Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: ebBuFE1B4DX5SCpoB3gZgBKtYdjovwKoW59aV9BkgXs=
Subject key identifier: 76:4D:C4:E6:F0:34:F7:E2:C2:36:0A:86:83:BA:CF:D9:00:A6:0B:CF
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019D9B19D0726F017D444F4D319CAABC099A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 058E
Signing time: Fri 17 Apr 2026 11:00:53 +0000
Manifest this update: Fri 17 Apr 2026 11:00:53 +0000
Manifest next update: Sat 18 Apr 2026 11:00:53 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: l0I0lwkSgdjuEFq2IDz6WM1cUJ8ZJFT73qUU4JhvTW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d0:72:6f:01:7d:44:4f:4d:31:9c:aa:bc:09:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Apr 17 11:00:53 2026 GMT
Not After : Apr 18 11:00:53 2026 GMT
Subject: CN=764dc4e6f034f7e2c2360a8683bacfd900a60bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:11:a8:09:40:9f:34:74:3c:8b:35:18:55:
7a:db:fd:68:60:11:d3:ea:16:37:99:c9:b0:fc:50:
55:cc:24:b5:7a:eb:00:b0:9c:d7:51:56:77:6a:9b:
fe:7a:d0:ab:5d:c9:ca:e0:1a:d1:4d:2d:93:8b:47:
40:77:ac:01:90:cd:8f:2b:72:95:4b:da:7e:ab:b8:
d0:b4:eb:e9:9b:a3:f1:58:8c:28:30:76:ea:5e:92:
27:08:74:25:f8:ab:25:26:6e:a3:28:41:e8:05:5d:
8a:fc:a3:c5:69:df:22:a3:fb:01:dc:8f:cd:5c:70:
c6:39:89:c7:d3:e7:2b:1f:76:ec:84:f8:1d:c0:20:
1b:92:17:a9:4f:e6:f8:cb:96:8a:59:90:98:f5:e0:
ad:9d:a8:41:dc:15:84:97:8d:69:03:f9:e9:5e:6a:
10:73:a6:13:71:96:dc:79:91:67:9f:12:48:0f:49:
43:f8:a8:8f:d3:72:98:83:c2:e7:b0:c7:7e:60:fb:
0f:38:72:b9:ba:10:7f:c7:60:f1:d5:80:dc:fe:d2:
fd:0f:96:d5:80:3a:6d:b9:4a:d8:cd:84:54:f0:58:
6e:10:c9:c1:b5:26:07:f3:c6:d8:1b:59:cb:96:64:
53:a2:fd:88:d7:f4:75:2c:66:d6:54:dd:e4:00:59:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4D:C4:E6:F0:34:F7:E2:C2:36:0A:86:83:BA:CF:D9:00:A6:0B:CF
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:ca:09:7d:a4:ed:8e:c0:0b:08:a0:c2:9b:85:da:15:6d:
08:d2:b8:12:3e:88:b2:dd:e4:6f:31:0d:1d:ae:85:ce:df:91:
bf:d3:ad:96:c1:70:5f:a1:19:49:3a:5a:c2:ed:a1:6c:96:c4:
f1:65:01:b1:c8:83:d6:fe:4e:b7:d7:02:2e:c2:d4:7f:2e:f3:
74:16:f6:80:01:d3:31:ae:87:83:2c:20:d4:d9:72:38:d9:d2:
0c:2a:73:dd:84:8d:2a:3b:96:00:45:e9:e9:47:a0:3a:c2:a1:
8b:58:dd:44:ad:b2:d4:6b:ad:c2:b1:02:18:f5:1f:94:86:80:
59:6b:a4:db:35:25:06:9d:3c:08:13:13:7e:20:a5:9c:9b:0c:
0a:be:2b:57:9e:6f:08:cb:d5:96:68:e2:16:4f:63:5c:fb:6a:
1f:de:c7:10:9a:d3:6c:46:ca:9f:97:0d:03:0e:1e:58:83:d2:
75:1f:6b:a5:c3:bf:1c:c3:08:a6:25:5d:da:eb:54:fd:0c:9a:
ec:da:f3:97:e5:88:37:12:0f:25:b7:4b:e0:74:65:c2:1f:9e:
e1:1a:f0:0a:9a:92:f7:7f:4a:06:50:ce:c6:a9:4d:eb:b1:d2:
21:81:b0:e8:e9:f9:f5:fa:e8:de:92:67:5a:a5:0b:f9:78:5c:
e9:7c:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:50 2026 by rpki-client