Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: Lu2ogbAPxtNc0TX+S3l87nEX4+GI4saw80OSsb5ujnM=
Subject key identifier: B9:33:51:55:62:B5:BD:72:6A:01:E8:9B:35:29:BA:C7:49:0A:35:07
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019D9B199CFA9733EB9407893179DE85AF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 031C
Signing time: Fri 17 Apr 2026 11:00:40 +0000
Manifest this update: Fri 17 Apr 2026 11:00:40 +0000
Manifest next update: Sat 18 Apr 2026 11:00:40 +0000
Files and hashes: 1: Ah1zkCt41Yg3NZ4mfPJC8T6zRHQ.roa (hash: NMfgnHqRrDwsZCUvzQT+wIBkVfDVMOG4Osq0Hs4uyVU=)
2: dTPhWcmoSCJmhGreyJsPD4EE5t0.roa (hash: hsV4SDj2rIN1TNflJCH5NKHRDE3joBuyhtpUXGC4Fik=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: Z2UG3b6b14TlgMNSVPMepMGpy9PG9c3S+JJnleMZjDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:9c:fa:97:33:eb:94:07:89:31:79:de:85:af:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Apr 17 11:00:40 2026 GMT
Not After : Apr 18 11:00:40 2026 GMT
Subject: CN=b933515562b5bd726a01e89b3529bac7490a3507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:eb:dc:86:e1:90:a1:72:38:8d:1d:52:05:
57:96:4f:98:68:ce:45:e1:fe:4b:64:80:5b:b8:ce:
1f:80:08:4a:e4:4a:f6:e7:20:b5:d2:65:a3:d3:16:
00:75:56:de:b1:22:63:cd:aa:6b:41:8a:e2:e9:42:
bf:d5:68:17:b5:87:da:c9:ca:73:7d:13:18:c5:c4:
70:9f:15:72:91:79:9f:86:d8:c8:e8:86:2f:c5:e2:
d4:ad:7c:26:58:8e:dd:64:21:e9:ca:6a:5c:0b:8e:
21:0e:94:6c:9e:3f:cc:46:87:49:ca:7c:0d:bb:19:
c9:a9:f4:78:32:15:77:51:12:9c:ea:e4:09:a7:f7:
e9:11:d7:7d:9a:3f:c7:8f:b4:88:5c:0a:84:cf:28:
90:d1:6e:c2:6f:e1:5e:2d:65:59:ea:cd:e5:a8:78:
e9:57:b3:82:77:98:05:9d:4d:23:0b:a9:ef:00:80:
2f:d9:9f:46:2c:3e:18:3e:fa:f0:16:05:17:17:db:
3f:a3:9e:66:93:3a:50:8f:01:e4:f1:93:61:59:62:
90:6f:ad:57:ea:57:39:2f:ca:d8:03:b8:a5:e4:24:
03:e1:b3:a6:a1:e8:21:25:04:f3:65:7d:a2:78:a4:
62:12:ff:ff:09:31:70:26:06:82:ec:91:7a:7b:36:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:51:55:62:B5:BD:72:6A:01:E8:9B:35:29:BA:C7:49:0A:35:07
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:19:1f:b7:e0:7f:98:e6:9a:e9:3b:20:78:31:07:a7:f5:
df:d1:b2:18:dd:18:a4:82:33:50:ba:02:fc:e9:6d:cf:29:a5:
71:42:15:37:8d:9b:4a:e7:74:84:a8:31:70:21:1e:4a:e1:0d:
fe:3e:c5:c3:2e:2c:6f:32:44:2f:8e:44:c1:e5:b7:4b:3e:a0:
a6:2f:d9:2a:34:43:6a:8b:5b:af:b0:50:3f:d6:0a:b5:71:cd:
85:b6:0c:b8:80:be:c0:fb:25:7b:dc:89:5f:b7:84:ec:01:0d:
23:bc:74:6d:20:6c:a5:12:1d:99:f6:e8:cb:3c:4c:a6:3a:6b:
94:00:b4:1c:3d:58:57:a9:2c:e7:27:57:41:39:80:c9:93:df:
6b:43:4d:59:12:55:3f:76:fd:82:01:3c:bb:ef:27:e3:2e:b3:
9d:e4:0c:2c:c8:6b:40:4d:df:43:ab:bd:09:6b:a0:d6:80:37:
8c:54:85:2f:9c:c0:31:be:3a:26:13:8d:12:32:fa:60:be:3b:
92:15:06:82:46:c0:95:a6:e1:73:a1:c7:d2:73:70:63:cc:5b:
ea:30:3d:ff:fb:54:cf:80:d4:6d:a2:44:d7:62:be:e6:90:f3:
26:8c:18:02:ec:bc:c4:a2:d5:c6:25:2c:8c:22:d9:46:bf:d2:
01:83:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:02 2026 by rpki-client