Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: Mz4z9LAlXeo4a9CS1BZdgfvuYykhtFaN2xLrLFFSIJc=
Subject key identifier: F9:93:3E:6E:AC:A7:5E:23:B8:A8:59:8B:97:6C:E7:94:9F:90:37:0A
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019D98BDD753286AA7FC10632913CB802AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:01:11 +0000
Manifest this update: Fri 17 Apr 2026 00:01:11 +0000
Manifest next update: Sat 18 Apr 2026 00:01:11 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: iHJrX3CCtFoBTHJLlGq3oQXH5iEschcfUIsjtVpgD1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d7:53:28:6a:a7:fc:10:63:29:13:cb:80:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Apr 17 00:01:11 2026 GMT
Not After : Apr 18 00:01:11 2026 GMT
Subject: CN=f9933e6eaca75e23b8a8598b976ce7949f90370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:df:33:f6:65:ca:f6:5f:04:14:e7:96:97:
b9:32:28:98:ee:64:7f:5e:41:31:f2:3b:cd:38:db:
2b:34:25:d6:47:68:ed:1d:a1:3a:c8:7b:c0:13:e4:
61:3e:47:e4:86:0c:01:38:7e:f1:2f:1a:7a:3a:fa:
5e:e7:a0:e2:d3:bd:af:46:f6:77:6c:0b:93:ce:f4:
0f:a6:42:56:9c:eb:4f:fc:81:4f:dd:21:f1:6f:c7:
74:df:18:a2:e1:d3:55:fc:53:ef:f9:eb:b2:7b:5d:
65:ce:71:b6:a2:46:ac:68:cc:c1:46:fd:cf:48:9f:
8d:b7:e8:06:88:43:60:3c:26:67:ac:77:98:61:9c:
9e:2b:e4:7e:79:a3:66:28:96:1a:5d:d9:82:c7:40:
08:b6:5f:68:42:1b:ad:db:79:b1:83:a0:4f:d6:25:
40:ed:fc:59:fd:da:b3:e9:12:79:aa:e4:6e:65:a7:
54:7f:7e:4d:2a:f4:97:c5:c4:e5:be:30:4d:a8:c2:
36:a6:10:97:c4:e6:70:4f:6a:89:1c:6d:a1:75:55:
6a:3d:c8:3e:f0:cd:7c:da:c2:f3:d8:51:cd:11:96:
49:5d:f8:60:dc:b1:18:fd:1c:0d:5c:4b:4c:74:05:
9c:5b:3c:54:91:f9:ff:6e:1b:d1:cd:00:15:0c:f7:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:3E:6E:AC:A7:5E:23:B8:A8:59:8B:97:6C:E7:94:9F:90:37:0A
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:24:3e:c5:2a:99:22:29:12:c3:b7:80:66:4a:da:e2:e1:
3b:30:3c:a1:2d:2b:b9:e0:20:49:63:0e:5e:ab:a4:14:8b:87:
3d:4c:da:a9:2e:38:a7:91:c1:1a:50:7c:5d:54:5a:2d:75:c1:
b7:f5:b9:a9:48:14:57:b8:e5:76:b8:cf:b5:c2:9a:54:76:49:
77:f8:f6:e1:a8:a5:e4:7e:82:d9:37:08:54:a8:28:34:54:39:
a7:04:9b:98:21:5c:ed:71:f6:17:77:89:fb:79:60:4a:f4:ae:
79:f1:0b:e8:61:84:05:df:41:3c:c6:c2:d5:0a:16:68:30:44:
ec:7b:4d:34:69:cc:93:3c:8e:27:a5:2c:84:ce:8e:36:71:4a:
9a:88:5e:ef:ae:b3:b0:0c:74:8f:cd:3a:38:ac:32:b2:84:8a:
a2:b6:ee:d1:57:db:e6:bd:29:d3:a5:5a:b4:ba:80:48:c7:7d:
03:0b:fb:6e:51:57:00:a4:71:84:b5:c5:e7:da:86:a7:86:3b:
de:64:0a:f1:a7:76:0e:04:8d:cd:4c:37:e7:82:e4:c8:4e:c9:
88:c6:be:13:1e:c7:2c:72:91:2c:db:cb:e0:75:da:05:7b:6e:
9c:e9:7c:29:7d:87:48:8d:dd:55:44:d1:16:57:3a:ef:e1:86:
92:2d:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:28 2026 by rpki-client