Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: ojDDOXnXzRNdmkI9Mr1uZMiYgq7npso+O3EDIb40m7U=
Subject key identifier: 55:A3:4F:14:32:AF:73:6C:D2:48:80:5F:61:1B:13:20:E9:91:38:6E
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019DCFE3DD49B9323EB01A7609445529038A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 17:01:50 +0000
Manifest this update: Mon 27 Apr 2026 17:01:50 +0000
Manifest next update: Tue 28 Apr 2026 17:01:50 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: UE4VVntHGbDhcfLjLGC4eKSyB8oXYxxDITgrq3anv6Y=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:dd:49:b9:32:3e:b0:1a:76:09:44:55:29:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Apr 27 17:01:50 2026 GMT
Not After : Apr 28 17:01:50 2026 GMT
Subject: CN=55a34f1432af736cd248805f611b1320e991386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:69:d2:20:87:fb:be:be:17:b4:9e:83:c8:
30:44:88:f0:ce:b0:65:f9:69:a7:15:a2:3e:1f:51:
72:43:f3:85:09:89:49:61:e9:dd:7e:0d:9a:5d:0f:
85:30:9c:0a:23:8d:e4:c5:25:91:ae:6f:f8:4a:bf:
0c:1d:ee:04:4e:cd:9c:42:d2:dc:a6:bc:5b:59:c7:
15:c6:bd:ca:00:78:e5:4b:71:0b:62:eb:c2:14:0b:
38:d4:b2:5e:71:3d:c2:0a:e9:06:7d:6a:6c:39:43:
ab:b1:56:44:10:7d:ce:5a:8f:25:2a:f3:a7:34:8d:
dd:62:a8:d5:ec:11:d9:92:e9:04:04:be:70:9a:80:
12:f5:74:cf:60:98:4e:36:83:91:ed:b9:4b:90:d0:
61:8f:6a:ba:6a:e6:db:03:ea:e2:62:cf:5b:dd:28:
da:ae:7a:b0:b2:3d:29:a2:1a:ba:f9:a2:09:e5:f3:
1f:75:eb:44:83:ee:61:ce:87:80:54:52:c5:c8:88:
35:39:da:cf:ad:a1:53:26:e4:79:fa:7d:5b:ab:6b:
66:6c:a5:97:3c:1f:ab:fe:ea:13:94:c1:a4:e8:da:
ab:f1:86:69:af:29:40:c1:07:a7:b8:e5:28:32:7d:
9b:0b:22:e5:ed:f3:db:76:5e:06:89:5c:f0:d9:e5:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:4F:14:32:AF:73:6C:D2:48:80:5F:61:1B:13:20:E9:91:38:6E
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:e7:13:ba:20:70:f3:55:79:62:69:a1:62:0d:b5:7d:4c:
c0:e7:00:22:bc:99:d5:27:e7:e7:ff:64:a0:5b:7f:57:fb:9a:
58:ec:bc:ae:e1:7e:d4:7a:a4:45:db:8c:55:4e:9d:49:95:45:
f7:bc:49:c2:0e:bf:a5:9e:75:1b:fb:e7:43:b4:6e:5f:bf:06:
9d:56:0a:db:08:e7:a8:ea:4b:52:63:dd:5f:4b:e6:df:71:1b:
da:b9:54:fb:c6:bb:8d:f8:4c:ec:c8:09:80:1f:4b:fd:d8:dc:
82:71:0d:95:c4:3c:a8:3f:f1:04:64:d1:13:f0:d4:a4:5c:f0:
40:08:46:e4:d9:6c:25:96:7e:74:05:1b:cf:3b:a5:c2:51:ab:
a2:68:40:a5:13:b0:8b:ca:62:df:ce:a8:c2:a5:9f:d4:a7:fc:
4f:32:61:f0:b2:f7:0d:9e:f6:a3:9d:5b:a3:85:49:69:aa:cd:
36:80:60:cb:90:98:09:a2:ec:60:cd:e7:4b:41:43:e0:d1:b9:
ff:4a:1d:41:9a:e2:c7:c8:1b:bf:23:74:c0:f9:b4:7e:73:69:
a9:b1:9e:59:74:11:4f:68:ff:a2:c8:f0:c1:ed:13:76:b9:8e:
a4:bf:22:95:40:45:b4:c7:17:2c:57:d7:a6:f9:2f:1b:86:97:
fe:63:59:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P491JuTI+sBp2CURVKQOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjYwNDI3MTcwMTUwWhcNMjYwNDI4MTcwMTUwWjAzMTEwLwYDVQQD
Eyg1NWEzNGYxNDMyYWY3MzZjZDI0ODgwNWY2MTFiMTMyMGU5OTEzODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tZp0iCH+76+F7Seg8gwRIjwzrBl
+WmnFaI+H1FyQ/OFCYlJYendfg2aXQ+FMJwKI43kxSWRrm/4Sr8MHe4ETs2cQtLc
prxbWccVxr3KAHjlS3ELYuvCFAs41LJecT3CCukGfWpsOUOrsVZEEH3OWo8lKvOn
NI3dYqjV7BHZkukEBL5wmoAS9XTPYJhONoOR7blLkNBhj2q6aubbA+riYs9b3Sja
rnqwsj0pohq6+aIJ5fMfdetEg+5hzoeAVFLFyIg1OdrPraFTJuR5+n1bq2tmbKWX
PB+r/uoTlMGk6Nqr8YZprylAwQenuOUoMn2bCyLl7fPbdl4GiVzw2eX5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWjTxQyr3Ns0kiAX2EbEyDpkThuMB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/nnE7og
cPNVeWJpoWINtX1MwOcAIryZ1Sfn5/9koFt/V/uaWOy8ruF+1HqkRduMVU6dSZVF
97xJwg6/pZ51G/vnQ7RuX78GnVYK2wjnqOpLUmPdX0vm33Eb2rlU+8a7jfhM7MgJ
gB9L/djcgnENlcQ8qD/xBGTRE/DUpFzwQAhG5NlsJZZ+dAUbzzulwlGromhApROw
i8pi386owqWf1Kf8TzJh8LL3DZ72o51bo4VJaarNNoBgy5CYCaLsYM3nS0FD4NG5
/0odQZrix8gbvyN0wPm0fnNpqbGeWXQRT2j/osjwwe0TdrmOpL8ilUBFtMcXLFfX
pvkvG4aX/mNZsg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:56 2026 by rpki-client