6:5f:3f:82:f6:5d:07:0b:28:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:E7:92:74:EE:A0:7B:71:B6:5E:76:8B:27:36:3A:D0:54:06:64
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:46:50:56:93:8f:8b:9a:72:2b:31:b0:6a:90:80:e0:a9:
7f:65:f5:d9:80:d4:01:d3:4e:c9:5a:13:e0:da:d1:80:37:b3:
47:a7:05:fb:b7:fd:d6:3a:4a:b7:19:a6:47:74:a9:5d:d3:46:
98:6b:d9:54:d2:5a:e5:17:30:8e:aa:56:f4:d9:18:1f:9f:55:
6c:6f:a3:9e:94:4e:df:64:f0:aa:76:c6:c3:05:1b:aa:48:60:
2a:85:a7:c2:90:5a:91:f6:bb:b7:6d:3d:7a:b9:d4:3f:42:c2:
ab:f5:78:cf:ad:13:55:2e:4f:ef:ba:e5:6d:07:f8:b8:c1:a7:
41:47:36:f4:92:7a:30:dc:7b:8e:4e:ec:3f:8e:ab:10:df:a9:
25:f4:66:5d:59:c9:f6:78:05:cc:cd:6a:e9:12:ab:d1:47:5c:
0a:b1:c6:48:65:15:39:55:89:0d:a2:7e:3e:25:12:e3:f3:59:
fa:ef:17:48:f6:64:6a:5d:93:fd:86:e1:85:9d:33:31:98:df:
a9:c2:5d:15:bf:e9:37:ff:92:d8:58:c1:3f:d7:35:8b:23:65:
6f:b4:e2:a2:cc:a0:b2:99:09:16:71:0d:5f:b4:da:ff:ea:d3:
59:d1:17:93:cd:fc:5e:05:b7:e5:37:bf:66:87:c9:b8:10:12:
4c:46:85:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2hHCFBoV0mYHkTzjOPrs68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi
MDg1ZWYwHhcNMjYwNDE4MTUwMTA4WhcNMjYwNDE5MTUwMTA4WjAzMTEwLwYDVQQD
EyhjZDg1ZTc5Mjc0ZWVhMDdiNzFiNjVlNzY4YjI3MzYzYWQwNTQwNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlASpC6H3c5vUBTkzz2JPbth32f/O
FAAbBXPTcfk0ec3o9bkF4CbeKbq4K9p6Y0Kc8PLHvmFJ0JYd3+6v2BjsJrB1oo0H
9B01ic7QfEjMEwwJt0gtofSDXLzaVVRv1K7L0ZOndeodWYMmOAm2tXQ/FBne6eZ2
vHD5iyDHxBhB4ziKMoHnzBfsWxcnJue4ISECgkuqL/8Lj7lSPSZM38g39ceE67KK
TBtkKfecdMOahEWBdA8ryLid5WRRS9+5Zhv5PBj97Wa03Cc3HCUii+NxE8WJiNFv
AzngLAYAioC6EPgBZRFRZhw7gCZ8BNoCLHe8kDLdU8LWXz+C9l0HCyh+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2F55J07qB7cbZedosnNjrQVAZkMB8GA1UdIwQY
MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt
OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw
LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLJGUFaT
j4uacisxsGqQgOCpf2X12YDUAdNOyVoT4NrRgDezR6cF+7f91jpKtxmmR3SpXdNG
mGvZVNJa5RcwjqpW9NkYH59VbG+jnpRO32TwqnbGwwUbqkhgKoWnwpBakfa7t209
ernUP0LCq/V4z60TVS5P77rlbQf4uMGnQUc29JJ6MNx7jk7sP46rEN+pJfRmXVnJ
9ngFzM1q6RKr0UdcCrHGSGUVOVWJDaJ+PiUS4/NZ+u8XSPZkal2T/YbhhZ0zMZjf
qcJdFb/pN/+S2FjBP9c1iyNlb7TiosygspkJFnENX7Ta/+rTWdEXk838XgW35Te/
ZofJuBASTEaFKw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 23:43:48 2026 by rpki-client