Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: NAVcBkH8OtYQYLh1lPR0S24RF738Venax8gP2q0uQoY=
Subject key identifier: 75:2A:0E:86:73:34:D5:F3:4C:D7:86:F1:62:39:FB:3F:E0:6B:7C:E6
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019D9999B0F641F13EFA78A0B576C4BA2449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1731
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: LlB2hDiWgUj9+wbPIUz+Plh3wFc1RewlxQXexsqXMR0=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b0:f6:41:f1:3e:fa:78:a0:b5:76:c4:ba:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=752a0e867334d5f34cd786f16239fb3fe06b7ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:a9:07:0f:2d:55:c6:7e:ec:14:be:a6:a9:
17:51:c8:c5:13:4b:34:a2:38:93:5b:bd:ac:29:b0:
73:5e:05:c7:a3:72:16:e5:f7:1b:b9:b4:0f:5f:42:
fe:3e:07:d0:30:00:dd:fb:47:2e:88:4d:6b:ee:7d:
6f:46:eb:ad:33:06:20:af:96:0d:1e:7b:43:62:ef:
c9:d7:d4:ec:7d:48:8d:5b:be:df:c6:f1:24:df:62:
41:a4:9a:74:ab:7b:24:28:ba:2c:52:0f:18:3c:5b:
62:00:d6:28:3f:3d:a6:ae:19:35:71:68:73:93:15:
a5:da:c4:cf:70:03:bf:67:d9:ca:65:1a:cb:b0:40:
09:00:6f:93:91:80:b6:ce:60:46:75:56:c1:63:0d:
97:d4:3c:79:a3:d3:03:34:d0:6a:b7:db:b5:36:bc:
0d:b0:8b:fa:29:36:26:95:b8:37:a6:e4:8c:8d:aa:
0e:8a:75:9e:7c:ac:45:5c:7a:d0:1e:3b:84:d4:79:
ad:8f:17:a1:38:e6:32:fd:fc:6c:ff:d1:af:ff:bd:
78:fb:ee:62:87:a1:15:f3:70:12:7c:39:63:a3:e3:
d5:1f:58:c3:3f:1b:dd:46:a1:09:54:8b:a2:c7:84:
b5:8e:d9:c5:47:5a:10:60:dd:bd:2c:1d:d7:bb:18:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:0E:86:73:34:D5:F3:4C:D7:86:F1:62:39:FB:3F:E0:6B:7C:E6
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:94:91:95:35:bc:94:1e:ba:02:37:2e:aa:50:b8:f9:38:
18:bb:3f:88:97:92:b7:c2:f5:6d:af:0b:0e:c6:b8:44:89:dd:
a0:3e:02:15:61:b1:cd:a3:42:d6:ae:fb:30:27:be:85:12:40:
79:0f:a7:bf:49:68:b6:35:a3:14:30:c9:d6:dc:a4:e6:7d:58:
fa:2c:cd:a0:31:d7:bf:6a:63:bb:7c:1e:42:8e:4b:fd:5a:ac:
dc:b7:8e:b8:5c:14:0a:d3:fa:22:5d:5f:ec:b9:a1:42:2e:c2:
89:20:a8:71:c3:98:e8:52:23:22:02:64:c1:19:f2:b6:23:1e:
9b:28:57:c2:e3:23:fc:c6:8b:7b:9b:1a:26:41:dd:67:af:f0:
6b:8c:04:9d:97:fe:b7:34:54:75:c5:0d:d5:05:a5:4b:2c:9f:
34:36:52:f3:e4:88:f2:3e:7b:2a:37:4c:d5:69:a6:4b:ce:5e:
c3:e1:41:57:d2:49:78:16:d8:0b:40:94:30:1f:c5:cc:3f:78:
d6:f8:33:47:d2:41:c0:be:de:81:10:d0:ad:34:81:13:b1:3b:
d0:87:4a:4a:0d:96:5b:85:3c:33:07:08:35:31:6c:1b:2c:ef:
12:40:ba:69:63:b4:b4:8e:3e:a4:21:b3:25:9d:df:8b:91:7d:
56:29:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:10 2026 by rpki-client