Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: /i6M14RCYGmNoqqiwqI+GBSoiw8DhWQTt32tAHt83wc=
Subject key identifier: 36:9D:A6:16:78:84:B2:D5:E5:4C:41:58:3C:4F:4C:C4:D6:87:EE:79
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019D9961FFC78E8295B8F5428805C1585637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0F8E
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: 5b9__Q8NOyZsGtNfArWmdCajUsQ.roa (hash: JRUc1JqtkkmBfJnMJX95f2kq0cGDruqAawQMnKbLcRM=)
2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 4Kvu7zeQzL6RYv0DwVBipXMZNUApJm55PvHdEsdq2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ff:c7:8e:82:95:b8:f5:42:88:05:c1:58:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=369da6167884b2d5e54c41583c4f4cc4d687ee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:d3:3a:3d:bd:1c:f1:ea:5a:6e:94:67:12:
98:20:cf:19:81:6a:f0:2b:0c:3e:20:bd:b5:95:f1:
50:05:3e:e3:d5:93:50:c8:dc:d8:70:88:68:99:61:
99:4b:0d:73:c7:23:70:53:53:be:ff:da:3d:47:af:
5d:73:22:32:bb:2c:bd:34:2e:5b:f5:23:6b:f5:49:
ab:7c:8c:e5:71:46:bf:54:15:d1:d7:e4:4c:ca:f3:
da:6f:42:1b:a5:5f:bb:c1:2b:13:67:85:97:2e:57:
26:60:4f:9c:e0:0d:c7:e7:23:86:7e:c6:39:73:c5:
fc:50:41:0c:ec:f5:20:fa:d5:22:a1:b5:29:cb:b2:
4a:9d:75:48:f4:30:b4:f3:37:61:5b:93:87:4f:e1:
f1:a4:e8:d4:01:de:67:4d:8d:0c:6c:a5:6f:e4:60:
3f:81:ff:25:53:1d:b3:aa:b6:c2:4b:9e:c1:39:da:
d4:7a:21:2f:9e:72:43:cb:8c:91:a0:38:4e:d1:85:
fb:54:46:46:3b:f7:14:a4:23:cb:58:23:61:74:9b:
c4:1c:43:14:4d:5a:d9:45:7e:4f:6c:4a:08:fd:f7:
cf:92:9a:f4:5f:49:34:ca:6c:7e:69:ce:ad:48:9c:
67:5e:70:18:6d:05:a5:f5:d6:26:2a:e3:b6:38:8c:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:A6:16:78:84:B2:D5:E5:4C:41:58:3C:4F:4C:C4:D6:87:EE:79
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fb:39:06:0a:9a:14:5d:18:76:e5:18:65:d7:cb:a2:6e:f5:
dc:af:f5:1b:d8:79:a1:b1:e1:f4:c1:9d:69:d5:37:e1:f2:73:
69:c6:2a:f3:8b:08:0e:7a:d9:96:cd:d3:5d:08:de:f2:bb:10:
69:5d:8c:3f:bb:9f:87:97:62:c3:1a:5f:54:a5:8c:f6:f9:d2:
ad:7c:ad:7a:a7:80:89:55:70:42:e0:55:85:21:8b:61:06:50:
10:57:fe:b4:48:2e:7d:d3:83:3a:e6:55:5a:79:a7:de:52:30:
71:a2:2c:83:1e:72:77:14:a1:e6:0f:9d:54:96:b9:eb:05:9f:
91:0d:32:05:53:37:f4:41:32:44:72:0c:06:67:7e:e7:08:f9:
c0:03:21:ad:54:5d:49:5c:ca:48:3d:6b:58:63:7f:93:0f:00:
3c:1c:49:14:90:8e:fb:6f:18:43:ae:ea:7b:02:c5:a1:4f:8b:
1c:0f:c9:87:2c:42:2a:60:23:42:10:12:d8:c9:8b:95:3f:85:
dc:28:bf:d7:d1:f0:4e:1a:95:fe:a9:b9:11:d4:28:ca:01:1f:
0f:ab:b2:6b:a7:57:c7:d2:12:03:2b:7c:12:0e:21:20:e7:16:
f1:f0:3b:c9:ad:70:04:1a:d1:bd:f8:e7:22:68:2b:c6:8b:61:
03:76:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:03 2026 by rpki-client