Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 7uyNb4MiwrClLYnFhkYRYbkFbSXCdx7jtVNoKxvoFGk=
Subject key identifier: B4:39:C0:BA:71:29:E8:30:A0:D5:30:3F:7B:99:5E:D4:AB:C0:89:05
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019D98F42A80F1393F6B43C855BD7A997217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 179A
Signing time: Fri 17 Apr 2026 01:00:31 +0000
Manifest this update: Fri 17 Apr 2026 01:00:31 +0000
Manifest next update: Sat 18 Apr 2026 01:00:31 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: J1RpAURzVJYQdGa0X/7gj3Fzr8W/z433zjjaMq0XFdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:2a:80:f1:39:3f:6b:43:c8:55:bd:7a:99:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Apr 17 01:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=b439c0ba7129e830a0d5303f7b995ed4abc08905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:b3:1b:65:10:74:e5:29:94:d5:2a:dc:7b:
0e:d0:4f:97:e1:8a:27:69:57:01:e0:22:8a:05:70:
70:79:31:b5:57:1f:e5:c1:43:79:cd:72:5f:a1:9e:
6b:e8:e9:8d:a6:b2:77:fe:c3:31:52:10:8d:51:e6:
f1:7e:f3:3f:ad:c0:af:31:18:3a:9e:2b:82:d5:3b:
eb:ef:49:17:35:2a:ad:03:62:92:e1:c9:57:fe:54:
41:98:da:ab:00:d4:38:d4:24:eb:29:20:8e:c1:59:
88:1d:cf:93:ed:63:12:63:de:6a:3e:81:ef:eb:19:
36:4e:49:ee:24:59:8a:28:4d:3a:3d:0a:11:ae:99:
7a:b8:59:56:ff:c9:ff:bd:ab:72:6a:85:3a:20:da:
4e:82:ae:03:17:4f:f0:e3:53:f1:9e:ed:66:03:55:
2d:4d:d2:48:22:07:25:93:74:6b:e2:ce:3c:d0:a6:
e3:11:04:b5:45:9d:7d:f2:11:78:c4:da:13:91:c3:
2b:7f:23:0d:a1:7b:5f:2f:d3:a5:26:b5:71:51:a6:
51:fc:db:bc:59:6d:24:c5:e3:ec:0a:a1:02:9a:cc:
45:00:9e:24:5e:ff:1b:90:e1:df:b3:e5:08:bc:02:
fc:68:4a:93:a9:82:9d:04:e1:b5:37:23:20:7c:e3:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:C0:BA:71:29:E8:30:A0:D5:30:3F:7B:99:5E:D4:AB:C0:89:05
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3b:dc:ec:6f:36:ee:5b:22:a0:73:77:11:03:56:2d:e9:ca:
a5:96:81:cb:6d:df:8f:f2:a4:e4:2d:94:3f:25:1a:51:21:0e:
73:23:d0:f7:ca:2a:8d:55:28:fe:d3:f9:36:08:42:ee:e0:8a:
92:aa:ba:0d:e7:53:4c:11:13:36:4e:b0:e3:a4:18:07:34:c8:
2e:7a:ae:1f:58:c7:f9:31:89:99:2f:9f:68:43:8a:82:30:84:
b4:ff:83:0c:84:94:b9:56:05:c1:9a:d5:01:c1:38:b1:51:18:
3d:24:59:36:8d:84:bb:6a:99:4c:2b:76:e2:00:e1:3d:48:0c:
0b:0a:95:2e:75:8c:3c:7e:6a:10:8c:ae:14:51:7d:25:df:4d:
d6:6a:55:4d:75:25:54:23:e7:ed:36:0b:9e:a5:a6:8c:8d:71:
00:5f:d4:46:54:b8:51:1f:87:dd:1d:0f:7f:7a:e8:36:c8:9b:
49:b9:c1:39:c6:90:36:6a:f1:12:7a:b0:0e:a6:10:e3:10:d4:
1b:72:fd:43:72:d5:11:87:5d:71:9d:a9:43:df:f1:00:ad:71:
f4:59:9e:d7:6c:ce:31:27:bb:e7:e9:c1:6d:9d:ea:7c:b7:b1:
27:e2:81:45:f8:08:d8:a8:0a:bd:45:31:53:ec:f8:01:e4:1e:
ee:9b:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:41 2026 by rpki-client