Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: 1wWi4elyT4a8Q/A6HSEDXpQlgM8Y/QPfn0yL/pVbOyQ=
Subject key identifier: B9:A0:3E:30:64:BD:15:55:A8:C0:62:2E:C6:77:31:FE:BB:E6:3B:A3
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019D992AF2005E78713DFD551006709AE182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:21 +0000
Manifest this update: Fri 17 Apr 2026 02:00:21 +0000
Manifest next update: Sat 18 Apr 2026 02:00:21 +0000
Files and hashes: 1: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: 52SK/g6zonbXGYDoGVo1olMIeR+xB+1pZ5dgvo0FpEI=)
2: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (hash: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f2:00:5e:78:71:3d:fd:55:10:06:70:9a:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Apr 17 02:00:21 2026 GMT
Not After : Apr 18 02:00:21 2026 GMT
Subject: CN=b9a03e3064bd1555a8c0622ec67731febbe63ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:de:00:65:ff:c6:fa:68:45:ad:22:7f:40:
91:5f:b1:8a:59:75:ea:f6:de:a6:72:d4:ed:00:f7:
bc:fa:d0:a1:a5:33:61:4e:9d:ca:ed:cb:b2:9b:fe:
a6:4b:57:01:46:97:36:46:55:43:df:c3:52:cb:5b:
e1:ef:af:dc:76:1b:f1:4b:4f:3a:ce:2a:3c:0b:4f:
8c:e8:d0:70:95:eb:30:09:fd:00:be:87:b7:09:db:
9d:e5:9e:03:98:ad:66:3c:0a:80:0f:78:57:7b:e9:
88:03:03:e7:fa:d3:07:18:9f:ee:38:9a:8c:e6:2f:
ac:3f:9d:41:28:d5:63:98:9f:02:ee:7b:78:29:3a:
fb:1f:6f:8b:5b:2c:1d:6e:ea:23:5e:c0:b9:db:f2:
cb:f0:c1:8d:a9:79:27:d4:f6:47:2f:c1:a6:58:d8:
4d:10:d9:af:74:7f:43:39:6b:34:02:0d:46:55:f4:
0d:2b:56:23:74:db:75:4b:be:98:2a:23:50:45:60:
02:86:d5:f5:b6:8c:20:ed:d7:b4:b1:4c:a6:f8:5a:
90:d3:29:3f:b7:4d:94:c9:fd:64:05:64:01:45:61:
18:ee:cd:7b:d4:7f:e4:50:68:31:0a:98:53:80:df:
69:b1:bb:8f:4d:7c:c1:21:f8:4c:79:04:5e:ae:6f:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:3E:30:64:BD:15:55:A8:C0:62:2E:C6:77:31:FE:BB:E6:3B:A3
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:89:e2:dc:91:55:ea:2a:1b:02:8e:0d:63:4e:30:ef:48:
fc:ad:23:6d:a9:6f:7b:13:46:fe:d3:34:8c:a3:cb:30:2e:53:
14:19:1b:4a:22:78:70:f3:e0:72:bc:eb:b2:a3:fc:c5:f8:a9:
fb:90:9e:02:a6:0e:36:83:0f:8c:a0:b8:f2:b4:e2:37:6e:b1:
2d:47:1d:dc:d2:0c:c4:d9:03:d8:77:10:fe:32:1d:8f:07:d4:
66:13:07:b5:84:5e:5f:85:d3:a8:fc:91:33:0a:1c:ee:bf:47:
ab:c3:2a:8f:4b:82:c4:75:04:d2:6e:a6:c3:e7:d8:d1:4b:a1:
f6:cf:6c:b2:95:cc:c5:05:96:1b:6c:e8:07:3b:e2:33:6d:84:
0b:a2:49:d7:a8:81:ad:19:a6:3e:f5:3e:3f:81:c2:4b:4c:94:
75:56:de:e0:d2:98:6c:0f:dc:05:7c:0f:07:8c:ec:2b:6f:91:
aa:ee:6f:da:bc:01:59:67:38:be:e7:c3:1f:ca:bf:fe:c6:8a:
dd:ea:fc:dc:78:0e:6b:25:34:b3:d5:9d:f3:cd:24:e4:68:f2:
50:19:eb:a7:a7:89:19:2c:a4:d5:7b:08:01:fc:b9:83:bd:0f:
1e:1c:0b:f0:9d:22:74:3f:8b:cc:ee:2c:5d:3f:b5:f1:b2:98:
94:5f:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:32 2026 by rpki-client