Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: CzAk8G3w3BuFWr2Y/M3N7Jwpl3BnqHHVfvHjOXGw7CI=
Subject key identifier: FF:47:69:B5:96:45:A1:79:A5:3C:33:A5:BC:AB:3B:AC:00:23:96:7B
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019D9961EC4FC894247357FC92179B1E7BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 03:00:24 +0000
Manifest this update: Fri 17 Apr 2026 03:00:24 +0000
Manifest next update: Sat 18 Apr 2026 03:00:24 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: wUjxeAiGHObFyTxda2Li8Sl731iH2jE7M6JqePCa4Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ec:4f:c8:94:24:73:57:fc:92:17:9b:1e:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Apr 17 03:00:24 2026 GMT
Not After : Apr 18 03:00:24 2026 GMT
Subject: CN=ff4769b59645a179a53c33a5bcab3bac0023967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:cd:93:24:be:73:42:83:d5:5d:d9:12:d4:
09:f2:00:24:fb:45:4f:e7:a0:85:bd:56:76:ba:9c:
c9:9c:2b:2f:96:d0:33:23:39:3a:86:e4:e3:73:c6:
e1:fd:e6:13:48:91:fb:18:e2:02:b8:4f:9d:9c:ab:
10:ad:6d:86:09:d6:ae:95:c4:a8:3d:f3:83:36:8f:
80:c8:29:72:82:35:c6:79:8a:72:23:dd:e0:a6:b4:
df:5d:74:28:63:fb:64:74:0b:23:81:94:97:43:66:
e1:33:e9:e3:5e:72:dd:7a:1d:ad:f6:04:c6:3a:2c:
8f:f6:90:5f:77:f4:d1:0f:43:b3:c9:d8:e9:45:12:
7f:f4:59:6f:34:2a:e6:48:83:8f:f2:fd:55:ec:25:
0d:00:05:ca:cb:80:90:f6:87:3d:22:90:98:55:5d:
3a:39:64:f8:b0:08:c1:ca:8b:0a:77:f6:57:54:3b:
2a:49:99:4b:90:0b:88:02:f4:27:91:dd:2e:ed:8f:
9b:ba:03:e0:cc:0b:dd:d9:69:0e:46:8c:5b:28:15:
c8:ad:91:c1:60:29:db:e1:14:62:72:51:99:b5:9f:
dc:58:7a:a1:ad:0f:2a:b2:83:81:49:6b:70:ba:50:
b9:a6:3f:42:c6:79:51:01:be:d9:9d:5a:21:dc:c0:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:69:B5:96:45:A1:79:A5:3C:33:A5:BC:AB:3B:AC:00:23:96:7B
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:5c:de:23:03:a2:fa:eb:7c:d0:3f:ba:6b:61:a0:4d:c9:
38:6a:69:43:9d:cb:cf:ad:5d:89:3d:4d:ae:1a:37:fd:65:0f:
cc:7f:97:c7:ae:1a:ff:1b:d7:3a:e1:16:10:f4:54:94:94:91:
86:71:57:a2:d2:53:03:41:55:f5:ea:f8:89:cb:42:e5:6b:d0:
10:a3:82:dc:a2:6c:72:10:76:aa:0f:03:77:50:2f:09:d7:d4:
4d:2f:e6:a2:10:a3:8a:b2:cb:12:10:e8:4e:f5:e5:05:83:da:
cb:7e:13:cb:ba:06:b7:e7:42:1a:e6:84:f5:fe:76:6b:4d:7f:
ed:5d:9c:19:ad:5f:2d:41:dc:82:ed:e6:8a:15:38:b4:5b:89:
a1:51:be:f8:48:73:38:e6:55:b1:a9:2c:a3:4f:43:d6:96:38:
87:83:1b:d3:28:54:cc:62:93:8c:8e:c8:82:2a:09:a3:11:b9:
91:42:4d:23:6a:ba:ca:f1:57:af:2d:79:d5:87:dd:3c:37:83:
1a:60:38:4b:25:a5:19:2c:f9:01:e9:04:3d:11:d0:27:a3:ca:
4f:fe:85:f0:f5:54:e1:35:44:a5:13:28:29:d3:d2:7e:7c:36:
93:98:8a:1e:d8:ef:56:00:84:84:4c:30:6f:95:70:aa:a6:4a:
aa:69:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:24 2026 by rpki-client