Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: EAwNB1ydFx8ngUW/QMU7hWGoJkf/yT84as4DMjRVRPc=
Subject key identifier: 0D:9C:C5:B0:9B:91:D7:65:81:1A:C6:D4:04:24:F4:F2:9A:23:F3:70
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019D9962E54BE59D72DD3A20A15DB9FAA79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0F7E
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: mAIljhT8cHRg5UUGA6iAS7JW6/8V6wb7zfrzjIYbcCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e5:4b:e5:9d:72:dd:3a:20:a1:5d:b9:fa:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=0d9cc5b09b91d765811ac6d40424f4f29a23f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:14:8c:36:27:f8:3f:9b:e6:76:68:c4:2d:
57:97:da:d1:60:c4:c4:cb:a9:e5:41:44:9e:62:90:
27:9c:06:11:e0:97:47:40:5f:01:5b:48:84:68:e7:
d1:2c:76:e3:1c:7b:46:3b:d1:a9:7e:3d:9b:41:ed:
04:c5:0d:03:41:8c:eb:8d:96:8d:4f:f3:57:5f:46:
08:7e:6f:01:3f:19:c9:8d:bd:84:fa:60:07:3c:ee:
3c:46:6a:db:dc:b2:29:6b:06:48:5f:a5:3e:69:59:
1d:79:39:fc:56:51:4b:35:d3:69:2b:af:e8:1f:b2:
e2:9a:83:a8:96:33:6f:e0:fb:14:d6:19:65:92:cd:
ff:f1:92:8b:f4:3b:d2:aa:da:5e:7c:47:c7:02:ea:
63:79:d1:df:2c:c9:e4:8c:d9:78:8e:ca:4c:3c:f9:
98:10:ce:d8:c9:0a:d2:e2:8e:07:b2:ab:fb:00:7d:
fc:42:be:49:18:98:32:5f:98:01:17:b9:f2:3c:8a:
ee:47:7c:56:75:05:9f:2a:da:ad:96:f7:a7:32:aa:
23:dc:6a:1b:2d:52:b2:07:3b:e0:1f:1b:e0:9d:a8:
23:f1:69:db:58:bc:0c:f9:3c:14:88:24:0f:ee:99:
f2:1a:0c:d3:50:1a:f8:36:21:b6:e3:04:da:54:4c:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:C5:B0:9B:91:D7:65:81:1A:C6:D4:04:24:F4:F2:9A:23:F3:70
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:02:7f:b8:ef:37:31:71:68:19:28:0d:bc:ad:d3:f1:fb:a3:
fb:f9:de:95:79:f8:7b:41:61:0c:c8:dd:5b:18:10:91:1f:35:
a9:cd:4c:53:19:04:8a:18:b8:de:e6:eb:26:c3:b5:40:98:9a:
a6:3f:6c:21:e1:4a:4b:75:d4:a7:86:a3:f7:2a:0d:01:b5:86:
b9:e3:cd:09:ff:85:8a:bc:76:42:e2:87:12:4c:6e:14:4d:26:
d2:72:c6:e5:de:5f:ea:4a:42:c4:13:5a:3e:43:d9:3c:af:04:
39:9f:e5:87:08:2a:63:6a:7b:8c:c6:40:25:eb:ea:d2:1b:fc:
81:43:3d:99:fd:04:d0:39:44:35:5c:c2:e4:ff:58:4b:9b:bc:
c8:17:e7:4b:7d:e7:bb:82:89:e0:3a:0b:81:69:26:f5:46:18:
2a:c5:50:ac:42:7b:d1:d1:a4:df:99:91:c9:b5:cb:84:13:9e:
a8:c0:7b:55:c9:3d:12:5b:9c:9a:1d:7e:21:91:f7:80:89:31:
0c:f7:b4:14:0b:2a:e3:a2:5d:81:96:4e:da:dc:cf:ba:b1:13:
12:1f:b9:59:d9:20:fe:94:a4:2f:91:c5:b8:5b:3b:0b:54:ee:
99:b6:86:9b:9c:b0:aa:62:1e:86:87:ba:6b:94:28:64:f2:58:
c4:8b:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:41 2026 by rpki-client