Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: QKeANgbo9+XTazYPTHVu7ZxBNgd9ercdaZvNUeVSGtA=
Subject key identifier: 7E:D3:21:EB:D3:E2:40:C3:A6:00:9B:FB:19:02:60:00:E3:59:B8:35
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 019D9C9A509D3284A26B6D87D90BB06B5E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 18:00:51 +0000
Manifest this update: Fri 17 Apr 2026 18:00:51 +0000
Manifest next update: Sat 18 Apr 2026 18:00:51 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: R1QFDQzl1hXbvQXLr6yMqKPnhB1gAzqIaaZ49WAsSP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:50:9d:32:84:a2:6b:6d:87:d9:0b:b0:6b:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Apr 17 18:00:51 2026 GMT
Not After : Apr 18 18:00:51 2026 GMT
Subject: CN=7ed321ebd3e240c3a6009bfb19026000e359b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ab:5b:64:2d:24:fc:5c:81:de:c1:16:90:
c1:86:cc:e5:27:b7:d4:ae:8a:48:43:55:33:93:e5:
53:09:52:9b:c0:32:37:d6:94:e0:6f:78:d0:73:fc:
07:b7:13:4f:14:c1:30:52:7a:2f:6d:e3:81:85:82:
3b:be:99:cb:89:16:76:23:fb:42:9e:70:69:5d:1d:
37:ea:51:62:61:44:5f:f0:e6:2f:1e:2b:3e:02:b3:
22:c3:53:51:73:a7:71:07:0e:e4:90:6a:8d:66:36:
17:02:80:56:aa:34:e9:5d:a2:1a:28:02:e9:d6:5a:
fa:cf:cc:8d:31:54:66:13:cf:0c:39:98:d6:3a:97:
02:ea:25:21:6e:7a:38:90:08:a9:3a:65:4e:0f:74:
b2:30:bf:58:7e:c3:c5:37:da:f8:3e:4e:ec:be:4e:
27:42:d6:16:44:4f:b9:ff:72:1d:91:54:37:42:6a:
57:6b:2f:92:25:06:7e:47:64:13:7d:fe:b1:ab:30:
7c:41:f7:e1:85:10:60:fc:26:56:99:44:36:b2:90:
41:06:54:5d:b2:16:15:71:08:82:06:a4:c5:93:e2:
e1:79:e8:1f:e8:8e:05:02:19:94:18:eb:e9:fb:8c:
5f:ed:b5:01:f3:b5:2a:5d:a4:4f:a6:e9:ae:fb:f5:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D3:21:EB:D3:E2:40:C3:A6:00:9B:FB:19:02:60:00:E3:59:B8:35
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6f:81:70:8d:e5:72:52:1c:4f:6d:02:3d:8c:f3:ac:8a:b2:
36:e1:be:26:59:6b:9e:8c:b4:2c:94:dd:f4:e5:44:d0:fc:26:
04:80:0c:0e:87:02:fe:b4:a4:3c:df:6e:17:62:70:da:51:c1:
f5:dc:b4:71:66:82:21:84:9c:5e:f6:9d:da:70:8c:54:45:44:
81:da:fb:de:ba:3b:97:05:4d:d2:b5:8d:8a:28:97:19:74:c6:
e9:51:8a:54:e1:ec:69:b9:c1:8b:bb:3f:a1:fb:ff:01:86:31:
cc:d3:92:9a:6c:25:3f:0b:2d:a1:87:e5:61:44:f8:53:71:43:
81:9f:8d:80:ff:7a:6d:b6:9d:a4:c5:6d:4b:6a:4e:61:7e:5e:
d9:52:78:e7:81:04:de:1b:4e:84:09:15:73:23:ba:18:66:a3:
d3:f4:50:e0:24:6b:1f:43:23:c1:e4:20:39:07:0d:d9:63:32:
62:d8:fc:6f:dc:c6:0a:d0:c2:72:1e:08:ae:d1:c3:d0:56:b0:
83:b7:74:43:2c:e5:a3:94:04:d1:5a:9f:dc:df:e3:30:88:26:
eb:10:25:41:3b:08:3d:32:5e:89:2a:b5:1c:90:77:43:c5:aa:
bd:c5:9e:bb:8c:7e:e0:59:a7:03:cb:a9:52:a6:c1:21:a9:2b:
fb:10:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:16 2026 by rpki-client