Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: fR5WcUto9/2W8YS6xfGnWdBKam7oOwuyOl6gNn+kJjw=
Subject key identifier: EB:AD:64:37:FA:A5:68:DE:F4:0A:3D:B7:73:AE:F8:B5:D6:A9:71:4C
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019D9962AAC3D412EA397E9E9139C2FBE5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa (hash: ryTaJPSpPyp4HVacNx6TqyKRXMOPCVThkC5CxXFK++o=)
2: Yn86QLVAHpPgUIOHf9xuouUcLOQ.roa (hash: 6awOm1GCHlzhqt7HZ19OchKYQoEQ3dPq9ujImJdFJic=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: cYYs1UbPYzZmGYtw/es++S0I82X0jaxJhUMT3OtzOQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:aa:c3:d4:12:ea:39:7e:9e:91:39:c2:fb:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=ebad6437faa568def40a3db773aef8b5d6a9714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:b4:8f:1d:28:35:54:ea:43:cd:4e:bf:0b:
15:de:cb:9b:bd:68:cd:9c:c2:1c:b7:53:4d:26:a6:
e9:e1:d1:8e:10:16:be:f2:e3:02:21:10:87:3d:f5:
92:08:30:a3:3f:3e:f0:d1:75:61:3a:8d:3a:2a:c6:
8f:ea:cf:ce:13:52:50:a0:1b:8c:63:cf:52:a2:3c:
91:6d:9f:18:2e:0c:48:c8:32:e3:83:46:ca:12:c0:
20:cc:57:ae:4a:1a:b0:af:b2:3a:e6:99:24:7e:cb:
32:48:c3:ed:23:56:8f:95:23:bc:5e:63:50:78:53:
ae:a8:22:29:82:6a:be:d5:dd:cd:d2:34:5a:88:97:
b1:e9:29:39:42:3a:3e:a1:74:30:fa:8f:4c:af:5d:
6a:08:4a:8e:9d:40:8b:7d:95:e2:dd:81:2e:a2:dc:
d0:a9:7c:0f:a2:3f:f5:58:cb:eb:b2:07:84:f0:a9:
64:54:40:a1:0b:a2:21:b2:81:8a:36:bf:05:61:f9:
55:92:6f:57:0b:c1:92:78:e8:50:2b:22:43:16:1c:
f3:fd:b1:53:cf:e0:65:2e:2e:d4:e7:f0:50:50:ce:
2c:65:d9:63:e9:b7:5a:59:32:b9:4f:7d:48:15:8d:
4e:4f:a1:5f:5e:c5:15:8d:9c:bb:6f:1c:62:d6:e7:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:64:37:FA:A5:68:DE:F4:0A:3D:B7:73:AE:F8:B5:D6:A9:71:4C
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bd:5e:b2:fe:fc:36:71:e3:1b:38:d8:98:fe:16:33:16:ff:
4a:d6:04:08:ce:0b:15:6a:22:df:bd:7d:af:ec:f8:7b:6a:96:
7e:6b:3f:b2:45:7a:cf:52:d9:8b:cf:36:d4:cf:c0:fe:88:2d:
68:b0:fb:48:30:34:e1:c0:25:b2:76:b0:1f:7d:58:50:92:33:
0e:4e:03:93:14:20:08:cd:cb:09:6b:e6:ba:93:ed:bb:ad:c8:
1a:e9:38:f1:a6:d4:b8:e6:92:52:31:24:2f:bb:41:a5:73:62:
94:b5:ac:06:44:1f:7d:ba:98:b4:2d:60:c0:61:7d:14:24:e5:
cf:c9:97:1a:6e:fe:bd:be:75:43:9a:0c:2e:98:9f:2c:b4:96:
7a:09:8c:25:55:26:70:39:9d:65:e0:40:a8:09:27:f3:82:ad:
7d:dd:12:74:d4:53:6e:fa:d6:e0:91:23:94:47:38:81:aa:89:
9f:eb:13:6f:a5:77:cd:ec:7b:2c:73:aa:43:31:ce:62:cc:30:
5c:e5:95:04:89:5f:df:ef:87:e1:c2:de:9a:d1:08:05:36:e1:
1f:d6:42:16:a5:16:c8:ed:c8:e8:1b:47:fd:dd:27:c2:de:88:
d5:57:ce:5c:6b:b0:f4:c5:58:0e:89:a8:44:0d:98:c2:d7:5c:
8c:f6:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:23 2026 by rpki-client