Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: JLz4cek9fz56BIFh/KTfe6zphuivJng7S9fEdb8/LJ8=
Subject key identifier: 27:36:12:98:8C:AC:88:47:8C:E9:DF:60:6E:9A:4E:D6:7F:6D:84:5D
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019DA59D427D39A6B51D22746D3670354F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0D67
Signing time: Sun 19 Apr 2026 12:00:39 +0000
Manifest this update: Sun 19 Apr 2026 12:00:39 +0000
Manifest next update: Mon 20 Apr 2026 12:00:39 +0000
Files and hashes: 1: 1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa (hash: RiIz/j+OmLa7FEdZbMFlKrhGfrujyA65C/HnMjy7A3s=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: xnQ+LTE2DKMszBysVf5CCA6K6jz/Pkl+0fijuQ4Hm8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:42:7d:39:a6:b5:1d:22:74:6d:36:70:35:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Apr 19 12:00:39 2026 GMT
Not After : Apr 20 12:00:39 2026 GMT
Subject: CN=273612988cac88478ce9df606e9a4ed67f6d845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:38:c9:df:b8:be:e7:3d:8a:b7:d1:3e:07:
82:08:12:ec:d2:b4:5c:f9:63:bb:e9:9c:1d:32:ee:
ce:05:ab:fb:73:7d:fe:36:72:bc:a3:02:9b:7d:30:
32:66:76:ef:d7:0b:1f:4a:db:ae:a9:89:ef:56:75:
e1:fb:12:f3:73:bd:61:ff:73:a9:9d:be:4d:09:04:
c5:de:84:11:ef:3b:48:1c:9b:22:f9:8c:55:0a:76:
ee:34:65:68:00:0b:7d:92:c8:c0:00:0b:fb:97:a8:
7a:d1:f3:ea:18:9a:c6:18:04:8b:fb:3f:30:b5:1f:
bb:cc:28:1f:08:14:01:81:44:1e:16:65:b8:06:27:
b2:40:ac:12:71:8a:b5:08:61:3e:d2:5f:66:3b:2d:
6a:4b:d2:9a:fa:2f:dc:51:5a:db:6a:85:93:22:91:
97:6c:71:ac:da:9d:b2:04:f3:e8:f9:f1:22:f3:ac:
46:af:a9:63:74:42:65:85:e2:bf:19:21:74:6c:bc:
0a:9a:01:d0:2c:7a:ec:2e:d2:45:18:40:67:8e:63:
17:d0:64:b0:c7:cd:6e:3d:3d:ca:ea:26:32:31:72:
25:ba:4a:94:c7:e6:8b:22:79:29:6a:4a:08:1e:74:
f7:e5:b2:9d:6a:f6:ef:90:79:12:61:92:61:ee:a5:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:36:12:98:8C:AC:88:47:8C:E9:DF:60:6E:9A:4E:D6:7F:6D:84:5D
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:af:b4:4f:7b:0b:15:49:95:03:dc:12:2c:73:a3:3c:78:f5:
79:26:83:38:f5:ae:82:92:c2:df:c3:50:10:f4:fd:f0:e1:c9:
48:87:f3:e7:08:ce:98:bd:55:2b:6e:26:8b:35:4a:04:92:54:
0b:56:0e:94:37:0d:42:6f:a6:42:1e:29:28:e0:2a:99:5d:99:
eb:ff:1b:59:62:e9:48:ed:03:bf:3e:8e:30:08:ff:ac:a7:3f:
08:51:ce:7f:0f:c1:89:13:59:cc:2f:50:fc:a3:27:af:91:9f:
a8:e0:36:9f:74:48:b6:33:dc:05:cc:bf:5f:83:54:be:11:90:
6f:4a:16:13:5f:13:4e:6f:75:52:69:72:d5:f9:c9:20:89:6d:
61:fd:de:8a:3d:65:3a:a6:29:d5:c8:65:bc:e7:0f:c4:51:fd:
4e:37:b4:6e:42:d1:17:7f:ce:17:8c:9e:b2:4c:db:1e:1e:7e:
f5:0a:1a:8c:02:c2:fc:16:92:7d:46:64:97:c6:3f:6b:d5:79:
a6:3d:7d:2d:b6:1f:08:98:4e:9e:96:43:03:fb:97:62:09:a4:
52:0c:fe:3c:ad:7c:3d:40:6a:85:fe:9a:cf:47:55:8f:d2:e6:
83:45:05:e9:c3:17:d9:89:61:8e:d2:b7:f2:40:ae:f3:b3:37:
1a:b2:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:49 2026 by rpki-client