Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: u7YPQAhlMjQfxjFlwT/ZmU6ZYgB+kIhutxmnCEzj49E=
Subject key identifier: F2:C3:35:F9:28:35:5A:23:27:B3:6C:88:DD:6B:6D:9C:21:7B:10:C9
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019D98188E993C6227CD50E76F45C5A61128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0BF9
Signing time: Thu 16 Apr 2026 21:00:39 +0000
Manifest this update: Thu 16 Apr 2026 21:00:39 +0000
Manifest next update: Fri 17 Apr 2026 21:00:39 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: NHgCdphVNIGRh8QsoJCFA8X5iWrmOKP0NgCwGnYJ2xc=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8e:99:3c:62:27:cd:50:e7:6f:45:c5:a6:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Apr 16 21:00:39 2026 GMT
Not After : Apr 17 21:00:39 2026 GMT
Subject: CN=f2c335f928355a2327b36c88dd6b6d9c217b10c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:2d:12:d7:cc:38:bf:3f:20:d5:a1:64:3f:
8e:2a:ff:90:0e:79:b4:13:5b:63:27:a0:17:8e:26:
8d:09:57:e6:ea:b8:3c:6c:1c:a3:ff:47:9b:78:39:
6b:a3:2f:f7:34:e4:00:7e:4e:09:1e:17:f7:a3:f8:
5a:b2:94:e9:9c:76:6f:e4:b1:8d:db:e9:db:da:53:
18:f6:8c:4d:9b:06:9f:97:fc:bb:9d:d9:f1:85:5a:
ad:d7:2c:33:47:4d:7b:1e:40:95:69:19:a5:6d:78:
d9:73:5d:0e:09:65:72:07:20:02:7e:47:10:d6:07:
6d:c4:ae:63:e6:08:97:1a:43:6f:29:64:00:98:db:
09:f7:12:0e:53:ea:11:f5:db:70:b8:e7:8d:28:e1:
eb:b7:ea:c2:ae:92:67:24:3f:3e:a7:4b:24:07:d1:
b9:35:0a:e9:0b:1a:15:32:60:14:05:75:88:5f:91:
1a:48:85:f1:b5:4c:5e:07:3c:15:0e:26:44:a2:aa:
96:76:b8:b1:92:80:59:e1:17:4a:97:5d:b8:43:da:
91:70:87:c6:d8:2c:6a:07:76:4d:3e:2d:66:03:9c:
2f:fd:6a:f0:8a:e3:4b:98:d3:a8:b3:7a:dd:ae:b2:
d8:7c:09:e6:df:36:04:3b:90:63:d5:5a:c8:6c:31:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:35:F9:28:35:5A:23:27:B3:6C:88:DD:6B:6D:9C:21:7B:10:C9
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:7f:ae:48:4f:5f:c0:77:96:ca:8d:a0:25:c3:36:8f:94:
6d:7f:46:33:f8:8a:ed:54:eb:82:f2:8c:27:c6:65:7e:1d:69:
1f:fd:f2:49:74:db:42:37:bd:f0:2d:7d:08:4c:e5:b6:29:b5:
10:55:f0:7b:81:54:ce:81:96:f5:a8:a1:f0:f9:c3:67:2c:5f:
75:8a:f9:ed:8e:9a:9b:ef:bb:10:01:78:72:a5:d7:61:1e:4f:
63:38:18:7e:d0:48:ee:18:54:e2:52:93:88:58:9e:db:0a:dc:
85:0c:6a:ef:2a:68:22:d3:5e:1c:a0:c2:8c:3f:5d:2c:bc:74:
19:80:c9:83:f8:ca:b6:9f:d2:aa:e2:c0:21:90:ac:99:71:a1:
de:d6:a5:57:b8:ed:41:a0:1d:d4:81:2c:6b:ef:25:bf:ba:eb:
35:89:48:6b:3e:39:db:85:12:85:e1:7f:6c:85:8b:25:0e:c3:
09:9f:0b:bf:bc:15:5c:da:be:6a:3b:76:cd:ce:d6:16:81:91:
27:7c:9e:a0:06:b0:75:6f:5f:ed:19:c6:0c:b2:7e:c0:16:95:
8f:5d:45:c1:10:2c:e6:33:dc:78:a9:5c:3b:11:17:d8:e9:42:
d6:e9:79:3d:58:df:3b:4e:d6:2c:7a:93:be:4d:c6:6d:f2:f0:
81:20:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:28 2026 by rpki-client