Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: YgU99APzON0hifz4WUFD1htWU+qeWwoWqed0V2yEgpg=
Subject key identifier: BD:67:A4:4D:C7:80:C4:3D:6F:D0:4E:73:73:65:C9:AB:D1:A6:CC:FB
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 019D9962A2B90E7B45B0A5E5449098FBE1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: b3JxtrhKDsDTqBI6cQvHONYRjVU.roa (hash: C950hko8WTv3REmoomJ1yY7S0AF8GUGo8sOTvPlJ2Dg=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: 0OwxcIQI5wwepJtKrpW2joNSPNozA7ws0Hpf6lkVSL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a2:b9:0e:7b:45:b0:a5:e5:44:90:98:fb:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=bd67a44dc780c43d6fd04e737365c9abd1a6ccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:96:c6:32:59:18:a8:c9:9c:f6:1b:60:73:
08:76:7b:4e:29:e1:0e:50:05:84:66:91:ca:f0:55:
d0:7a:30:82:19:2b:7b:8c:9e:c4:2e:c8:63:bd:6f:
02:f3:62:26:de:77:d1:11:e2:7b:d2:7c:68:a6:32:
16:1b:29:f2:b2:a7:4d:d9:c3:a0:e7:cc:4a:47:ad:
2c:23:b3:7c:79:89:5f:23:5b:22:d1:d2:c5:f7:3d:
4f:b8:46:ba:f5:e3:ca:c2:54:c3:61:06:38:fa:bd:
18:96:e7:a5:5f:75:09:85:06:f2:c6:d6:26:14:58:
9c:75:53:28:d2:a6:a1:69:1f:da:0e:b0:c6:ec:eb:
75:54:ee:76:c3:1a:17:8e:cf:1b:2a:63:a8:6e:62:
65:57:4d:61:53:ec:d8:32:35:bd:1c:ea:67:e6:34:
21:36:9f:a0:4e:21:00:a6:52:9f:20:d2:22:f0:73:
50:c3:dc:92:b9:a7:db:60:5e:8f:69:bf:4e:d9:4d:
12:d0:2f:f5:3c:a6:dd:83:7d:71:7d:be:5c:cc:53:
61:0b:e9:e4:c4:6e:ab:90:fd:42:8f:44:7a:2e:df:
73:24:06:98:a0:9e:34:f9:33:3f:59:b8:23:6f:f7:
db:28:4d:c2:de:b6:d9:7a:5d:88:92:0f:fc:f2:6d:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:A4:4D:C7:80:C4:3D:6F:D0:4E:73:73:65:C9:AB:D1:A6:CC:FB
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5e:57:ce:81:bd:84:f2:72:61:de:c2:0a:7a:f7:5e:22:c8:
ab:6b:72:5b:e9:65:6f:62:f0:4c:6e:0f:6a:c7:a6:5c:59:9b:
62:46:bc:c9:d7:80:aa:7b:5c:15:d6:ee:ea:b6:81:28:50:fb:
86:1c:15:91:fb:d5:66:d8:58:ae:93:10:00:31:81:28:d6:cd:
a8:8e:a4:9a:5d:8b:cd:5c:ad:9a:e0:e3:03:09:ed:08:03:8f:
2b:9f:2c:dc:87:01:8e:70:4c:15:13:f4:5c:18:02:ab:99:c6:
35:df:7b:43:2f:2a:9d:49:0c:ed:5f:1c:ee:95:b4:d4:23:72:
87:3a:62:82:fb:06:f3:ef:b3:92:74:28:bc:92:32:a7:bc:f0:
4c:2a:26:6b:77:4e:73:c3:f3:5e:53:44:3c:f8:8d:4c:f6:76:
f7:87:d1:38:09:c4:cd:3e:c0:db:c2:ca:76:c8:54:30:8b:a2:
2b:89:38:89:7a:29:a5:f4:5e:91:27:68:ff:5b:13:ad:34:f6:
43:35:62:d3:13:52:cd:ab:bf:a5:08:70:ac:c2:b4:42:95:c8:
44:31:27:b0:0f:be:eb:12:9d:e2:16:75:97:95:09:45:5b:fa:
4c:47:cb:eb:23:c0:fe:d3:de:8f:37:2e:27:23:07:bf:fa:23:
44:ba:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:05 2026 by rpki-client