Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: mnV5xvTQuX0P4jLtfagbDL8Qnr0UzAYzFJH+LbRdYho=
Subject key identifier: 81:34:DE:1A:26:A3:8D:E7:55:D5:0A:75:B0:13:58:93:88:98:1C:D1
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019D86B7E94CBBB6E84F3E5AF626C0BA4698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 18B8
Signing time: Mon 13 Apr 2026 12:01:32 +0000
Manifest this update: Mon 13 Apr 2026 12:01:32 +0000
Manifest next update: Tue 14 Apr 2026 12:01:32 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: Baf0AaHG0Xmhi2YP8M3IZHmTbRPw4q1F4gYuoy9dFxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:b7:e9:4c:bb:b6:e8:4f:3e:5a:f6:26:c0:ba:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Apr 13 12:01:32 2026 GMT
Not After : Apr 14 12:01:32 2026 GMT
Subject: CN=8134de1a26a38de755d50a75b013589388981cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:36:8e:4c:07:e8:db:a0:2d:4a:46:8c:d4:
f3:07:5e:54:37:c5:39:99:2c:2b:7c:2a:98:04:bf:
bb:62:ed:e4:e5:d5:9c:bf:be:c2:31:c2:4d:c0:f3:
26:8f:78:09:94:bd:4a:c5:dd:76:45:ca:26:a5:b3:
8f:1a:05:57:60:f8:ac:6e:7c:41:6f:3a:7d:cc:9f:
3c:3a:d0:45:76:e0:86:b9:e5:6d:e3:d2:48:9b:66:
0f:41:6c:6d:8d:f4:89:e3:ed:f6:9a:94:e1:ff:fc:
04:db:46:5b:68:fa:b1:93:a5:c5:98:99:a9:b9:e3:
59:77:15:04:9f:3c:40:97:b3:b7:0f:6b:1c:36:81:
05:81:99:25:47:60:cb:7d:95:8a:4b:b0:09:27:8d:
59:f1:8b:1a:1f:53:c5:1c:b8:c6:e9:96:af:51:b8:
58:14:f2:39:dc:f6:0a:9c:cc:90:66:d4:ba:56:cf:
80:40:7e:bc:6a:c1:b0:39:5c:e3:87:75:90:18:13:
74:b0:11:66:f1:4d:a4:18:51:f3:b9:c9:85:d9:a9:
6d:44:8d:c5:68:88:60:2b:dc:0d:c0:c9:9d:e0:6c:
c1:a6:96:a0:56:ad:2a:92:84:27:82:da:05:98:ed:
60:9f:12:34:0f:52:4e:1c:2e:20:4f:f7:00:77:5d:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:DE:1A:26:A3:8D:E7:55:D5:0A:75:B0:13:58:93:88:98:1C:D1
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7a:5f:d9:37:4b:a1:da:31:27:e1:68:8b:f9:df:2d:0d:2a:
21:71:39:c5:af:67:30:81:b2:62:b2:e3:50:ab:f4:3a:b2:77:
a2:e1:52:74:ef:4c:46:92:44:cf:44:8f:52:42:b9:d1:92:94:
95:e4:ae:f9:46:f9:17:31:6a:cf:63:5d:34:c3:09:56:ee:92:
f4:a1:83:57:0b:f6:0c:5d:17:10:c2:6a:3f:08:68:77:eb:ae:
48:07:cf:5d:19:71:f0:15:bb:87:b9:de:39:76:59:6f:b7:1d:
05:f9:c1:2d:6f:8a:5e:cd:62:1d:78:7c:be:38:1c:64:d2:82:
a5:12:0c:4f:3f:7f:ab:70:fc:ef:51:15:3e:70:a1:c9:5e:45:
32:9e:49:59:bc:67:dc:2f:54:32:0d:90:91:db:f9:57:54:be:
42:64:c3:58:d7:bf:6e:d6:ab:2a:b3:52:b7:1a:b7:52:fc:08:
ae:f3:b9:e9:b4:17:c9:e4:11:ac:b6:39:ca:73:13:36:e0:8a:
56:b2:3e:5e:ec:ef:10:50:3c:3d:a2:78:37:af:86:e8:9c:5f:
3e:10:d1:5a:1d:0a:21:97:b8:56:3c:47:15:ca:b5:62:77:48:
57:aa:f2:a0:a9:46:0b:35:01:2a:a2:a9:54:a1:5e:3a:e9:95:
34:80:c2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Gt+lMu7boTz5a9ibAukaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh
OWM2NTcwHhcNMjYwNDEzMTIwMTMyWhcNMjYwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg4MTM0ZGUxYTI2YTM4ZGU3NTVkNTBhNzViMDEzNTg5Mzg4OTgxY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMU2jkwH6NugLUpGjNTzB15UN8U5
mSwrfCqYBL+7Yu3k5dWcv77CMcJNwPMmj3gJlL1Kxd12RcompbOPGgVXYPisbnxB
bzp9zJ88OtBFduCGueVt49JIm2YPQWxtjfSJ4+32mpTh//wE20ZbaPqxk6XFmJmp
ueNZdxUEnzxAl7O3D2scNoEFgZklR2DLfZWKS7AJJ41Z8YsaH1PFHLjG6ZavUbhY
FPI53PYKnMyQZtS6Vs+AQH68asGwOVzjh3WQGBN0sBFm8U2kGFHzucmF2altRI3F
aIhgK9wNwMmd4GzBppagVq0qkoQngtoFmO1gnxI0D1JOHC4gT/cAd111hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE03homo43nVdUKdbATWJOImBzRMB8GA1UdIwQY
MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt
ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez
LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXpf2TdL
odoxJ+Foi/nfLQ0qIXE5xa9nMIGyYrLjUKv0OrJ3ouFSdO9MRpJEz0SPUkK50ZKU
leSu+Ub5FzFqz2NdNMMJVu6S9KGDVwv2DF0XEMJqPwhod+uuSAfPXRlx8BW7h7ne
OXZZb7cdBfnBLW+KXs1iHXh8vjgcZNKCpRIMTz9/q3D871EVPnChyV5FMp5JWbxn
3C9UMg2Qkdv5V1S+QmTDWNe/btarKrNStxq3UvwIrvO56bQXyeQRrLY5ynMTNuCK
VrI+XuzvEFA8PaJ4N6+G6JxfPhDRWh0KIZe4VjxHFcq1YndIV6ryoKlGCzUBKqKp
VKFeOumVNIDCtQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:56:38 2026 by rpki-client