Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: 6VLajkmZuwQNrIGVEaoFmqW4ehTD+Rz9gWwKpkw6vm0=
Subject key identifier: 00:09:39:0E:0D:28:30:91:8A:83:AD:D1:53:E6:4B:1A:8C:DF:32:EA
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 019D992BAE809313812C4A01EBA544C76366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 1829
Signing time: Fri 17 Apr 2026 02:01:09 +0000
Manifest this update: Fri 17 Apr 2026 02:01:09 +0000
Manifest next update: Sat 18 Apr 2026 02:01:09 +0000
Files and hashes: 1: QkiwDdoqGneFxhueC1tYh17gEHY.roa (hash: S+EvCH9iwtFs/o9t8OSVI9PK9t1NWkiQ5QvCjj3oEWA=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: nR4FBwqBucXU4w/Oth/hcq7Du9yWSnLh8OSnIVXLGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:ae:80:93:13:81:2c:4a:01:eb:a5:44:c7:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Apr 17 02:01:09 2026 GMT
Not After : Apr 18 02:01:09 2026 GMT
Subject: CN=0009390e0d2830918a83add153e64b1a8cdf32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:e9:dd:99:7c:7a:f5:8b:1a:67:fc:53:f7:
f1:56:0f:31:c7:d5:4f:28:49:97:a9:6f:40:9e:b6:
76:81:f8:f6:d3:f8:47:5d:58:04:7a:89:09:45:93:
4f:5c:04:bb:97:ac:3f:69:ec:91:0e:71:9e:90:9d:
d3:99:b6:fe:13:ca:38:52:83:8a:03:fc:7b:c9:78:
57:fb:85:3a:2a:5e:0c:14:51:b3:0e:39:0d:f5:67:
36:9e:91:9b:cc:90:58:3b:2f:e6:e7:98:dd:6c:b8:
28:e2:fc:48:a9:a9:6a:db:46:5f:5b:a9:20:f5:d3:
a9:ab:68:64:2d:6f:f9:33:9e:33:6c:27:ad:85:cc:
ce:2e:44:90:e6:ba:2c:88:f0:13:d5:3e:26:c1:df:
55:ae:d8:4c:a5:16:4f:dd:f3:cb:bc:d6:81:e0:5e:
89:05:be:55:d8:18:ec:97:be:4d:79:85:16:28:be:
88:77:9d:3e:7c:d5:8d:45:07:ef:aa:9f:d9:56:eb:
58:10:0a:d3:9e:ca:7c:f1:f4:5f:fb:b2:8b:54:0e:
ac:42:67:b9:99:13:6f:1e:cc:2f:86:d3:f0:5d:75:
11:64:f7:43:6c:74:ba:8a:f4:df:f7:3c:96:e4:9c:
e5:7c:32:86:0f:58:97:e1:81:f9:79:fd:c5:0f:76:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:39:0E:0D:28:30:91:8A:83:AD:D1:53:E6:4B:1A:8C:DF:32:EA
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:55:b3:03:7c:0e:9a:8c:e8:c5:e8:2d:63:f8:52:b8:7f:a8:
75:54:2c:85:e2:e5:e5:d4:1c:36:04:58:f1:8d:58:12:1b:f4:
36:73:ce:cb:9f:ea:27:6e:89:e2:61:80:bb:2e:d6:f0:72:44:
d7:d3:7a:c2:d7:b2:23:75:6f:de:e7:37:be:37:a5:7a:f2:a0:
32:01:95:b7:b9:57:e9:a0:94:f3:c8:d9:4a:4d:a2:6d:f5:97:
65:ac:34:4d:f5:34:cb:dc:58:5b:b6:67:a6:df:d7:69:e8:bc:
eb:ee:93:08:00:9c:20:06:d8:db:5a:76:11:12:b1:e5:6c:cc:
b5:27:81:1e:93:37:13:d4:2b:d4:a8:0c:f0:65:ed:0c:f7:44:
d7:84:ba:1a:7a:da:8a:8c:93:b3:5a:68:0a:eb:bf:7c:37:b2:
ff:f8:01:e3:04:32:35:6c:8a:d1:5b:7a:a6:3e:f0:e2:4c:fe:
e5:b1:9e:62:49:06:4e:7a:e5:7a:c6:e6:99:92:b6:06:65:b3:
fc:df:0a:11:30:65:91:bf:62:93:fd:01:fb:e4:fb:0c:e5:d1:
dc:09:cb:2d:7a:3e:3e:4c:bc:af:3e:e5:da:d8:a9:41:b7:d0:
eb:4f:d8:e5:d6:d3:cb:ed:49:57:c6:c7:8c:33:6a:4e:e9:35:
a7:25:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:52 2026 by rpki-client