Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: Gk9X0QbrBlJKGCnUMZ54x88fJvjMd6PptjJdw6c5TO4=
Subject key identifier: 60:64:35:BC:67:5A:97:0A:2F:98:38:53:E8:DD:F7:76:5A:78:B0:A1
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019D98BDD9EDEA93A1B4E137C7CE8DEEA6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1081
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: XP3TcwOGAzIgHWunB9XKYAQpDb+7uaqwMmrMgU9YmjE=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d9:ed:ea:93:a1:b4:e1:37:c7:ce:8d:ee:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=606435bc675a970a2f983853e8ddf7765a78b0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:1e:c6:35:7f:9b:98:26:fa:01:61:d1:f8:
30:05:48:62:73:ba:bc:bb:80:2a:00:38:d9:71:93:
a5:4c:c3:5e:f7:61:7c:9c:43:af:75:ba:80:74:8f:
50:63:c3:ab:ae:33:c9:1a:30:46:a0:83:c9:c4:eb:
44:d6:e6:b6:f7:a9:5a:95:1e:6a:f9:6c:28:67:97:
8d:35:57:a3:f1:54:ac:ad:34:8a:13:dc:99:69:83:
92:ba:46:ca:e9:25:8c:c4:e4:23:dd:77:1e:8f:ce:
73:ce:ac:0d:b2:81:ab:ee:11:30:39:79:21:87:d0:
5e:74:12:c6:4c:b5:04:1e:2e:13:e0:7a:40:25:db:
18:c7:cd:86:b2:4b:04:4e:8f:08:9a:3a:ed:c2:36:
26:ca:6d:6e:61:eb:4e:e8:e6:c9:3e:98:ac:02:c9:
f2:65:d5:d2:9e:49:9c:a1:7e:4e:5f:81:df:50:5c:
4d:63:ac:1a:57:64:43:ed:72:e0:05:9d:ba:b5:94:
45:52:2a:5e:bc:41:c5:9a:70:cc:b0:43:3e:81:3d:
80:6f:74:b0:cd:9d:5d:9d:42:fa:ed:42:0d:93:03:
c6:4a:4a:13:7c:10:bf:54:eb:dd:1a:a3:d8:b7:02:
b3:35:1b:6b:b8:6a:01:78:af:48:ff:d4:5b:a2:fc:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:35:BC:67:5A:97:0A:2F:98:38:53:E8:DD:F7:76:5A:78:B0:A1
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:de:95:dd:6d:7e:4d:ca:15:d9:3b:67:ff:ca:46:b8:44:7a:
6d:d2:ab:cf:dc:87:c2:98:19:fa:11:7e:58:37:ea:a7:cb:2b:
e7:94:82:eb:9a:1e:c6:73:8a:6c:be:8d:2c:08:f3:a9:e3:ad:
be:a5:60:a0:8d:ac:0a:77:8d:8d:b0:53:5c:c0:2c:90:de:1c:
c2:20:a1:42:95:ea:cb:18:d6:78:e1:9a:0e:4b:44:4d:7b:6d:
b0:2b:93:8b:c5:84:ef:fb:ac:5d:fb:ee:c1:85:ba:64:79:1d:
4b:81:04:ee:c4:df:02:c8:69:32:09:05:a8:42:2a:a4:83:b7:
11:41:d4:72:d2:21:ec:b9:82:9d:34:bc:a3:31:a9:d1:fc:20:
c7:b0:b3:25:09:5b:a0:e9:04:09:0b:52:66:b4:fd:2b:dc:64:
e4:56:3b:aa:77:88:f4:44:88:13:41:1f:7b:b5:bb:6a:59:32:
74:15:f1:fe:7a:31:d3:38:28:66:2c:71:66:a1:11:c9:f9:0f:
0a:92:07:e8:36:40:db:e3:b1:61:c3:ee:de:4c:22:0c:4b:7c:
25:b2:52:95:f9:d9:02:f0:43:3a:0a:48:25:94:7b:76:43:f0:
68:10:67:a0:b1:2d:e2:e6:db:db:01:eb:07:9e:3d:6e:15:54:
1b:84:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:49 2026 by rpki-client