Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: y+rDFB/2VIXWdYRlvOLSnX5RRNItJ+rt23xO7Env2Bs=
Subject key identifier: 7A:92:38:55:75:15:65:5E:64:7A:48:13:37:19:9E:60:65:C1:16:29
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019D98866E7D69D08F9DBE2D7E3504B3DF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: QlaLZyPT8ZzqZ+PYRFc9t+Ka3pvB4EbyCrqAiKSAbBc=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6e:7d:69:d0:8f:9d:be:2d:7e:35:04:b3:df:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=7a9238557515655e647a481337199e6065c11629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:ef:58:89:06:b9:02:e0:06:0b:1f:06:20:
ec:9b:73:ea:57:ba:37:53:98:e7:3c:16:83:d5:83:
a7:f3:f6:42:7c:cf:2f:ac:23:54:53:8e:a3:f7:84:
a2:7a:90:ef:7b:4d:59:b7:bb:7d:4b:0a:f3:68:c3:
9d:72:83:f6:6f:fb:cb:3f:3b:94:b7:69:58:7d:bc:
c6:7a:18:47:21:9f:85:9c:de:83:0a:a5:c0:cf:57:
10:2c:58:2b:ba:2d:c5:9c:08:3d:b4:2c:61:66:46:
73:cb:a5:0f:b0:68:08:82:86:72:67:a6:d8:39:ff:
5b:30:fc:f7:62:e5:b9:0e:9b:fd:fe:c0:c9:fd:9e:
df:1b:bf:05:ad:d0:32:fb:8c:4f:5b:b2:be:f9:e2:
30:29:09:db:23:75:5a:56:01:f1:8d:0f:84:d1:79:
3c:5c:81:94:5f:b6:c3:27:c7:13:0e:48:a7:ac:a2:
c0:60:d9:27:1a:11:ba:2d:b1:75:b6:6b:a8:d1:16:
dc:3f:2d:5f:91:5b:89:10:a8:ce:7b:d0:12:b0:8a:
28:ce:12:0c:f8:74:b5:98:4f:1b:ea:d8:84:1c:46:
91:ed:05:b3:2f:3b:32:c6:69:21:47:a9:08:89:a1:
15:0f:55:c5:1f:ab:d2:9c:2d:9b:ca:20:49:93:7f:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:38:55:75:15:65:5E:64:7A:48:13:37:19:9E:60:65:C1:16:29
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:ec:70:49:35:6d:80:ad:22:52:01:eb:6a:53:66:24:4f:
21:18:f7:21:24:18:2c:6f:a4:ca:43:7c:e8:65:51:98:57:1c:
83:b0:a1:52:3d:0e:51:10:fe:75:7b:f9:f7:fb:cf:91:12:48:
94:ee:16:7c:c5:c8:f4:2e:23:88:19:6f:87:b7:ac:b9:cb:17:
ca:7a:25:a2:01:00:6e:54:1c:c7:7a:02:cf:75:94:0c:a3:5c:
d6:79:de:af:b7:4c:43:0e:12:95:ea:be:50:29:c6:db:2d:31:
c5:c4:be:93:b9:94:f9:b4:40:1d:2f:42:a2:04:5e:ee:21:d7:
65:df:4f:a8:0e:0e:cb:28:2d:88:7d:71:55:0b:c6:f6:f3:a2:
3a:ef:66:f7:e9:0b:67:79:1b:04:a5:5f:ce:f6:20:35:f8:62:
84:da:b2:ed:29:8a:e7:14:2d:09:73:fe:7e:87:da:e9:13:80:
90:17:95:87:16:8c:3f:e1:87:b2:1c:77:31:3b:f0:88:38:04:
df:7e:2f:93:ac:91:bf:51:cc:24:4a:01:df:c8:89:5a:3b:9b:
90:e6:7d:ba:c6:b2:f9:e3:90:12:08:44:29:69:44:ba:d0:de:
61:8b:83:25:19:e6:c1:54:2b:fd:df:95:44:e9:2c:8a:89:24:
6e:80:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:31 2026 by rpki-client