Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: jMrATyxsdJnA+Ux5KTKyLyMqNdi5k9xpJytgPOdARo8=
Subject key identifier: A8:5C:8C:C0:CF:46:3B:42:0F:24:27:3B:DC:84:85:9F:81:10:57:45
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019DCCE1F5D0E6B1CA7229834EB12C9FB57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1368
Signing time: Mon 27 Apr 2026 03:00:53 +0000
Manifest this update: Mon 27 Apr 2026 03:00:53 +0000
Manifest next update: Tue 28 Apr 2026 03:00:53 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: TN+4m0lx52vycHd5tlVD4fIaHhKHmZJTsGvTjRzcF7c=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:f5:d0:e6:b1:ca:72:29:83:4e:b1:2c:9f:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Apr 27 03:00:53 2026 GMT
Not After : Apr 28 03:00:53 2026 GMT
Subject: CN=a85c8cc0cf463b420f24273bdc84859f81105745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:2e:32:6b:c5:85:d0:f4:44:0c:a3:f5:0d:
db:d3:e8:87:ef:c8:1a:79:59:aa:48:ad:e8:a6:9c:
15:e9:eb:81:7f:db:07:a3:71:fc:f5:c7:d0:1d:48:
00:a6:36:cc:4d:8c:0e:61:d0:b1:8b:4d:9f:c0:cf:
44:16:e9:c7:be:c1:9a:26:38:a6:d2:b9:3d:a0:fa:
e9:e7:e5:ae:42:20:46:7a:a7:fa:3c:ca:23:d9:95:
3b:cd:3f:f7:f5:b6:82:62:d9:c7:94:fa:5f:a1:79:
0c:eb:c0:85:fe:59:b3:20:0a:2f:3e:06:58:5c:32:
e4:6d:22:6c:56:2b:83:4a:53:2f:ed:77:f5:c8:7c:
13:05:58:1f:40:86:08:95:48:f4:b6:e9:5a:45:b8:
fe:c0:72:41:d1:35:e5:bd:19:b4:8a:5a:bb:8e:e2:
fa:df:76:6f:cd:05:f4:7d:a3:9d:39:95:90:5f:6f:
54:66:3c:67:36:97:62:72:dd:0f:6e:86:44:c7:9a:
cc:ba:4f:78:c2:8d:95:04:05:88:af:f8:33:d1:b5:
06:fd:2f:d3:0f:c4:18:4a:40:21:91:66:82:41:ab:
c5:d4:59:76:2d:99:7f:16:d8:4b:d4:49:e7:b8:d5:
7a:33:bf:7b:72:94:99:27:6a:33:e9:35:ee:b2:43:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:8C:C0:CF:46:3B:42:0F:24:27:3B:DC:84:85:9F:81:10:57:45
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:30:37:37:96:57:69:ad:fa:da:d3:9f:85:7c:c9:55:ec:
33:4f:b3:5e:73:a7:09:15:e6:10:f8:8e:cc:6a:0d:09:1a:4b:
1b:cc:a8:34:78:ab:2d:e2:f3:0d:c6:d5:ce:3e:5b:d9:41:d5:
26:05:b9:32:f0:bd:02:7d:57:8b:c8:34:13:46:d4:c6:08:59:
ad:13:15:93:a1:ed:2a:82:f5:f4:b4:1b:b5:10:db:f4:32:f8:
7c:23:fe:8e:19:e5:0d:2a:09:8f:b1:1d:51:fe:71:5c:26:ab:
02:e1:20:36:e3:1c:11:b7:4a:ab:3c:6f:8e:52:19:4f:41:e1:
98:c8:ee:46:e2:fd:5f:b1:8a:3a:6d:90:7e:5c:14:6a:98:07:
53:5d:09:0a:1c:2d:fc:6a:96:7f:cb:1f:b4:e4:81:2c:93:04:
04:58:17:79:57:0c:15:a2:3e:73:70:1c:90:e4:f3:de:6a:4e:
19:0f:7c:f6:38:0d:5d:d3:24:54:2c:69:be:14:92:e1:c7:0e:
1a:b7:ab:5b:96:ba:c5:dd:b4:f2:db:c9:9c:fa:fc:6b:23:89:
eb:fa:7b:f1:f7:cd:2b:50:1f:0f:89:9b:4e:2f:6a:2f:19:c9:
48:ff:d5:3e:f8:b0:c1:16:f0:fe:ee:c9:d6:f7:73:69:ca:08:
cd:a1:36:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4fXQ5rHKcimDTrEsn7V7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2
ZTU2NzcwHhcNMjYwNDI3MDMwMDUzWhcNMjYwNDI4MDMwMDUzWjAzMTEwLwYDVQQD
EyhhODVjOGNjMGNmNDYzYjQyMGYyNDI3M2JkYzg0ODU5ZjgxMTA1NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bAuMmvFhdD0RAyj9Q3b0+iH78ga
eVmqSK3oppwV6euBf9sHo3H89cfQHUgApjbMTYwOYdCxi02fwM9EFunHvsGaJjim
0rk9oPrp5+WuQiBGeqf6PMoj2ZU7zT/39baCYtnHlPpfoXkM68CF/lmzIAovPgZY
XDLkbSJsViuDSlMv7Xf1yHwTBVgfQIYIlUj0tulaRbj+wHJB0TXlvRm0ilq7juL6
33ZvzQX0faOdOZWQX29UZjxnNpdict0PboZEx5rMuk94wo2VBAWIr/gz0bUG/S/T
D8QYSkAhkWaCQavF1Fl2LZl/FthL1EnnuNV6M797cpSZJ2oz6TXuskOPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhcjMDPRjtCDyQnO9yEhZ+BEFdFMB8GA1UdIwQY
MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt
YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw
LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUMwNzeW
V2mt+trTn4V8yVXsM0+zXnOnCRXmEPiOzGoNCRpLG8yoNHirLeLzDcbVzj5b2UHV
JgW5MvC9An1Xi8g0E0bUxghZrRMVk6HtKoL19LQbtRDb9DL4fCP+jhnlDSoJj7Ed
Uf5xXCarAuEgNuMcEbdKqzxvjlIZT0HhmMjuRuL9X7GKOm2QflwUapgHU10JChwt
/GqWf8sftOSBLJMEBFgXeVcMFaI+c3AckOTz3mpOGQ989jgNXdMkVCxpvhSS4ccO
GrerW5a6xd208tvJnPr8ayOJ6/p78ffNK1AfD4mbTi9qLxnJSP/VPviwwRbw/u7J
1vdzacoIzaE2QQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:28 2026 by rpki-client