Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: WUJV++eOXk4WOUzgyeVBdgw6QqrwYFkujuZaUVlCSdA=
Subject key identifier: 4D:F2:CC:7B:FD:76:56:E9:74:E2:DB:72:4C:EF:E4:08:B4:FB:F4:5D
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019DCF75E8127B4C23E2EF6BF5C75CC7DA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 18F1
Signing time: Mon 27 Apr 2026 15:01:44 +0000
Manifest this update: Mon 27 Apr 2026 15:01:44 +0000
Manifest next update: Tue 28 Apr 2026 15:01:44 +0000
Files and hashes: 1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: stB/MCTBTDdgHEUHufQ4Ycw45BePqMn4PyUlOlZMkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:e8:12:7b:4c:23:e2:ef:6b:f5:c7:5c:c7:da:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Apr 27 15:01:44 2026 GMT
Not After : Apr 28 15:01:44 2026 GMT
Subject: CN=4df2cc7bfd7656e974e2db724cefe408b4fbf45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:c4:a8:85:29:55:23:30:d6:0d:7d:06:a0:
ca:08:d0:32:63:55:08:fe:6c:5a:2e:7b:5b:d5:81:
d8:ca:fa:dd:ea:7d:5f:89:01:64:7d:7f:3e:f6:d4:
67:0a:cd:28:eb:46:b7:e3:62:4b:89:9d:7b:f4:a3:
03:b0:1f:9a:5c:9e:f2:21:4d:ea:25:88:b3:dc:41:
8e:cc:42:93:bf:d5:ba:e8:b1:33:5a:ff:c6:b6:da:
0d:4b:d0:10:c5:77:03:6f:4c:d4:f1:fe:33:a2:0f:
14:e0:db:c5:4c:92:95:6f:74:54:2b:57:c7:f1:43:
d6:e4:d1:a9:65:b1:80:33:b8:f8:96:eb:66:4f:b9:
dd:60:65:c2:ea:56:58:17:c3:7b:aa:91:7a:5a:28:
68:fd:d3:50:33:db:59:01:35:3e:ec:31:3e:1d:a0:
7f:48:5d:a9:e5:d9:de:96:28:7c:ed:19:6f:37:e4:
b5:ec:84:5f:d5:9d:70:49:76:75:6a:e1:3c:1a:88:
dd:2b:b9:8f:19:3e:53:18:1f:e9:b4:3d:61:1f:d6:
9c:c4:2a:8a:b7:41:3f:2a:10:fc:55:df:86:9d:65:
69:d5:31:96:97:10:65:c6:5f:c1:22:0b:82:5b:e1:
e2:97:16:52:5a:d0:75:c7:31:25:5a:01:16:56:f1:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:CC:7B:FD:76:56:E9:74:E2:DB:72:4C:EF:E4:08:B4:FB:F4:5D
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:7c:59:f2:4e:40:75:18:a1:35:e1:8d:c9:b8:d6:3f:19:
5f:53:1c:74:45:06:2c:a4:f3:59:ee:5f:29:0f:93:0a:c5:e1:
51:20:b2:18:67:c0:45:b2:c4:9c:0b:23:83:17:13:23:37:ef:
9f:1a:b6:78:b2:85:41:65:ef:eb:f3:39:75:69:d1:d8:75:d8:
45:fa:22:e2:2b:32:d6:3b:71:b6:e3:c5:00:23:45:1f:ff:1c:
7d:59:66:3b:ff:a1:39:7d:56:63:d1:e4:a6:ee:30:e4:3d:6d:
4f:92:02:dc:59:b1:96:8d:27:71:71:7b:a0:65:f8:03:97:99:
14:ea:ca:d5:0b:f0:f4:1e:1a:96:ec:fd:89:c3:0b:b8:c7:1d:
c8:7e:f5:a8:16:90:f9:17:2b:9b:1c:2c:f1:8c:84:ee:94:4d:
3e:8f:89:b1:82:22:70:6f:05:f2:c8:11:3c:11:3f:df:13:4c:
ba:67:26:08:15:f1:50:db:0b:49:0f:98:be:b8:57:b4:d4:49:
1d:fa:0d:56:e3:6b:40:99:29:b3:13:d5:2a:36:11:4e:dd:52:
f4:fe:3a:35:86:ce:51:af:62:2d:70:a6:58:41:1e:61:56:26:
9b:4d:1b:8b:ab:a5:00:1c:e0:f7:2d:6f:b7:61:71:b3:da:00:
60:66:f3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdegSe0wj4u9r9cdcx9pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5
MzVkMjQwHhcNMjYwNDI3MTUwMTQ0WhcNMjYwNDI4MTUwMTQ0WjAzMTEwLwYDVQQD
Eyg0ZGYyY2M3YmZkNzY1NmU5NzRlMmRiNzI0Y2VmZTQwOGI0ZmJmNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/jEqIUpVSMw1g19BqDKCNAyY1UI
/mxaLntb1YHYyvrd6n1fiQFkfX8+9tRnCs0o60a342JLiZ179KMDsB+aXJ7yIU3q
JYiz3EGOzEKTv9W66LEzWv/GttoNS9AQxXcDb0zU8f4zog8U4NvFTJKVb3RUK1fH
8UPW5NGpZbGAM7j4lutmT7ndYGXC6lZYF8N7qpF6Wiho/dNQM9tZATU+7DE+HaB/
SF2p5dnelih87RlvN+S17IRf1Z1wSXZ1auE8GojdK7mPGT5TGB/ptD1hH9acxCqK
t0E/KhD8Vd+GnWVp1TGWlxBlxl/BIguCW+HilxZSWtB1xzElWgEWVvERwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3yzHv9dlbpdOLbckzv5Ai0+/RdMB8GA1UdIwQY
MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt
NWNhMDE2YTEwMDU0LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0
LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr58WfJO
QHUYoTXhjcm41j8ZX1McdEUGLKTzWe5fKQ+TCsXhUSCyGGfARbLEnAsjgxcTIzfv
nxq2eLKFQWXv6/M5dWnR2HXYRfoi4isy1jtxtuPFACNFH/8cfVlmO/+hOX1WY9Hk
pu4w5D1tT5IC3Fmxlo0ncXF7oGX4A5eZFOrK1Qvw9B4aluz9icMLuMcdyH71qBaQ
+Rcrmxws8YyE7pRNPo+JsYIicG8F8sgRPBE/3xNMumcmCBXxUNsLSQ+YvrhXtNRJ
HfoNVuNrQJkpsxPVKjYRTt1S9P46NYbOUa9iLXCmWEEeYVYmm00bi6ulABzg9y1v
t2Fxs9oAYGbz3w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:41:15 2026 by rpki-client