Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: vokQ7f9zXESkAtM6DnhV64RfdiFnvleKyJcuYOpx5jM=
Subject key identifier: F2:3E:5C:24:2A:A3:A0:8F:0F:2B:A7:28:36:7A:D7:D9:7D:B4:05:39
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019D99631F2C28E25F4347A9ACD071B2BB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1646
Signing time: Fri 17 Apr 2026 03:01:43 +0000
Manifest this update: Fri 17 Apr 2026 03:01:43 +0000
Manifest next update: Sat 18 Apr 2026 03:01:43 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: ZrqJ2F4jRyxMgXmlQgpoldbHcTpoAS91btYbt2ezLXc=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:1f:2c:28:e2:5f:43:47:a9:ac:d0:71:b2:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Apr 17 03:01:43 2026 GMT
Not After : Apr 18 03:01:43 2026 GMT
Subject: CN=f23e5c242aa3a08f0f2ba728367ad7d97db40539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:87:3b:d3:e6:21:6e:e4:fd:ac:94:e2:01:
d2:f4:7f:0e:75:20:9c:4f:30:14:11:25:43:90:20:
cd:d3:75:88:31:74:e4:23:d2:3f:37:56:1b:c1:84:
fd:28:61:14:01:3b:6a:d0:e1:37:c7:4c:2d:07:61:
a9:70:85:e7:0b:7f:7e:17:f5:95:0b:34:48:0a:a5:
3e:61:92:87:de:ad:ee:e0:00:3f:92:82:66:19:2c:
31:06:8c:e3:c7:ac:49:ac:6a:78:e2:c7:fc:fb:07:
53:97:d3:24:cc:c8:22:d1:76:5c:b1:77:95:bb:54:
f3:47:93:b7:76:6c:00:ae:47:d9:16:b3:de:ed:d5:
00:d5:9a:50:b5:37:e2:c0:7d:89:40:63:a2:c2:96:
dd:61:d8:8f:66:cc:ca:09:ec:b3:c7:67:78:dd:15:
4b:a2:ee:38:5e:32:87:69:5a:14:28:5c:94:6f:9d:
2e:87:65:0a:09:df:32:a1:cb:29:1e:b7:49:88:a1:
0b:b1:62:20:96:d0:d7:a6:05:bf:18:92:7a:65:15:
1d:eb:99:d0:fc:e2:83:f5:0f:79:91:32:c0:15:8a:
60:8c:f1:f8:a3:70:49:85:c3:d9:6c:dd:4b:d7:25:
a0:ae:9d:c9:02:19:91:4d:78:d7:19:9d:90:a1:d4:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:5C:24:2A:A3:A0:8F:0F:2B:A7:28:36:7A:D7:D9:7D:B4:05:39
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:68:a6:44:56:3b:3a:26:11:76:37:bc:d6:6a:39:90:4a:06:
40:c7:e6:1e:b6:a1:6d:08:cc:90:6e:46:b1:91:48:e3:5e:87:
cb:38:1e:79:9f:50:a1:49:f4:eb:64:c4:c5:38:48:55:4b:c6:
41:1b:10:0a:63:83:ca:ab:f9:ce:39:2e:25:d7:96:bd:a7:1f:
05:de:6a:c1:a9:be:1e:5f:c2:96:6e:d0:5c:50:5d:2f:05:d7:
85:e7:88:1a:a6:25:9b:19:4b:17:dd:1b:0d:c6:e4:24:1e:b0:
3a:2a:ba:4b:b9:86:5b:69:6c:f6:c9:b1:d1:4e:91:da:12:5c:
24:12:d8:32:de:4a:d1:5c:5e:e6:67:18:2e:e2:ce:8f:d6:05:
e9:54:74:f9:07:26:d6:14:ca:e1:bc:f0:14:82:d7:82:f0:e3:
e3:d2:9b:4e:71:7f:8e:66:cd:c5:f1:46:ab:f0:c4:da:e2:4c:
39:23:1e:17:61:dc:c5:2f:9b:bd:94:f2:64:7e:dc:00:d6:9c:
13:cb:6e:fc:5c:83:b5:7f:cd:b1:b9:40:da:74:7a:db:19:f3:
60:b2:77:8b:aa:a7:5f:96:22:f3:b3:0e:15:86:04:fa:57:46:
f9:6c:da:4d:77:5c:35:b0:b7:b3:7c:7a:23:d5:2c:f7:eb:e2:
fd:a5:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:00 2026 by rpki-client