Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: 1mT75brF46aW6706DYOMV1rj9nHVpFaBgem0VIT+Wnk=
Subject key identifier: 64:7F:80:EC:4D:5F:57:01:78:42:3B:AC:F9:44:A8:09:39:67:79:C3
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019D97AB23ACA28FF91412FE4B842233F9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 19:01:08 +0000
Manifest this update: Thu 16 Apr 2026 19:01:08 +0000
Manifest next update: Fri 17 Apr 2026 19:01:08 +0000
Files and hashes: 1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: +rYHWCEvOKPcTzquKl3blHPjh8z3K9uXNfLdInKJ0qg=)
3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:23:ac:a2:8f:f9:14:12:fe:4b:84:22:33:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Apr 16 19:01:08 2026 GMT
Not After : Apr 17 19:01:08 2026 GMT
Subject: CN=647f80ec4d5f570178423bacf944a809396779c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:f7:56:49:e1:a5:bb:64:5e:ae:58:2f:25:
2f:94:28:99:3b:87:21:77:6e:5f:18:55:5b:45:c3:
22:ee:8d:91:01:e5:ad:4b:45:7d:67:2a:a2:99:d6:
50:e9:dd:e2:54:c6:41:e8:91:92:c8:46:bd:0c:ec:
1c:aa:5c:31:f6:03:a6:d9:84:8c:21:da:60:87:4a:
99:64:84:da:b7:fc:04:9c:02:56:89:b2:f9:bc:42:
0a:ec:6f:af:87:96:d6:8b:2e:51:8a:5b:1e:43:d6:
98:09:03:02:c7:ee:f8:2e:1c:95:5f:28:ef:0d:c3:
35:65:6f:a6:60:43:9b:8a:c9:c7:62:5a:10:01:78:
81:d8:59:24:68:ff:13:36:f2:80:a7:dd:89:f5:c7:
c3:4b:29:8b:5c:4d:f8:eb:2b:f6:04:65:71:3e:78:
cb:0c:34:b8:93:0c:e4:97:84:98:c5:26:fc:56:ef:
0f:05:ab:cc:f4:1f:ae:f5:f5:45:2a:a3:dd:81:d1:
d1:fe:14:07:a6:66:e1:60:6c:da:e1:0e:87:0b:23:
de:ed:2c:13:17:84:34:a0:4b:de:da:ca:b3:9f:7e:
c3:1e:6c:e8:26:b4:00:70:6f:43:e6:4d:f2:c3:4e:
c8:d8:87:28:60:3b:67:35:ff:51:68:8b:af:01:c7:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:80:EC:4D:5F:57:01:78:42:3B:AC:F9:44:A8:09:39:67:79:C3
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:37:c1:88:74:e7:6a:83:49:55:33:12:7d:75:5c:05:93:73:
d2:fb:2a:6b:64:f3:1a:e9:62:82:11:77:3c:a2:1e:07:2d:a5:
d7:cd:ef:5d:bd:3d:bc:e8:e3:73:97:0f:3d:35:eb:99:4b:e5:
16:76:aa:80:f1:aa:f7:5c:da:ea:84:57:a2:4d:78:db:7c:45:
a8:41:95:a3:b7:83:c0:d5:bf:ff:56:46:22:a8:a2:f8:80:75:
54:27:4b:ce:57:5f:fd:f2:c9:d3:ca:64:55:b8:6c:97:8d:e7:
33:75:65:c5:41:6e:a5:ba:c2:fe:48:16:c0:cc:ee:11:cd:5c:
89:8f:78:e2:ea:80:59:f8:48:70:74:97:20:e0:61:f0:f9:06:
bf:9c:47:ba:16:ad:42:85:25:11:1d:80:76:d8:ee:7b:58:e3:
9d:d6:20:26:71:19:a2:b7:e4:42:6c:3c:8c:11:bb:3c:b3:f7:
4b:7c:ab:f6:3b:3a:60:fa:3c:22:f4:55:b2:1c:61:ed:42:cc:
3c:fd:bc:c9:c6:c5:e4:af:e6:49:7e:4e:0d:4b:f0:aa:2c:87:
6e:58:12:72:7d:06:8c:36:2e:61:d4:24:42:84:40:f4:7c:cc:
58:9a:7a:1a:92:8e:da:82:7a:d0:3d:fd:45:50:73:4c:f7:15:
cf:1b:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:30:56 2026 by rpki-client