Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: RLHHR7L1Qj0ggu+kFyzzyTyCGSICmDVkfkgB2NXVE8U=
Subject key identifier: 00:BE:CE:73:E4:F4:DC:8C:09:16:CD:CF:00:EC:49:60:5A:4A:C1:EA
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 019D9A74B0C510BC4038D60FDA6C01D24388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 1026
Signing time: Fri 17 Apr 2026 08:00:31 +0000
Manifest this update: Fri 17 Apr 2026 08:00:31 +0000
Manifest next update: Sat 18 Apr 2026 08:00:31 +0000
Files and hashes: 1: ZEMqj3tb1ybXDKr5XlxXEL_WdLM.roa (hash: rTSw7EgVmlH/cwLSzDAynJz/mTmMnyEjwe5X2k2ZIyU=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: 6nxOX1gijDysB2z/cHyvDbkQdW2tmiz1xdWxCmmHAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b0:c5:10:bc:40:38:d6:0f:da:6c:01:d2:43:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Apr 17 08:00:31 2026 GMT
Not After : Apr 18 08:00:31 2026 GMT
Subject: CN=00bece73e4f4dc8c0916cdcf00ec49605a4ac1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:41:41:6d:f4:bb:ff:ad:bd:c4:1b:c7:5a:
05:23:d0:c1:c4:c5:68:c4:4b:4d:d1:ae:e0:a0:86:
ae:e1:79:93:d3:19:f4:a6:ce:65:fb:0c:f1:3b:3c:
2f:ae:98:45:52:ca:d8:e3:82:b6:33:d3:7a:db:88:
94:fe:0a:9a:44:f7:d2:8f:75:99:62:45:96:14:99:
d0:fe:67:fa:00:97:fc:9c:09:88:f2:2a:d7:74:df:
dc:61:97:77:7a:15:df:cb:00:58:13:c2:c6:ad:b2:
96:d5:e8:19:ed:04:da:9a:bc:50:ed:b1:47:ab:8a:
e0:38:21:2c:8b:75:ee:ea:81:f6:0c:04:40:36:24:
32:46:ee:e0:ab:2d:01:ab:7e:9a:42:8d:6d:d3:32:
3a:24:70:7f:dc:89:b0:4a:2e:5b:eb:1d:ae:11:71:
a1:ec:2e:50:1b:fd:c6:72:a4:ba:b6:29:f7:bf:ec:
ff:cc:65:4c:71:6e:f6:0a:5f:7b:9e:b7:0d:8e:08:
9a:28:06:4b:d9:5b:6a:c1:a7:ca:57:f1:34:d5:e6:
b7:e8:73:b3:6a:88:5d:06:e7:82:3f:cf:81:1f:11:
05:f9:86:d3:d7:c5:ef:c3:e1:2b:26:67:8f:07:17:
d1:fb:27:8c:6a:e9:5f:f9:6f:eb:28:66:03:ac:11:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:CE:73:E4:F4:DC:8C:09:16:CD:CF:00:EC:49:60:5A:4A:C1:EA
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:66:34:58:b1:8e:8e:e8:d2:43:9e:89:27:44:c4:67:31:80:
71:93:c5:64:42:6c:ba:f4:cd:a9:c2:4d:42:e2:67:ea:ac:55:
fb:65:a3:df:a5:87:85:44:23:a3:89:3e:a2:0c:14:15:e0:b8:
37:cf:7f:b5:7f:aa:d2:c8:5d:96:e8:db:40:2c:98:e6:a0:f9:
54:ca:ce:48:cf:e5:e8:f3:be:4f:88:91:cd:aa:96:c1:6c:72:
a9:3b:7a:76:94:4c:2c:75:c4:77:01:2f:8b:34:91:47:9a:79:
78:16:b3:45:15:f2:f8:13:cc:f1:71:ac:6d:1c:83:79:d4:9a:
c6:5d:c4:09:fe:b8:53:e0:79:1c:25:49:37:33:72:c1:90:d2:
f0:f9:6c:27:a3:f3:ce:c7:e7:87:f7:bf:46:7a:7b:e6:37:d5:
1b:e9:38:bd:db:6a:cf:ef:77:cd:90:e7:47:97:29:23:d7:e1:
a6:3d:82:e9:89:be:bc:e4:e5:74:5a:c2:20:7d:7d:a8:f0:50:
bf:35:ec:c1:07:d9:95:36:fb:52:e3:2f:7c:1f:f8:48:4f:c2:
d4:73:0c:76:6b:03:73:75:aa:f7:82:35:b1:27:68:9a:09:90:
2b:ff:43:33:0c:08:11:bf:e0:0a:d3:42:8d:53:3a:9d:73:f5:
70:a3:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:21 2026 by rpki-client