Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: MLF0A5rHQeXdhNjkhwoSgfiKmNDP67RzIXJKV7gF8zw=
Subject key identifier: 97:35:67:F4:1E:66:8E:0E:A6:F7:B0:21:CE:9E:1A:55:BB:15:CF:00
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019DA86787E4AFD91445130DF8B4FB1AFEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 17A2
Signing time: Mon 20 Apr 2026 01:00:50 +0000
Manifest this update: Mon 20 Apr 2026 01:00:50 +0000
Manifest next update: Tue 21 Apr 2026 01:00:50 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: x0hu80MVW3zrm04vPs4iDn89gSAMr08ha9Vj180lfCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:87:e4:af:d9:14:45:13:0d:f8:b4:fb:1a:fe:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Apr 20 01:00:50 2026 GMT
Not After : Apr 21 01:00:50 2026 GMT
Subject: CN=973567f41e668e0ea6f7b021ce9e1a55bb15cf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:8d:1d:2d:c5:28:46:c7:7b:6b:91:fc:00:
b9:d3:53:44:bc:c6:f8:40:a8:24:37:3b:97:60:30:
37:ff:82:ab:14:1e:e4:60:d7:95:7e:f8:12:a5:f2:
0e:b0:ca:84:24:9e:30:7c:f4:d2:f5:4f:8e:b9:e2:
9a:02:6d:ae:0c:27:a5:fb:9c:83:7b:ca:6d:ee:8e:
e6:61:45:80:2b:a9:62:b6:0f:07:07:3d:96:1e:22:
06:45:87:d9:1e:10:e0:30:15:bb:83:0c:aa:5c:ff:
04:c0:72:5b:39:6c:c7:a1:e7:e9:c0:88:27:6e:4f:
3a:5d:25:9a:9a:80:91:5d:4c:d5:74:ae:ec:83:f9:
42:95:38:81:60:7b:62:78:f8:2e:3d:5f:33:98:15:
7f:f2:f9:6e:95:7c:01:ff:f0:bf:ea:58:7a:78:35:
17:6b:41:31:43:28:b4:de:68:b1:fe:be:d5:22:09:
df:72:7a:0a:cc:e1:3c:ec:10:c4:e9:93:2c:2d:e1:
55:d9:b2:7e:3d:d3:91:63:7f:91:83:95:fb:c5:6e:
a6:51:d8:51:23:8c:10:08:25:5e:2c:e0:f1:02:9c:
80:28:6b:33:37:44:fc:57:b3:2d:9a:da:d3:45:1c:
2e:d2:fa:27:70:cc:c1:20:34:90:54:83:1a:26:3e:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:67:F4:1E:66:8E:0E:A6:F7:B0:21:CE:9E:1A:55:BB:15:CF:00
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:19:c1:32:d5:eb:21:4c:dd:9b:78:89:f5:f0:c0:3f:3f:cb:
76:5a:d1:13:13:eb:9e:b3:3c:c9:7b:30:98:d4:13:36:1b:40:
36:1c:95:fe:7b:6d:7e:07:9b:18:ce:84:6f:40:60:b7:30:cb:
4c:12:f9:36:05:35:74:82:52:8e:3a:2b:fc:2c:83:c0:cc:d0:
cf:7c:4f:3e:8a:00:a9:f8:e9:17:16:07:89:90:95:3f:c3:4d:
10:86:f0:c8:8f:3a:12:45:a9:29:b8:91:9f:be:cd:46:7f:21:
a6:f3:c2:c2:df:54:3f:11:38:1d:91:c7:78:94:76:98:47:91:
65:71:09:e1:e6:a4:09:f1:16:91:b9:77:94:19:72:b5:84:71:
6d:06:3c:b8:2e:1c:7d:e7:38:e5:51:ea:16:61:18:2c:1b:cd:
f2:e5:5a:a9:52:6e:b1:1f:71:d8:30:e4:bc:79:af:16:91:bf:
8e:c0:29:2f:00:32:f8:b5:0a:76:02:22:c4:a8:13:d1:09:57:
cf:3e:87:d8:9d:8b:89:f0:8c:2a:95:d9:ee:a3:16:f9:43:3e:
59:be:1b:c1:43:4b:5a:e0:65:ab:5f:db:2a:61:6b:35:63:30:
9e:c7:a2:3e:0f:87:9f:09:17:c5:46:f7:98:b0:fa:a5:49:50:
c7:86:42:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2oZ4fkr9kURRMN+LT7Gv7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjYwNDIwMDEwMDUwWhcNMjYwNDIxMDEwMDUwWjAzMTEwLwYDVQQD
Eyg5NzM1NjdmNDFlNjY4ZTBlYTZmN2IwMjFjZTllMWE1NWJiMTVjZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslSNHS3FKEbHe2uR/AC501NEvMb4
QKgkNzuXYDA3/4KrFB7kYNeVfvgSpfIOsMqEJJ4wfPTS9U+OueKaAm2uDCel+5yD
e8pt7o7mYUWAK6litg8HBz2WHiIGRYfZHhDgMBW7gwyqXP8EwHJbOWzHoefpwIgn
bk86XSWamoCRXUzVdK7sg/lClTiBYHtiePguPV8zmBV/8vlulXwB//C/6lh6eDUX
a0ExQyi03mix/r7VIgnfcnoKzOE87BDE6ZMsLeFV2bJ+PdORY3+Rg5X7xW6mUdhR
I4wQCCVeLODxApyAKGszN0T8V7MtmtrTRRwu0voncMzBIDSQVIMaJj6o6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc1Z/QeZo4OpvewIc6eGlW7Fc8AMB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBnBMtXr
IUzdm3iJ9fDAPz/LdlrRExPrnrM8yXswmNQTNhtANhyV/nttfgebGM6Eb0BgtzDL
TBL5NgU1dIJSjjor/CyDwMzQz3xPPooAqfjpFxYHiZCVP8NNEIbwyI86EkWpKbiR
n77NRn8hpvPCwt9UPxE4HZHHeJR2mEeRZXEJ4eakCfEWkbl3lBlytYRxbQY8uC4c
fec45VHqFmEYLBvN8uVaqVJusR9x2DDkvHmvFpG/jsApLwAy+LUKdgIixKgT0QlX
zz6H2J2LifCMKpXZ7qMW+UM+Wb4bwUNLWuBlq1/bKmFrNWMwnseiPg+HnwkXxUb3
mLD6pUlQx4ZCjg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 05:38:06 2026 by rpki-client