Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: s2SdKPCTaEEc0vDk1Km2ygNt/POk0uw9cVCcaMUL4+g=
Subject key identifier: C2:26:12:C4:87:55:FD:69:35:22:E5:26:A6:5E:21:7B:78:2D:81:CD
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019D9BBEAB1875CC5D2C85AB11FF564612B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0CB7
Signing time: Fri 17 Apr 2026 14:00:57 +0000
Manifest this update: Fri 17 Apr 2026 14:00:57 +0000
Manifest next update: Sat 18 Apr 2026 14:00:57 +0000
Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=)
2: H180kdffd3luCWDv6OkwCGcrOfc.roa (hash: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ=)
3: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: 5ypBVu6DIjozDXnUEyX4wrKwuBwV3/fPIFObEZYHiIg=)
5: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (hash: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s=)
6: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ab:18:75:cc:5d:2c:85:ab:11:ff:56:46:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Apr 17 14:00:57 2026 GMT
Not After : Apr 18 14:00:57 2026 GMT
Subject: CN=c22612c48755fd693522e526a65e217b782d81cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:0c:0f:54:09:4b:cc:75:08:e2:5e:0b:92:
49:30:3a:58:d3:11:65:5f:ab:ed:79:25:1a:88:b1:
2b:a7:e3:a5:c1:8b:2c:77:09:51:3f:75:74:89:e6:
b9:15:f9:af:1d:cb:13:01:77:5f:f3:1d:de:e2:3f:
60:fc:31:fa:53:2a:6b:31:6c:c4:0f:42:a9:6b:6d:
21:ec:33:8a:7a:3d:e1:b4:9f:6a:ac:ec:44:e3:5c:
ff:43:a4:75:cf:8d:3e:f9:a3:45:0d:f6:86:2a:ca:
90:93:1b:da:1f:34:e6:21:1b:b9:40:37:94:3f:12:
0b:18:66:a1:e3:5d:36:85:85:4e:30:b6:9e:d1:81:
7e:9c:cd:b9:35:3c:b5:8e:96:b4:a7:a0:ad:0d:3e:
30:0c:3a:3b:bb:7a:68:ba:22:83:f7:cd:6c:b8:2f:
57:be:24:72:8b:87:5a:54:d5:ee:65:f3:f3:43:d8:
e1:2d:2d:52:cc:45:53:4e:9f:f0:11:d7:f0:1f:a1:
39:a1:90:6e:ca:00:a9:02:d6:8d:65:97:bc:41:45:
ff:ca:7e:f5:ae:33:4b:0b:34:d2:ce:86:57:05:20:
02:97:16:ad:18:e9:a9:06:e9:b6:bb:9b:63:74:d7:
02:79:6e:29:59:59:96:99:0f:56:fb:13:76:39:62:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:12:C4:87:55:FD:69:35:22:E5:26:A6:5E:21:7B:78:2D:81:CD
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:b6:e8:d4:31:18:00:04:cb:39:af:13:8a:b3:2b:bb:12:
0e:63:c8:6e:09:3f:69:30:7d:26:b8:13:db:b5:15:00:99:1d:
f4:47:8e:07:21:c2:03:a7:bc:9d:6e:fb:c8:99:81:12:04:98:
87:c5:88:7d:00:45:99:04:24:6c:26:d7:28:fb:6e:1c:dd:ae:
07:95:4c:62:fd:0e:c0:35:3f:6c:fe:ed:fe:6c:14:9d:ea:7d:
c8:6e:90:93:c0:67:ec:27:a3:32:eb:29:88:21:f8:52:00:a2:
eb:e2:52:75:b4:ac:78:1a:09:ac:74:5c:94:95:2b:5e:20:70:
3e:84:15:c3:bd:10:bc:1a:57:a5:f6:1f:37:29:d7:71:9b:eb:
ac:71:ba:d3:8b:66:32:81:d2:ff:c1:94:07:3a:1d:9f:80:99:
70:76:16:c7:a9:38:a2:5f:44:7e:a9:65:27:d8:23:cb:12:b4:
d8:a0:f3:de:86:8a:b1:fa:20:a8:8f:41:87:93:6e:87:e1:07:
9a:83:e5:84:bc:46:43:86:b0:1a:c6:84:94:04:a2:55:3e:8b:
5d:dc:3c:c8:f5:38:9a:12:cf:5a:a2:ac:a6:d5:d3:14:1c:ca:
b1:70:3c:19:e0:b9:14:d6:22:68:48:d7:9e:62:4a:33:09:49:
c4:1f:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:48 2026 by rpki-client