Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: szj+qTdrnd/I9jwm65dsOLh1cSo8RWEZyxmpntgbrpI=
Subject key identifier: E9:A4:B9:ED:73:43:8E:C2:06:DC:A0:BB:7D:C5:4C:56:91:C8:3F:8F
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 019D996251D6DCA0FF1CD80C915668333C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0F3D
Signing time: Fri 17 Apr 2026 03:00:50 +0000
Manifest this update: Fri 17 Apr 2026 03:00:50 +0000
Manifest next update: Sat 18 Apr 2026 03:00:50 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: zDQj5QAz6u8toRJTCS94dP4CWW73s0MxVhauAyf4/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:51:d6:dc:a0:ff:1c:d8:0c:91:56:68:33:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Apr 17 03:00:50 2026 GMT
Not After : Apr 18 03:00:50 2026 GMT
Subject: CN=e9a4b9ed73438ec206dca0bb7dc54c5691c83f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:64:82:09:43:3c:88:79:f8:10:97:95:71:
c7:72:eb:9f:10:90:5e:57:ee:dc:52:bf:ba:ab:67:
cf:75:71:e4:58:a3:92:5f:b7:14:91:9b:f7:e9:7d:
dc:87:39:41:ad:c4:6b:a5:02:10:3d:8b:23:f5:8f:
03:a2:23:e6:f7:6f:3c:fa:f7:9c:57:0b:32:c8:3a:
9e:a2:40:72:26:2a:2e:bd:a7:8a:09:bc:95:86:0f:
be:d1:25:dd:b9:cd:f8:ec:61:e3:55:ce:4b:0e:61:
68:b2:0f:35:05:86:7b:49:7d:f2:4e:89:78:f2:4f:
45:e9:20:12:b2:f5:69:eb:6d:3f:e0:c1:94:10:e2:
fe:c1:27:fa:00:1c:c2:fc:7b:ac:1a:c0:1f:d7:0f:
38:5c:45:14:71:14:70:ce:0a:db:7a:1e:d2:e4:50:
37:1c:3b:49:b3:a3:86:08:23:bf:3d:64:40:2e:a8:
3f:65:c2:d6:0f:af:2c:aa:dd:da:0f:a9:3e:ef:8d:
f2:d2:97:2e:89:3d:05:83:02:45:05:ca:4b:39:f8:
c6:a9:6d:e9:5c:a5:35:31:a1:d3:e9:ab:61:91:fa:
0b:88:87:24:4f:46:02:7d:b1:bf:c9:d0:6a:58:53:
23:6c:37:ec:14:61:1e:60:2f:a9:66:bc:70:b3:79:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:B9:ED:73:43:8E:C2:06:DC:A0:BB:7D:C5:4C:56:91:C8:3F:8F
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e5:66:15:72:f2:e3:a6:b6:8c:6d:4b:a9:de:04:94:cf:6d:
16:fb:75:92:b0:83:01:ae:58:db:71:75:d4:99:07:23:c6:05:
9f:04:3f:d4:6d:b1:ba:1b:fa:9a:87:39:11:87:f3:12:fd:f2:
ac:db:b4:93:5a:57:fc:2c:eb:0f:51:1a:fc:d2:dc:ef:45:7e:
34:22:6e:db:fc:96:65:86:88:94:74:91:99:f9:56:b4:0c:25:
7a:6e:6c:82:75:c6:57:82:56:a1:22:07:74:51:e4:4b:14:c5:
a2:a9:56:76:91:9a:35:cc:87:f9:19:ab:57:05:88:36:7d:9c:
6e:0b:45:7a:11:6c:d9:50:08:84:37:9e:61:ec:80:50:da:20:
52:4e:c0:15:c1:a5:90:67:18:bb:ad:36:9d:d9:1c:a0:5a:3c:
80:54:02:eb:52:d5:fe:7d:59:e1:c8:76:08:ee:4a:63:45:8b:
bf:c1:d3:a2:ee:4b:36:8c:95:d5:8c:a1:5b:62:95:d4:dc:b4:
48:ec:ec:ae:7c:e7:66:bd:52:54:2c:76:78:33:1d:f2:68:b7:
ed:70:0b:4e:df:fa:d9:27:db:34:3c:7d:bc:17:d3:fe:8a:b5:
d0:14:42:3e:3a:f1:be:90:df:8c:0b:1a:2c:d4:da:87:fe:a8:
11:a8:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:27 2026 by rpki-client