Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: NLlSs07OMg+H42UHITavE9asuEUdu/mBRcyem3mVkno=
Subject key identifier: 09:CC:2A:7B:86:74:AC:8E:50:E4:86:71:71:59:5F:2F:29:A3:CB:1C
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019D9999221C34243E22D311DFAC8A53E69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: oEeTPcmYrptnhNpOimhG5nZ7HzhbDA70yJP9KEURsMM=)
2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:22:1c:34:24:3e:22:d3:11:df:ac:8a:53:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=09cc2a7b8674ac8e50e4867171595f2f29a3cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:d0:0d:6f:00:00:e1:be:47:07:12:d5:d1:
43:8a:92:da:d7:c5:9e:3b:99:26:f6:79:40:b3:1e:
3c:71:47:86:e4:cd:fe:2f:c6:d7:2c:8a:57:ab:5f:
6d:1a:13:50:72:c1:74:25:28:4b:51:ee:41:e6:61:
93:05:fc:5a:b5:93:24:c5:bc:f9:2e:9a:af:73:72:
88:40:40:6e:3e:80:16:24:a9:91:70:b0:02:c4:37:
e6:4a:e1:25:29:30:c7:3d:02:27:f8:f6:22:f2:2e:
4c:fe:8a:83:ab:b9:2b:ec:29:45:54:3d:fe:af:41:
fa:8a:e4:10:d9:63:d2:bf:96:03:0b:44:d3:d4:7e:
25:d5:1d:64:74:72:ea:73:28:ca:16:88:1c:1d:99:
09:a1:b0:0b:13:33:d9:87:9f:c9:26:11:a3:26:7a:
a9:2d:61:44:fe:2b:4d:33:cc:95:a4:fa:ad:61:c7:
34:b4:65:26:8a:85:0e:74:ae:21:7c:99:2a:8c:6c:
e7:f7:3d:f0:bd:e1:9b:d2:8e:dd:7a:07:cf:04:da:
1b:49:79:ba:14:c2:06:ab:9f:b6:2c:dd:e9:07:79:
66:cc:ad:3e:b7:44:4c:ba:a9:f8:8c:4c:b4:f1:97:
e6:89:02:31:6e:37:ae:78:f9:20:83:70:89:5a:39:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:2A:7B:86:74:AC:8E:50:E4:86:71:71:59:5F:2F:29:A3:CB:1C
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:52:bc:97:26:5f:1a:a5:8a:e7:30:01:6e:8a:da:37:53:
d2:da:d3:08:b9:f4:90:bb:6b:3c:28:47:a8:57:11:0e:af:4d:
51:39:33:67:42:59:94:23:7d:79:09:5b:1c:4a:b1:f5:f5:fa:
64:7b:d9:20:16:f9:c8:6e:07:01:4b:a7:7c:30:0c:f0:eb:0c:
4f:e3:c8:bb:1c:0a:38:e8:1b:a2:37:01:de:5b:2d:a7:7b:37:
18:7c:23:f0:49:9d:dc:b1:f3:30:29:e8:0c:33:70:8b:b0:20:
97:91:6e:52:c5:29:76:23:65:1d:24:1d:50:71:9d:0a:20:e1:
2c:80:17:37:d8:85:91:3c:99:4e:53:44:40:ae:02:4d:88:3f:
b4:23:e9:a6:fd:d2:74:ad:48:04:fa:a1:20:14:bf:15:e3:82:
cc:28:0b:57:4f:e0:22:5e:41:09:39:48:ef:48:65:63:ad:b0:
50:d4:9e:b9:9f:4b:39:99:8d:a4:a9:fc:d0:fa:89:b0:08:af:
f5:6b:02:bd:74:aa:36:58:66:03:bf:0a:f9:25:67:5d:01:37:
aa:20:56:a3:1a:65:ee:1c:23:17:99:39:33:d1:90:c6:a8:94:
b8:90:0b:e0:73:fb:42:bd:41:55:8e:f4:c1:19:29:0d:36:db:
05:c4:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:13 2026 by rpki-client