Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: oSSrpCdWIVJI6+BmsRlXlvVwplkGRRvSPmw4ns/U9MU=
Subject key identifier: 6D:D1:91:86:D8:2B:AF:F1:E1:A4:39:96:DA:5B:61:6E:AB:F9:3C:4A
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019DED80579A5124B7192C2E50A350B31B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0E0A
Signing time: Sun 03 May 2026 11:01:44 +0000
Manifest this update: Sun 03 May 2026 11:01:44 +0000
Manifest next update: Mon 04 May 2026 11:01:44 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 8rZo1dhd+hecsZ2vKRtjuzPHX5XZh91sqGfSkkug3rE=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:80:57:9a:51:24:b7:19:2c:2e:50:a3:50:b3:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: May 3 11:01:44 2026 GMT
Not After : May 4 11:01:44 2026 GMT
Subject: CN=6dd19186d82baff1e1a43996da5b616eabf93c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:d1:b2:da:53:d7:d3:fc:57:7a:24:7b:a6:
de:1f:49:38:1d:ff:be:c9:78:79:2a:b6:e1:a4:93:
bf:79:96:5e:10:0c:20:7e:d6:17:08:94:2d:6f:04:
54:c7:41:25:25:b8:58:96:9d:7b:91:b6:df:14:98:
7e:7f:f3:c2:a7:1a:d1:31:30:06:1a:c8:1b:76:bc:
90:b6:3c:bf:ec:be:ae:12:dd:64:b1:8e:4b:5d:2d:
6c:37:fa:b2:90:88:7e:b5:56:ad:76:42:52:be:62:
7d:7d:06:86:09:eb:67:75:2c:51:d3:7f:a8:66:22:
e5:96:b4:c6:2a:d5:66:09:3b:5a:e3:3c:9c:aa:0e:
a9:1f:19:2f:65:ba:30:5d:85:1d:03:36:19:35:d7:
b0:23:17:64:16:93:25:a6:65:3c:73:06:69:9c:c7:
09:40:db:ea:da:24:45:4e:4a:b7:4e:12:59:1a:04:
81:fb:50:68:f4:24:6d:6a:c8:eb:ec:3a:a7:24:e4:
99:69:4d:66:60:3d:93:9e:51:e5:13:ef:99:cf:c9:
b9:f1:46:85:c4:82:6b:67:fb:b5:d0:df:1a:40:32:
f7:2c:1d:2a:9d:62:4a:5e:e2:f8:fe:86:35:3a:de:
98:59:f5:13:ab:56:69:03:ef:79:ab:11:71:7b:9a:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:91:86:D8:2B:AF:F1:E1:A4:39:96:DA:5B:61:6E:AB:F9:3C:4A
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:4c:de:4a:f2:da:cc:4b:f7:56:3a:53:1b:1e:94:4e:24:
e5:e8:0d:3d:6a:a4:3d:db:3c:20:15:1b:d0:24:26:31:b6:76:
3c:aa:32:45:19:bf:ef:97:9f:86:6a:bb:f4:db:10:b5:b2:bf:
cc:85:12:ef:0d:49:fb:05:d4:3f:93:88:a7:17:07:17:b3:33:
20:11:9a:80:bf:5b:f2:b5:1c:46:64:92:5b:ea:5e:1c:ed:aa:
a4:7a:21:43:95:24:31:de:55:91:f3:b7:7a:b9:69:e2:70:99:
e7:25:2c:36:d3:34:f7:60:2b:53:47:43:1d:04:bb:06:f1:9c:
fb:f5:98:80:a0:85:80:57:c1:70:21:57:e1:b3:be:a1:fb:4b:
3b:06:92:c4:83:7b:f3:2d:08:54:45:43:23:7c:f1:76:f4:24:
34:e4:07:44:21:43:d6:bd:9c:d9:d3:e0:1d:65:54:2c:27:9d:
4c:cb:01:cd:e8:49:e2:1c:7f:6d:3e:a2:2a:fe:df:e9:c3:17:
ef:e5:de:0a:ad:c1:49:a5:b1:f1:ac:50:a8:8c:a3:d4:2d:e2:
32:60:05:40:1d:45:16:51:11:29:57:b8:b3:0e:28:61:03:be:
f3:da:24:95:cb:63:51:48:c4:4e:8f:8e:96:fa:96:6f:4f:7a:
c5:4b:9d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3tgFeaUSS3GSwuUKNQsxudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjYwNTAzMTEwMTQ0WhcNMjYwNTA0MTEwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZGQxOTE4NmQ4MmJhZmYxZTFhNDM5OTZkYTViNjE2ZWFiZjkzYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AXRstpT19P8V3oke6beH0k4Hf++
yXh5KrbhpJO/eZZeEAwgftYXCJQtbwRUx0ElJbhYlp17kbbfFJh+f/PCpxrRMTAG
GsgbdryQtjy/7L6uEt1ksY5LXS1sN/qykIh+tVatdkJSvmJ9fQaGCetndSxR03+o
ZiLllrTGKtVmCTta4zycqg6pHxkvZbowXYUdAzYZNdewIxdkFpMlpmU8cwZpnMcJ
QNvq2iRFTkq3ThJZGgSB+1Bo9CRtasjr7DqnJOSZaU1mYD2TnlHlE++Zz8m58UaF
xIJrZ/u10N8aQDL3LB0qnWJKXuL4/oY1Ot6YWfUTq1ZpA+95qxFxe5omgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3RkYbYK6/x4aQ5ltpbYW6r+TxKMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3xM3kry
2sxL91Y6UxselE4k5egNPWqkPds8IBUb0CQmMbZ2PKoyRRm/75efhmq79NsQtbK/
zIUS7w1J+wXUP5OIpxcHF7MzIBGagL9b8rUcRmSSW+peHO2qpHohQ5UkMd5VkfO3
erlp4nCZ5yUsNtM092ArU0dDHQS7BvGc+/WYgKCFgFfBcCFX4bO+oftLOwaSxIN7
8y0IVEVDI3zxdvQkNOQHRCFD1r2c2dPgHWVULCedTMsBzehJ4hx/bT6iKv7f6cMX
7+XeCq3BSaWx8axQqIyj1C3iMmAFQB1FFlERKVe4sw4oYQO+89oklctjUUjETo+O
lvqWb096xUudpA==
-----END CERTIFICATE-----
Generated at Sun May 3 16:13:09 2026 by rpki-client