Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: 4qt6xkPekm/Mm1WB6XpoUNu4SfVRknea0qdbwJfhqDA=
Subject key identifier: F5:8A:7B:9C:D9:90:45:ED:02:CD:6C:59:21:17:CC:CB:29:B7:EF:13
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019DCCE1B99F4D9EC1D1E4DFAD089ACEE5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 03:00:38 +0000
Manifest this update: Mon 27 Apr 2026 03:00:38 +0000
Manifest next update: Tue 28 Apr 2026 03:00:38 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: AQKm1ru6i8ssO4ej4tWN6N8mJG4jvRN/CHqnXwm5zJw=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:b9:9f:4d:9e:c1:d1:e4:df:ad:08:9a:ce:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Apr 27 03:00:38 2026 GMT
Not After : Apr 28 03:00:38 2026 GMT
Subject: CN=f58a7b9cd99045ed02cd6c592117cccb29b7ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:26:78:23:bb:25:0f:d1:64:e1:38:5e:2b:
9d:32:61:ba:7e:5f:76:4d:2e:36:75:96:59:23:1b:
3c:cc:95:7e:90:2e:86:10:38:fc:08:a6:d4:00:5d:
0b:8b:19:8b:6a:27:42:d9:cb:89:db:8b:35:83:00:
60:cb:c0:17:1e:33:c4:38:d0:45:b1:90:f8:3e:f3:
dd:80:a9:39:58:6f:48:b3:a0:3e:51:7c:7c:85:a2:
f9:5c:c8:a8:50:2f:6c:ea:c4:fa:e9:d7:11:29:d6:
e2:fa:25:0c:96:69:30:61:69:26:21:e0:7a:61:ac:
10:c1:e2:8e:5e:e8:f0:31:ba:18:27:2d:88:82:c1:
3f:3a:a6:82:5e:df:bd:d4:cc:1d:82:97:33:63:6c:
20:5f:5d:cb:ce:63:cd:b5:38:34:de:f4:71:65:86:
67:df:eb:c0:b6:1f:cb:4f:91:48:d1:1f:a4:a2:9d:
ac:bd:73:79:1c:5e:3f:8b:09:69:d2:7e:c0:34:15:
d3:38:3f:a2:ac:b3:8f:a3:88:7a:2b:0c:c3:88:59:
bb:11:cd:7d:fc:1a:90:7c:4e:42:a3:97:cd:0e:04:
c5:b0:76:7d:4c:a3:ee:3a:fd:43:6c:1c:44:34:57:
a6:5e:c5:d7:0e:35:91:aa:80:95:45:bf:36:71:d2:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:7B:9C:D9:90:45:ED:02:CD:6C:59:21:17:CC:CB:29:B7:EF:13
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9e:57:33:fd:f9:5e:79:c2:59:03:67:28:f9:af:8f:5e:28:
00:40:2c:eb:b2:d8:5a:af:1f:34:24:6c:d8:e6:56:b8:81:96:
1c:7c:f7:b0:ae:20:6c:e1:f7:56:27:c6:af:f9:73:aa:c1:0c:
20:9c:c0:c4:42:88:0b:6d:62:e3:25:29:3c:38:23:ab:b0:8b:
6a:f1:02:b2:5c:62:2f:89:e8:fa:0a:75:05:33:bd:fb:08:9f:
68:02:c1:07:31:79:6a:b1:5a:f2:ae:74:bd:99:45:15:f8:fd:
75:7e:19:04:b4:a7:a1:4d:a9:4a:4c:25:7d:56:df:ba:dc:55:
72:11:e0:7e:9b:46:38:6f:e0:59:5c:92:df:fc:f6:9a:f9:25:
b5:4c:4e:0e:1d:9c:bc:54:5c:11:b8:eb:dc:c2:2a:40:69:33:
85:d6:2c:90:6a:26:91:b0:69:31:46:d5:b2:71:37:1b:a5:06:
a8:46:64:37:ab:20:6a:aa:71:69:67:eb:36:46:5f:57:1c:70:
c7:09:f5:a8:6f:c5:ed:18:af:9f:61:38:be:a8:d5:6d:ac:0a:
ec:d6:e2:e9:25:62:56:34:42:98:d3:bb:9f:df:1b:8d:a1:71:
6e:67:1d:80:d7:e2:4e:77:fe:a8:8e:8a:1b:3e:86:ac:bb:7d:
d8:a4:30:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4bmfTZ7B0eTfrQiazuXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm
NmM3M2IwHhcNMjYwNDI3MDMwMDM4WhcNMjYwNDI4MDMwMDM4WjAzMTEwLwYDVQQD
EyhmNThhN2I5Y2Q5OTA0NWVkMDJjZDZjNTkyMTE3Y2NjYjI5YjdlZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrUmeCO7JQ/RZOE4XiudMmG6fl92
TS42dZZZIxs8zJV+kC6GEDj8CKbUAF0LixmLaidC2cuJ24s1gwBgy8AXHjPEONBF
sZD4PvPdgKk5WG9Is6A+UXx8haL5XMioUC9s6sT66dcRKdbi+iUMlmkwYWkmIeB6
YawQweKOXujwMboYJy2IgsE/OqaCXt+91MwdgpczY2wgX13LzmPNtTg03vRxZYZn
3+vAth/LT5FI0R+kop2svXN5HF4/iwlp0n7ANBXTOD+irLOPo4h6KwzDiFm7Ec19
/BqQfE5Co5fNDgTFsHZ9TKPuOv1DbBxENFemXsXXDjWRqoCVRb82cdIzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWKe5zZkEXtAs1sWSEXzMspt+8TMB8GA1UdIwQY
MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt
NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx
LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAup5XM/35
XnnCWQNnKPmvj14oAEAs67LYWq8fNCRs2OZWuIGWHHz3sK4gbOH3VifGr/lzqsEM
IJzAxEKIC21i4yUpPDgjq7CLavECslxiL4no+gp1BTO9+wifaALBBzF5arFa8q50
vZlFFfj9dX4ZBLSnoU2pSkwlfVbfutxVchHgfptGOG/gWVyS3/z2mvkltUxODh2c
vFRcEbjr3MIqQGkzhdYskGomkbBpMUbVsnE3G6UGqEZkN6sgaqpxaWfrNkZfVxxw
xwn1qG/F7Rivn2E4vqjVbawK7Nbi6SViVjRCmNO7n98bjaFxbmcdgNfiTnf+qI6K
Gz6GrLt92KQwRA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:43 2026 by rpki-client