Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: Fu72YNKxEKqroksSsdwqfQefEnTpKjlV1n+Pbvd/Utc=
Subject key identifier: 0E:E8:CD:9A:C5:82:C0:E8:01:BC:1E:9C:0E:AE:A1:52:95:56:68:56
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019D9A3EAD092BF3572EBCD05256C784DAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1363
Signing time: Fri 17 Apr 2026 07:01:31 +0000
Manifest this update: Fri 17 Apr 2026 07:01:31 +0000
Manifest next update: Sat 18 Apr 2026 07:01:31 +0000
Files and hashes: 1: fKvVor01qPV-ORu7n9y9qnaHTq4.roa (hash: 6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: sLyFyyvnZt7vfDMcDwpSQ/RSAj/0gLkLdi7nXfXteyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ad:09:2b:f3:57:2e:bc:d0:52:56:c7:84:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Apr 17 07:01:31 2026 GMT
Not After : Apr 18 07:01:31 2026 GMT
Subject: CN=0ee8cd9ac582c0e801bc1e9c0eaea15295566856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:3e:d6:d5:a8:34:24:33:81:44:65:64:5d:
ac:aa:5e:44:2a:5a:0a:7c:18:5a:ca:d8:3c:d5:13:
78:30:81:a5:ac:67:6e:f0:27:75:49:9c:c9:7f:bb:
56:c8:8d:52:52:25:53:d2:d8:d3:22:bc:57:40:2b:
f0:f7:f0:69:85:74:77:cc:72:16:5c:ac:8c:6e:44:
ae:c6:3d:88:c1:b9:ee:f5:67:f4:3e:0c:cf:f1:89:
5d:c3:69:4a:9b:5e:f3:58:64:c5:2c:8d:7b:35:de:
da:17:80:18:5b:ed:33:66:fd:d2:f2:27:4c:f9:6f:
30:11:22:36:40:b8:9b:99:9d:fb:ee:ad:01:3f:2f:
c8:a2:d6:fe:09:68:5c:b6:ac:c2:5e:cd:f9:3f:d8:
f4:bc:01:85:26:f8:5d:84:66:9a:05:e5:7b:3b:79:
3a:3d:70:42:93:9f:2a:cc:22:e0:e7:f1:27:2b:e8:
b1:a8:38:a4:3a:06:bf:50:a3:7d:ac:b3:3d:3a:9e:
10:86:b8:a9:4a:84:77:83:bc:61:94:6e:ad:4f:9e:
36:22:16:ab:ae:2e:fb:ca:e3:91:ac:68:df:75:c7:
85:5f:15:aa:50:6c:40:25:af:25:c9:08:4f:c0:43:
2f:eb:37:be:3e:82:28:ae:86:8b:60:55:42:85:e6:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:CD:9A:C5:82:C0:E8:01:BC:1E:9C:0E:AE:A1:52:95:56:68:56
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:12:f4:b9:89:fd:ca:54:9d:d5:c0:f4:d0:63:12:d0:5a:
92:8a:ff:00:be:de:76:eb:17:7b:32:a7:7d:68:5f:e9:ac:c6:
40:8d:1a:7b:ba:9b:d3:a3:12:01:2a:4b:21:b5:56:92:03:8d:
e2:02:90:8d:61:74:e4:5c:5e:cc:25:dd:d9:5e:f8:19:99:04:
54:3b:2a:b5:69:79:07:6b:07:12:06:95:59:94:0a:cc:f2:6c:
53:3c:15:1b:0c:cc:0c:1a:94:31:f6:37:ed:58:e1:88:ae:b3:
8d:cb:8c:d1:28:d4:5e:c2:f8:f1:8b:3b:87:64:da:97:26:8d:
04:2e:5b:37:28:13:eb:d7:58:ee:e6:70:8d:52:18:21:ef:f5:
44:d7:a5:10:72:6a:55:79:1b:b1:e8:8d:0c:c3:29:16:30:36:
58:f3:75:9d:8b:f9:08:ff:0e:af:f5:76:7e:88:9b:6f:1d:be:
8c:38:7b:ba:13:4e:91:b0:f8:4e:f8:45:7d:1a:c6:b7:0c:16:
40:fb:2f:d7:bc:f6:3e:fb:42:a1:e8:55:54:5e:c1:23:c6:d0:
8f:0f:5c:f6:ae:9a:91:78:5f:8c:4a:a9:01:0e:78:f7:72:00:
74:7b:91:c1:3e:8c:42:13:6f:2c:ce:26:2e:86:9e:cc:03:96:
43:40:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:13 2026 by rpki-client