Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: 7KoCnNO0deIKY+xwYuaFsukv5SItudbFE7kOlAnIsXM=
Subject key identifier: AF:40:A8:C4:06:4C:04:61:50:15:95:A4:90:A3:40:D3:D5:1D:FC:F1
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019D98F416D9AE83A81BB4C7794115DE266C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0FEA
Signing time: Fri 17 Apr 2026 01:00:26 +0000
Manifest this update: Fri 17 Apr 2026 01:00:26 +0000
Manifest next update: Sat 18 Apr 2026 01:00:26 +0000
Files and hashes: 1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: 2rkn50sI+aG+rl28jBA/NSeV62sZPxd6neopydhw67Y=)
4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:16:d9:ae:83:a8:1b:b4:c7:79:41:15:de:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Apr 17 01:00:26 2026 GMT
Not After : Apr 18 01:00:26 2026 GMT
Subject: CN=af40a8c4064c0461501595a490a340d3d51dfcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:a0:fe:03:bd:40:9b:33:33:6d:92:fc:0d:
49:9f:8b:7c:2f:df:7e:d1:ea:e6:0a:12:cc:a0:8d:
74:39:ee:a2:fe:10:07:2b:2c:f9:a9:e1:2d:b2:bc:
c1:12:14:b1:39:6d:8f:02:3b:82:6d:55:f5:85:29:
be:75:57:4f:99:73:31:66:02:9c:4f:dc:5a:c6:3e:
35:de:93:11:d2:4d:35:29:c0:2d:fe:84:80:20:eb:
35:54:a9:9e:ae:1c:5a:90:c9:26:51:1c:19:db:3b:
5b:81:8c:f0:0b:90:22:13:95:f0:b2:e6:99:61:8b:
ab:b6:84:68:04:ff:02:68:3a:53:53:07:ab:c3:40:
78:8d:05:8d:4b:87:d5:80:45:46:92:16:7b:4d:f3:
c8:5c:0f:20:2f:48:e6:ae:ca:40:b2:97:8f:a6:4f:
9d:46:7f:d7:3a:37:82:f5:66:24:73:4a:01:8d:7d:
d3:e8:ca:62:32:a8:a2:2c:b3:4b:44:eb:2a:ff:5a:
be:d4:c6:0e:cb:55:4c:ca:1b:9f:83:8f:4d:79:9f:
c8:00:db:1e:ff:38:05:71:20:32:d1:7c:09:e0:c3:
ef:6c:85:a3:92:8c:da:23:11:7c:b7:5e:be:63:c6:
96:f2:47:31:df:5c:59:41:f1:d0:25:a7:29:bf:1c:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:A8:C4:06:4C:04:61:50:15:95:A4:90:A3:40:D3:D5:1D:FC:F1
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:9c:61:83:1f:91:87:a7:39:a0:08:95:ba:1f:b8:e6:7f:
8b:0f:71:b6:65:ee:46:0d:23:cd:0a:55:c4:ec:23:13:6c:6b:
5a:71:6d:e1:ec:4d:c9:6c:7d:fe:cf:81:34:c2:da:9b:d8:96:
ba:22:07:70:22:6b:28:8a:23:c4:3f:4b:cc:c6:95:19:66:a3:
9e:9b:c5:9d:f9:cc:0a:4a:2d:46:7f:a2:f6:7a:39:93:4b:14:
18:be:56:e7:4f:46:8e:48:a1:8b:35:d8:81:61:2b:39:a1:af:
9d:5f:e0:02:ae:8f:c5:e8:a6:e1:9c:07:f5:30:67:a4:46:33:
c8:e4:66:2d:0b:0c:e8:da:98:cb:1e:c9:1d:ad:30:d1:c9:fa:
6b:ca:24:c3:2b:0e:af:75:eb:e6:c9:6e:07:66:0b:61:61:84:
e1:c6:09:e0:2e:3f:f2:43:2d:f1:6d:e2:7e:af:80:61:cf:ca:
06:57:80:20:7d:7d:79:76:17:dc:dc:ca:a3:a0:5a:4a:ac:ac:
d1:3b:c0:a3:56:d1:ef:af:a1:c7:4c:f8:d9:58:28:e6:a2:ec:
12:d9:9f:13:0b:f5:e9:76:3f:93:89:2e:d2:a7:5e:c6:bd:06:
1d:5e:d9:0a:95:32:ef:12:8c:0a:9e:fd:b2:5f:40:b8:24:e7:
1b:af:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:46 2026 by rpki-client