Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier: hpv3X7O4TPci2Ge+0n5ItgUqS4JhTMoT1cn3JdiOM8M=
Subject key identifier: 26:E7:4C:90:E7:5F:2E:5E:B7:74:5B:12:05:AE:E2:0D:54:09:09:49
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019DD6534E3C82274DA58E61F93B633F9B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number: 1901
Signing time: Tue 28 Apr 2026 23:01:16 +0000
Manifest this update: Tue 28 Apr 2026 23:01:16 +0000
Manifest next update: Wed 29 Apr 2026 23:01:16 +0000
Files and hashes: 1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
2: PjFMEAMN046NMpzBfiyNN8yjdm0.roa (hash: Whh7oGBU8ez0qOcGw3H29bTvnY4RX3Rk5yKQaymKBS0=)
3: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
4: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: 88MaiahbpLW5NYN0Wuk8fHtmLCkpcA0++iUuFWOqHuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 20:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:53:4e:3c:82:27:4d:a5:8e:61:f9:3b:63:3f:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 28 23:01:16 2026 GMT
Not After : Apr 29 23:01:16 2026 GMT
Subject: CN=26e74c90e75f2e5eb7745b1205aee20d54090949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:7d:a5:86:30:dd:fe:3f:c8:68:ee:fc:3c:
67:a4:28:cd:16:e5:4b:1e:8e:ef:5b:3d:f6:71:23:
f8:97:bf:ba:4e:91:84:2c:8d:bb:81:9d:93:b8:da:
2d:45:2a:46:39:a4:a9:bc:df:bc:fa:ce:f9:29:9e:
f3:3b:21:7b:26:fe:9d:fe:f5:92:c0:98:26:aa:ba:
f7:ae:5a:74:91:73:e1:32:be:b2:31:c6:2f:4f:fd:
6f:06:88:2a:a1:a4:61:60:f6:fa:b3:f9:73:38:34:
b3:42:4d:68:fb:1a:aa:a8:9b:fd:44:60:d0:21:f7:
9f:00:59:d8:f7:34:20:e1:d3:36:99:4a:fb:04:e3:
77:b2:2c:9c:8b:31:06:f2:90:d9:bf:cd:e8:07:ec:
fd:7b:17:ca:04:04:76:de:78:4c:e3:2f:71:f7:55:
90:94:31:4a:6f:e2:59:17:01:17:ac:ff:ed:2f:ed:
16:a6:d5:90:29:ae:df:4d:7b:2e:eb:f0:bc:75:77:
0e:a9:e5:33:46:38:fc:8c:91:f3:32:ea:52:41:c2:
4e:67:9d:03:7d:05:58:75:c6:01:41:fd:d7:cb:74:
76:84:e5:90:5e:07:64:73:a8:37:c8:09:7c:53:02:
fe:eb:d1:e9:2f:c9:cb:4d:cd:b7:f6:87:60:68:bf:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:4C:90:E7:5F:2E:5E:B7:74:5B:12:05:AE:E2:0D:54:09:09:49
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:46:2c:84:ae:eb:69:de:b1:a3:25:00:b7:04:2e:8c:bd:
c6:2a:31:b2:eb:e6:05:00:00:8a:ad:9e:f8:9e:1a:34:18:08:
0e:45:37:1f:3a:63:d0:51:5e:e3:01:0d:ea:c2:44:cc:09:dd:
66:77:a0:da:63:bc:11:c2:90:eb:f4:c9:50:a8:73:e5:c9:95:
16:6c:96:4d:f0:ef:19:da:32:86:62:fe:c2:57:be:1e:c3:a8:
5d:86:48:51:32:85:4c:48:26:bf:31:69:9a:58:e4:62:d7:2c:
a7:bb:5a:1e:62:b7:82:31:bf:4a:8c:62:1b:84:c1:58:2f:10:
db:9d:4c:24:2d:bd:4b:e5:f6:dc:7f:0c:30:2a:a8:22:52:7e:
c2:ad:5a:e1:00:6c:48:88:24:d1:92:87:cb:62:85:54:d8:f0:
10:3e:a2:aa:04:55:6f:fb:e7:14:12:de:3e:c2:55:2d:1c:67:
90:5a:71:e7:fa:50:4e:b3:97:ed:df:b1:8b:74:13:5a:89:dc:
aa:89:d1:c5:59:f7:e7:57:06:15:ea:08:50:7b:a4:51:fa:0f:
ab:96:77:33:9f:c4:06:f1:53:bf:5a:90:1e:f9:27:12:76:db:
12:fc:b7:ff:a7:70:57:90:8c:e4:98:63:09:32:8f:2b:8f:ed:
4a:84:41:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3WU048gidNpY5h+TtjP5uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjYwNDI4MjMwMTE2WhcNMjYwNDI5MjMwMTE2WjAzMTEwLwYDVQQD
EygyNmU3NGM5MGU3NWYyZTVlYjc3NDViMTIwNWFlZTIwZDU0MDkwOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuF9pYYw3f4/yGju/DxnpCjNFuVL
Ho7vWz32cSP4l7+6TpGELI27gZ2TuNotRSpGOaSpvN+8+s75KZ7zOyF7Jv6d/vWS
wJgmqrr3rlp0kXPhMr6yMcYvT/1vBogqoaRhYPb6s/lzODSzQk1o+xqqqJv9RGDQ
IfefAFnY9zQg4dM2mUr7BON3siycizEG8pDZv83oB+z9exfKBAR23nhM4y9x91WQ
lDFKb+JZFwEXrP/tL+0WptWQKa7fTXsu6/C8dXcOqeUzRjj8jJHzMupSQcJOZ50D
fQVYdcYBQf3Xy3R2hOWQXgdkc6g3yAl8UwL+69HpL8nLTc239odgaL/5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbnTJDnXy5et3RbEgWu4g1UCQlJMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpFGLISu
62nesaMlALcELoy9xioxsuvmBQAAiq2e+J4aNBgIDkU3Hzpj0FFe4wEN6sJEzAnd
Zneg2mO8EcKQ6/TJUKhz5cmVFmyWTfDvGdoyhmL+wle+HsOoXYZIUTKFTEgmvzFp
mljkYtcsp7taHmK3gjG/SoxiG4TBWC8Q251MJC29S+X23H8MMCqoIlJ+wq1a4QBs
SIgk0ZKHy2KFVNjwED6iqgRVb/vnFBLePsJVLRxnkFpx5/pQTrOX7d+xi3QTWonc
qonRxVn351cGFeoIUHukUfoPq5Z3M5/EBvFTv1qQHvknEnbbEvy3/6dwV5CM5Jhj
CTKPK4/tSoRB+w==
-----END CERTIFICATE-----
Generated at Wed Apr 29 01:41:28 2026 by rpki-client