Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: rFeeZHePCSSDAm2Jp96dI8e7SSgK+eSimOcXqa3qHKY=
Subject key identifier: 78:50:05:38:C4:35:76:A5:59:8D:D4:B5:24:09:66:85:65:EE:09:E9
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 019D9773C5E4099374EAD3F12931BE01E1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 18:00:40 +0000
Manifest this update: Thu 16 Apr 2026 18:00:40 +0000
Manifest next update: Fri 17 Apr 2026 18:00:40 +0000
Files and hashes: 1: Dol_Yn1EUI6Y4JETRI7DtbG1wTY.roa (hash: oEleDgSfi1/0GdFoPLAt8sQUnHsmQoFm+KbSbKM7DK8=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: 1tpyXi4QfAe4uluzPfzy3BUFgvdrueBaSj8s8bKhqrU=)
3: gK2Rq9Zs-Y9rHAKXi0YVfwz0vlI.roa (hash: soCJxr1Be9fMlxT+zXNdcRqutbnVfTkKZ0DnRO9Wh6M=)
4: kUwG0iZuxyNBHJJd8N9jQGPedHQ.roa (hash: hPe1XR077zP9VhoNA1k11ZvtiSoFyhO3Q2vyCxM6cZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:c5:e4:09:93:74:ea:d3:f1:29:31:be:01:e1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Apr 16 18:00:40 2026 GMT
Not After : Apr 17 18:00:40 2026 GMT
Subject: CN=78500538c43576a5598dd4b52409668565ee09e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:6a:4c:e1:a7:0b:ef:da:0c:93:29:01:0a:
ee:d7:8e:aa:f9:76:91:49:dc:ff:09:85:22:93:07:
57:25:82:d5:5f:8d:1a:3a:2f:49:4c:09:d5:89:d3:
4a:6a:9a:b3:41:ee:ae:c3:1a:5b:f4:aa:6d:f0:40:
b9:c2:c1:3f:d8:c9:43:23:c6:c4:0c:a9:3b:1c:d0:
52:9d:73:de:75:75:98:2d:e3:8f:df:fd:46:79:c5:
28:ad:88:f9:ec:6e:1c:d1:7a:5b:d8:52:b4:6b:3f:
83:b1:4e:e3:c1:04:a3:38:c5:6f:2d:94:af:69:df:
21:60:9a:dc:9f:e4:93:f2:7b:29:12:aa:4f:2d:56:
a2:2d:21:54:55:4c:05:21:9d:c5:54:92:75:87:73:
24:71:f4:78:9f:02:05:a4:6b:8d:b2:66:02:de:f0:
e9:fa:c0:d0:ed:bb:49:1d:77:ff:0b:cc:f9:19:ad:
ec:eb:c4:bf:89:8c:4d:76:4a:f4:79:31:32:9a:99:
5c:bd:50:88:e4:85:9b:c8:0b:84:64:b4:35:ec:33:
6e:04:a5:e4:d7:b9:44:45:9a:4c:9e:a7:31:f2:59:
e7:17:17:44:c1:3e:42:e4:86:8e:be:bc:19:cd:f0:
73:20:ee:13:29:4a:4c:55:5f:2c:40:a2:00:c0:4c:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:05:38:C4:35:76:A5:59:8D:D4:B5:24:09:66:85:65:EE:09:E9
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:62:50:f1:a4:e2:88:8a:b9:e9:cb:bc:3a:15:cc:89:45:40:
ff:d3:0f:73:16:f0:16:3a:31:6a:86:c1:8b:84:41:c9:c1:50:
9a:f5:f4:db:9f:b2:f7:c4:b3:84:63:5b:fa:21:52:64:d5:3e:
dd:14:7b:9e:a6:8d:0e:0f:dc:de:15:16:70:6d:42:35:af:ee:
d5:cd:a7:5d:b8:99:42:2b:54:06:12:c4:08:82:cd:45:d1:de:
6a:b6:c1:4b:8e:2e:5e:df:f4:16:01:a5:5e:f5:66:d2:7e:00:
a2:a0:d9:a7:d1:a2:37:0c:c1:71:c8:06:b8:e2:b8:c0:a4:6b:
b8:98:c8:44:3b:ff:9c:59:14:b0:e3:38:c7:5d:19:47:4f:4a:
d7:b2:fa:56:9f:07:af:39:a9:6b:0b:d0:a3:f0:63:d2:69:39:
22:ed:93:e8:7f:f3:a8:44:4c:c1:99:fb:23:a6:a8:75:27:36:
e4:e7:18:21:da:9b:26:bb:99:dc:d2:be:ac:7a:e3:a1:de:a7:
ab:63:b3:dc:af:85:4a:d9:73:8b:f1:33:aa:10:38:eb:f2:41:
34:1b:97:7f:11:18:b5:6e:9a:fb:38:d3:ed:0e:16:5c:e2:01:
e4:95:de:5b:b7:7c:af:88:8f:0f:ba:0c:cf:8c:c8:c9:1b:9b:
14:fe:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:06 2026 by rpki-client