Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: Pk5gUb5QyYi5LAfOcrtlC9qSvcYNtsVqE2J0E4SvO/M=
Subject key identifier: F5:8B:14:1F:FE:0F:5A:16:9E:D6:90:DB:A9:30:D1:24:93:1C:E0:1F
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019E1ED9D9C4A69487325ABB8EC41629CE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 159C
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: q2l3WLpPvlSgCk4yV4CvSS+6Jv1hHLqFfGp274ThMb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d9:c4:a6:94:87:32:5a:bb:8e:c4:16:29:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=f58b141ffe0f5a169ed690dba930d124931ce01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:cc:99:7a:aa:83:2b:ca:a1:c2:73:5a:f8:
78:14:a3:07:63:37:60:cf:2a:47:7c:36:e5:70:80:
d2:38:d6:24:80:b5:63:87:05:00:12:6f:84:31:b1:
76:bf:05:43:2b:83:0c:c4:31:a5:10:c3:12:6f:9c:
81:04:ba:9c:d7:69:61:39:63:e2:cf:4f:48:00:31:
db:ff:af:f0:e6:f5:31:ce:ec:c4:01:72:36:57:45:
a7:b1:56:2c:97:9b:a6:8a:c8:15:d8:14:61:ad:8d:
d1:86:08:15:07:db:44:bb:18:79:e7:d1:47:99:f0:
20:8d:84:94:1f:d1:d4:c4:d3:d9:52:52:1f:7f:a4:
0b:b7:d1:20:ee:12:72:1b:75:9b:69:99:98:e7:7d:
c8:d2:19:6b:49:ee:5d:fc:75:34:dc:48:ee:7f:02:
f3:60:da:41:ac:42:6f:5d:9f:97:9f:44:1a:c0:7a:
49:99:78:f4:51:95:d6:81:04:c4:eb:ff:ed:7b:a1:
c9:cf:cd:12:00:78:7f:e2:9c:64:ca:47:eb:2a:53:
c0:f9:c1:1f:ad:e9:94:0c:2e:3e:f9:d0:58:8c:e5:
c7:47:a5:52:5b:56:41:3c:1a:fd:81:6d:68:e8:58:
9a:5a:35:ca:44:e4:e5:f3:a6:83:ad:0b:11:b6:27:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:14:1F:FE:0F:5A:16:9E:D6:90:DB:A9:30:D1:24:93:1C:E0:1F
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:91:2a:38:2b:14:9b:1f:13:5b:9b:9d:8e:3d:5c:93:4e:be:
01:04:4e:3e:ab:7a:b0:35:04:53:b3:f7:d3:b1:02:3b:b5:38:
fb:ef:15:35:c2:28:a0:74:da:16:be:26:37:46:99:6a:04:5c:
1f:b9:d4:dc:fd:f8:8f:34:13:69:72:8c:86:dc:15:92:71:cc:
69:d9:16:8f:aa:cb:0e:74:45:01:a9:1e:71:f1:6f:c6:40:2a:
8d:80:83:4f:01:fa:e6:23:b6:e3:1c:5c:bb:c1:36:00:79:d4:
fb:f0:d2:4e:37:e2:0a:fb:2d:61:f7:d8:51:c6:f0:ec:d5:48:
6d:4d:6b:b1:7f:de:fe:4e:10:de:70:19:7d:68:d0:6b:c9:dd:
67:5c:df:3e:dd:57:08:ce:1f:58:57:29:ab:f7:7a:ef:d8:23:
d6:c7:80:9c:27:5a:b3:d7:f0:53:fc:89:94:02:c6:8a:b0:d0:
05:60:da:f8:6e:98:ba:39:5d:1f:c1:16:1d:3f:77:c4:b9:83:
d8:43:7b:4e:33:eb:2c:e3:13:8b:a4:47:2e:c4:42:3b:be:c9:
38:b8:d6:fc:61:91:33:3e:50:56:1f:79:1d:a9:52:bb:1b:80:
33:e2:54:57:42:86:29:8e:bb:63:63:37:3e:18:d1:79:ca:6d:
90:ce:ea:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2dnEppSHMlq7jsQWKc6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3
NzUxMDkwHhcNMjYwNTEzMDEwMDUzWhcNMjYwNTE0MDEwMDUzWjAzMTEwLwYDVQQD
EyhmNThiMTQxZmZlMGY1YTE2OWVkNjkwZGJhOTMwZDEyNDkzMWNlMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbrMmXqqgyvKocJzWvh4FKMHYzdg
zypHfDblcIDSONYkgLVjhwUAEm+EMbF2vwVDK4MMxDGlEMMSb5yBBLqc12lhOWPi
z09IADHb/6/w5vUxzuzEAXI2V0WnsVYsl5umisgV2BRhrY3RhggVB9tEuxh559FH
mfAgjYSUH9HUxNPZUlIff6QLt9Eg7hJyG3WbaZmY533I0hlrSe5d/HU03EjufwLz
YNpBrEJvXZ+Xn0QawHpJmXj0UZXWgQTE6//te6HJz80SAHh/4pxkykfrKlPA+cEf
remUDC4++dBYjOXHR6VSW1ZBPBr9gW1o6FiaWjXKROTl86aDrQsRticp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWLFB/+D1oWntaQ26kw0SSTHOAfMB8GA1UdIwQY
MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt
NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5
LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5EqOCsU
mx8TW5udjj1ck06+AQROPqt6sDUEU7P307ECO7U4++8VNcIooHTaFr4mN0aZagRc
H7nU3P34jzQTaXKMhtwVknHMadkWj6rLDnRFAakecfFvxkAqjYCDTwH65iO24xxc
u8E2AHnU+/DSTjfiCvstYffYUcbw7NVIbU1rsX/e/k4Q3nAZfWjQa8ndZ1zfPt1X
CM4fWFcpq/d679gj1seAnCdas9fwU/yJlALGirDQBWDa+G6YujldH8EWHT93xLmD
2EN7TjPrLOMTi6RHLsRCO77JOLjW/GGRMz5QVh95HalSuxuAM+JUV0KGKY67Y2M3
PhjRecptkM7qWw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:33 2026 by rpki-client