Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: vKY0euNl4Nm6w/XBqpD0tcaqvmlKvgYjuynvqXywEQE=
Subject key identifier: 43:6D:EC:5D:C3:63:52:3E:56:A9:1A:7F:AD:6F:23:08:B2:72:9E:15
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019D9AE2D6FD4F369EC4912D4537C4755FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1940
Signing time: Fri 17 Apr 2026 10:00:50 +0000
Manifest this update: Fri 17 Apr 2026 10:00:50 +0000
Manifest next update: Sat 18 Apr 2026 10:00:50 +0000
Files and hashes: 1: 0JJLH92b9ei-F5PriA5OhqGX8Qo.roa (hash: OAXwMMCwshgUyLp7eBhzKer8vE/aXd3f9yTsDMZAMuA=)
2: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
3: SPPQs6sj1ChGjioRgdt4m0EK_DI.roa (hash: dA7acJP1FFj2uYgRIKSdY63Jcht0mQAVqYE4S/QoGHQ=)
4: Z2r7taNlksaIA_BapGfcq-AzfPY.roa (hash: tSioYRJgqg/vsE95GOMs+XL7xqTRy7Mtz6dqflcuUTY=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: k5tLXK1jVUP11uP8fKfvP-CeNR0.roa (hash: u/3kcR3Y7cZywKgASVelx6pjI+xsWKIUgLp1sMMbvyI=)
7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: OnSy1hMvqUJDTo70Xt6XJHKete6x4/mipO2Uc94suzo=)
8: sB4_WHf0SZ09__UhJHd87A3_flc.roa (hash: XCVtQn+UgOjmQ01+Wqu+dFAhTj3/l8D06C6ft0oULW0=)
9: wgk7tbWmPW1ceRhgjBnAVe2XcSo.roa (hash: ArVzv6tRuWJhm3qMA99cKCCM7Y2OnnqGto+xwi0HB+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d6:fd:4f:36:9e:c4:91:2d:45:37:c4:75:5f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Apr 17 10:00:50 2026 GMT
Not After : Apr 18 10:00:50 2026 GMT
Subject: CN=436dec5dc363523e56a91a7fad6f2308b2729e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:92:2b:a8:4b:38:5a:0a:31:db:7a:17:ed:
8d:dd:e7:6b:5c:28:66:72:ce:cf:f0:dd:d7:68:4a:
fa:74:80:27:f8:d2:49:c9:8a:7d:ef:c0:e5:ff:25:
fe:f7:82:b0:e1:5e:9f:2e:49:2f:cd:b5:0e:c9:64:
99:d6:71:49:9e:81:7d:0d:ab:d6:72:fb:65:61:88:
a0:7d:a8:39:32:29:13:a7:13:9a:f1:15:c2:d9:78:
2a:f9:9e:a3:d3:cc:e8:03:e3:4d:79:97:65:6d:c0:
30:2e:64:e0:8f:e7:ff:4e:19:38:50:9a:51:1a:0c:
05:f8:10:06:b2:91:78:dd:61:eb:16:de:e7:68:c5:
74:8b:92:78:11:d9:b5:1c:98:8e:49:d5:e1:be:d7:
6d:f1:07:3a:03:d3:e4:7a:b1:6d:75:8a:8b:e4:1b:
4d:11:c5:51:3b:6e:6c:28:d5:14:29:ff:d6:36:76:
de:00:ba:b6:04:fb:bb:db:4d:b5:07:e9:cf:26:2b:
1b:e2:fc:dd:c4:74:b4:db:f3:40:c2:3b:86:e6:26:
0a:55:fb:53:ce:06:51:e8:28:08:a4:b0:7c:16:9f:
3f:09:45:3e:e1:b2:b2:d4:89:a5:12:50:23:0a:6d:
58:f0:68:72:25:9f:3e:00:0f:00:71:2e:9f:09:3e:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:EC:5D:C3:63:52:3E:56:A9:1A:7F:AD:6F:23:08:B2:72:9E:15
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:46:8e:10:47:3a:c5:f5:98:65:d0:2e:f0:e0:a9:fa:6f:
d9:ab:dc:01:37:8d:fe:43:6d:a9:25:30:aa:57:d4:08:38:cc:
e4:b0:a0:5c:e6:d5:38:ec:dd:f4:8f:ba:24:8a:31:59:72:3e:
cf:b8:46:76:35:93:02:56:cf:e1:fd:bf:5c:d6:0f:04:33:a0:
d5:32:67:86:79:0e:dd:b2:db:e2:df:e5:ff:d8:34:59:0e:5c:
e4:01:6e:c5:43:76:bb:3b:41:20:a8:9a:51:90:48:71:72:7c:
93:b4:83:c9:59:8a:dd:49:99:e9:c1:26:0e:c8:12:39:a6:be:
e7:e3:26:d5:a0:1d:47:8a:85:ea:e5:72:b0:c2:e9:66:9e:bd:
66:95:4c:c0:59:17:24:d8:74:51:ac:71:7c:cc:7c:81:46:50:
4e:ca:b4:ca:13:34:a2:76:c5:f1:ce:86:02:62:e7:fb:88:14:
e9:5b:f8:b7:1e:b4:78:7b:85:3e:b0:d4:d1:66:75:cf:29:4c:
86:fb:d8:f0:e2:29:03:16:dd:d0:3d:b9:90:27:02:09:d8:7c:
f9:1d:af:c2:c2:0b:b5:86:00:ed:80:8d:b5:b1:aa:b5:26:2d:
1f:42:35:7b:23:07:b2:d6:15:1d:bb:09:a9:05:3e:3e:24:58:
83:ee:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:41 2026 by rpki-client