Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: DXvQZYEwK+V30+3sNRBZDQ9ebp9Fbtgq7z0x1O0o+ag=
Subject key identifier: A1:57:21:34:2B:2D:1B:47:FD:8E:56:FF:55:20:39:CE:6D:2B:95:71
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 019D9A751F46F0F6A0B1A8B8840726BBB347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa (hash: n3TtZKW8jTF8quOeFDtPkhw+ZhgsE56xwHQyTvZ/ifg=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: /szNgpUGuqt7xeBIUegYdVwFDGtrKAslTrr9TAec5EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1f:46:f0:f6:a0:b1:a8:b8:84:07:26:bb:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=a15721342b2d1b47fd8e56ff552039ce6d2b9571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:89:b2:6e:08:55:57:e5:a9:aa:e5:51:6e:
40:d9:86:c5:f0:41:22:d7:5a:fa:94:17:12:70:ac:
58:57:73:6f:e7:ed:e1:de:ee:e3:a4:91:98:95:99:
81:ec:c2:d6:2c:c4:77:57:bd:45:4c:a9:f3:8a:ef:
6f:50:ce:1c:f6:d8:20:27:25:eb:f2:7f:b2:88:54:
5c:31:4b:cc:eb:43:ad:5d:85:ed:66:24:a3:04:3d:
63:65:f8:4c:41:33:17:bd:bc:f4:18:a2:7d:1e:9a:
e2:14:a1:2b:46:2d:d1:a2:94:c3:7a:94:f1:8c:8f:
f3:cb:bb:4b:9c:70:ee:5a:54:4d:79:cf:d2:55:79:
0d:33:0c:2f:21:ad:98:f2:33:da:4d:ac:fc:74:4d:
1f:76:c3:e5:37:e5:92:8a:5f:69:48:a5:0c:ce:5d:
60:89:0e:14:72:79:1f:53:29:90:43:00:b3:b5:13:
3c:1d:ba:96:1f:9a:94:bc:45:88:f6:10:29:3b:91:
12:77:94:b2:46:45:61:0a:c6:eb:98:b9:a0:e7:96:
2b:0e:9f:6b:40:ca:43:17:93:cd:cd:d5:99:f4:fc:
66:d1:e0:5f:23:cb:ac:33:ff:40:d3:f7:ff:3c:bd:
23:0a:a9:9d:11:c9:4d:93:1b:de:bf:b7:7a:c9:b0:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:57:21:34:2B:2D:1B:47:FD:8E:56:FF:55:20:39:CE:6D:2B:95:71
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d9:94:d4:12:29:11:7e:c6:83:99:7a:5a:81:54:62:63:2e:
eb:52:3b:7e:95:22:9b:62:11:f5:68:ab:5c:26:af:81:e3:2f:
27:b8:42:8a:ce:11:4f:e8:b4:9e:1e:cb:35:ee:b2:45:89:77:
d8:3f:eb:f0:70:07:a6:6e:29:13:fd:9d:c9:ec:fc:67:c5:02:
47:55:92:9e:9c:1a:b3:81:5c:5d:08:24:07:52:25:7e:81:44:
7c:0c:75:24:cf:8a:9d:f7:b0:86:b9:96:fb:f8:ec:0a:a9:73:
df:36:93:ed:17:77:cd:5c:cf:bd:3f:54:6a:bb:32:fc:b1:1f:
b7:be:97:41:57:ea:12:1c:d6:ee:d4:4c:c4:32:93:f7:b1:a6:
62:6c:c0:8b:57:d6:82:19:3e:57:41:ce:8c:16:2e:f5:bc:33:
ba:de:da:8e:ef:b9:22:a9:a5:5e:83:7f:e7:d6:81:87:53:27:
cf:ca:a7:76:f4:ce:a3:d9:0e:5d:7f:02:18:98:b0:8f:d7:70:
be:f0:b5:c0:e1:d9:0d:eb:65:b5:89:ca:c0:8f:27:8f:68:0f:
37:32:9b:ad:81:3c:fa:15:aa:58:dd:ae:0e:b5:e4:fa:75:4e:
cb:0b:05:77:9f:3a:51:b2:e1:64:b6:89:73:b0:5f:b9:1a:d3:
0e:3f:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:06 2026 by rpki-client