Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: jQtlYfD5yWksfitqWA5LwdV9w/6BnZNLlq9hZ/+yjDI=
Subject key identifier: C8:D8:9E:16:80:DA:DB:B6:4D:63:10:64:F6:26:E3:1E:98:24:B5:26
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019D99D0D9F5B543DEABF5546703583491F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: Hey+HLQ0suy0rOqPJnSbpYEG+lz2oXsYruYyREFES40=)
2: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (hash: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d9:f5:b5:43:de:ab:f5:54:67:03:58:34:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=c8d89e1680dadbb64d631064f626e31e9824b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:22:c2:23:cc:63:d9:6d:02:8c:f6:0d:58:
aa:e6:da:87:24:66:ef:f6:98:6a:eb:7b:75:a3:64:
eb:b8:15:2a:44:ca:81:28:78:51:2f:99:57:68:dd:
68:69:59:44:95:2d:f1:8a:8a:51:dc:23:a4:bd:72:
3e:8b:72:9e:45:7f:da:1e:4d:c8:35:5d:2e:22:d4:
29:26:4c:de:11:38:f9:bd:7f:28:d7:c1:70:ba:08:
00:b8:2a:f9:6c:5e:44:a1:18:43:ca:ac:3d:d6:02:
9b:78:a7:24:c7:8b:4c:8f:8e:2a:57:30:ee:de:85:
dc:1c:c0:5a:3a:8b:41:7c:80:90:46:44:cb:c1:8e:
58:26:fd:9c:69:29:89:6c:49:fa:9f:f2:c8:b3:3e:
a3:79:7a:58:f7:a1:7f:1a:dd:51:40:41:50:c3:71:
d6:84:5f:e6:de:da:d7:b4:f6:d4:2d:42:2f:09:2f:
0e:45:e3:07:31:b8:82:9a:3c:08:8b:47:35:b1:b9:
9f:1b:ed:58:88:15:1f:3f:45:66:00:a9:1b:44:41:
a3:14:9a:45:5c:fe:7d:8b:ba:f8:16:a3:9d:b7:53:
7c:e1:7e:a5:07:76:f6:21:62:91:1e:e3:47:89:ce:
a0:6e:52:d0:4a:64:a2:95:fe:a4:eb:e1:d2:8c:92:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:9E:16:80:DA:DB:B6:4D:63:10:64:F6:26:E3:1E:98:24:B5:26
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:c2:c4:1e:15:a2:68:cb:e1:ce:73:3b:3b:a6:9c:8f:82:
57:e5:f9:de:0a:17:5e:9f:0a:78:5b:ec:08:70:2f:b8:57:59:
f2:fb:f9:6e:ce:7b:d5:bb:fc:11:c9:8a:50:c2:a1:ef:09:38:
74:53:2f:44:4f:37:33:b2:f9:1c:6d:c2:69:3d:16:a4:eb:dd:
26:9d:51:f5:56:73:d8:87:e8:30:3b:0a:b1:0a:28:b6:a8:35:
53:a2:75:c3:cf:69:57:5a:6b:38:19:d4:ff:44:c3:42:29:e1:
c0:43:69:a6:1f:f5:fa:aa:75:36:26:5d:01:3e:e2:22:df:aa:
d5:81:d9:b7:81:1c:0c:5a:b7:b4:da:da:3e:0c:ea:df:23:f9:
77:20:fc:64:72:f7:3b:c6:b4:c8:63:b8:9e:fa:09:87:af:01:
1e:df:1b:79:61:c2:a9:ea:bb:94:54:bd:0d:fe:83:52:1a:4f:
73:29:a8:68:0c:60:39:bd:db:e5:55:e2:62:83:a1:46:51:5e:
08:11:31:b0:41:e4:b7:b3:79:0c:df:ff:a8:60:27:c9:e4:05:
75:f6:3c:01:de:b9:43:aa:be:2c:07:aa:da:08:b4:4b:6f:a2:
ed:59:f4:03:34:a5:2c:13:ff:81:ca:0f:65:9a:22:af:b2:92:
fd:e4:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:28 2026 by rpki-client