Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File: KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier: q05PuzfGc4nhq1jJM80YK7k8pW6XNmA6oS0OWjhSmwc=
Subject key identifier: 94:C8:AA:93:C9:66:3B:C2:FC:41:8E:39:4E:99:05:D1:4D:6D:57:D4
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 019D98F525061B6AC2875534846161E1CFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number: 0670
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: FysBbK++f+Dp8ojrThuCqvScStVCMKeXrTw+xbajjAw=)
5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:25:06:1b:6a:c2:87:55:34:84:61:61:e1:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=94c8aa93c9663bc2fc418e394e9905d14d6d57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:96:18:90:0a:d6:54:f4:1a:4d:bf:8b:c2:
87:81:9a:eb:2c:e9:cd:f9:58:42:6c:19:8d:a8:65:
39:6a:0a:88:43:ff:b7:00:df:d3:c1:b2:31:bd:98:
5e:94:f0:a6:26:6e:9c:f8:13:63:79:d5:04:9e:77:
72:67:8b:94:7b:43:7e:62:a3:9a:9a:43:99:bb:a5:
f5:ab:07:d6:cf:5b:f0:5e:82:8e:10:fe:df:3a:7c:
91:56:f5:52:5d:61:b0:c0:c0:c3:e9:6c:39:6d:5c:
87:3c:f1:78:27:4e:a4:6a:2c:9d:c1:a9:5b:8d:da:
2d:a4:3d:b8:f7:bc:cc:39:66:50:c7:97:0e:6a:a9:
70:2c:36:3a:c8:4a:a4:71:e7:68:53:98:5f:8d:43:
da:55:8a:be:5e:62:00:0e:2a:37:b9:01:a6:86:4d:
0b:58:97:63:2e:ef:5b:38:41:6a:f2:94:16:f8:e6:
64:b1:ff:bf:ee:75:ab:48:fe:9c:91:a9:be:56:4d:
08:41:10:95:a3:5f:79:e6:10:92:f3:be:db:12:89:
8d:ed:e4:cd:c1:24:9b:e5:1d:d9:0b:49:4e:67:3b:
9e:d8:3f:fc:cf:5d:74:84:fc:f1:a3:73:cf:0d:37:
5c:21:be:79:c6:ee:76:18:a3:90:f0:9b:53:38:8a:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:AA:93:C9:66:3B:C2:FC:41:8E:39:4E:99:05:D1:4D:6D:57:D4
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:58:69:cf:92:5f:c0:f7:b0:89:63:7c:0c:ec:9c:d2:42:
91:03:ca:94:e4:0a:93:77:d4:76:53:c2:47:05:2c:bf:15:92:
cb:eb:90:ad:1f:b0:5e:d7:26:95:0b:ba:03:6c:af:ad:2d:70:
f6:ce:63:a0:fb:d7:0f:ff:91:d1:a6:86:b6:60:8c:10:eb:4c:
f0:94:ce:97:60:60:3f:b5:1a:2b:24:a7:46:f7:2d:e8:98:a0:
62:7c:e1:b4:2f:9e:b2:a7:6e:07:c4:0c:aa:40:ab:ec:46:63:
11:f4:21:1d:15:3d:fd:68:5d:d5:b2:41:f2:76:aa:76:e3:98:
bb:8b:c5:87:a3:64:32:6d:76:39:7a:e4:a9:3b:b9:6a:28:2f:
37:9a:4c:08:d3:6b:f7:d5:c1:c2:76:04:b3:62:34:71:e5:c1:
a4:5d:9e:c0:1b:14:87:e1:b0:18:d8:80:a4:27:cb:aa:0f:14:
5c:db:0e:d6:f0:2d:90:86:46:79:50:d6:1f:d0:a8:4c:ce:3c:
a1:8f:55:0f:f3:bb:15:97:70:26:78:f6:e0:35:31:a2:57:c3:
e0:d3:bf:14:ed:77:77:fc:b7:0e:a9:f2:7b:e1:ba:93:8a:1d:
4b:14:db:08:0b:b4:a4:b5:da:92:dc:f0:05:ad:6a:6e:31:33:
1d:25:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:01 2026 by rpki-client