Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: sfebnAqEdFzI7KsQ3YOZCWPhKrX1u79DWTuFV5NzrNQ=
Subject key identifier: 09:EA:C6:D7:44:7E:44:38:2C:DB:86:23:EC:62:A0:05:A2:DA:9E:F9
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019D9A74C6F7F4583F27F576D47BAF724207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0DDF
Signing time: Fri 17 Apr 2026 08:00:37 +0000
Manifest this update: Fri 17 Apr 2026 08:00:37 +0000
Manifest next update: Sat 18 Apr 2026 08:00:37 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: aBu+TfXenM1lCZn3qsZYq+hjdMjvo+uu1HDGN5SwTuM=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c6:f7:f4:58:3f:27:f5:76:d4:7b:af:72:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Apr 17 08:00:37 2026 GMT
Not After : Apr 18 08:00:37 2026 GMT
Subject: CN=09eac6d7447e44382cdb8623ec62a005a2da9ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:2d:d9:18:6b:e3:a4:79:9e:53:53:9b:00:
4c:de:36:bb:e0:83:ed:d4:2a:35:15:36:d6:00:4a:
1f:bd:19:16:63:b0:0f:c2:fd:96:45:97:38:1c:eb:
52:16:de:4a:2b:1d:51:7a:10:ac:40:60:ba:92:64:
5a:bc:53:75:9d:35:a4:e8:97:c4:3b:b1:15:f1:af:
ec:ae:bb:40:56:17:18:62:74:18:ab:90:f1:25:2c:
55:b6:48:cd:6d:93:8a:aa:51:11:5d:65:8f:e7:34:
1b:3a:6f:ba:10:bc:e8:9a:b3:78:70:e9:55:ea:27:
57:ff:c9:65:3f:59:0c:df:58:49:29:d4:5f:3b:c4:
5d:7a:ee:c0:65:a3:06:c1:5c:cb:82:41:91:09:4c:
98:b4:11:ba:35:53:2a:58:d0:c4:d7:5e:dc:43:ce:
92:4d:c0:a7:e6:e6:71:cd:23:0d:dd:c3:58:59:15:
79:6f:22:b2:81:95:d1:e6:52:33:8e:ab:30:8a:4e:
37:08:2a:19:4e:99:b7:1d:70:7e:ad:d7:6d:5e:75:
0c:d0:d0:bc:f8:29:bd:21:ea:6e:e2:06:8b:d1:c8:
17:ef:2e:a1:42:9e:8a:93:b3:dc:7f:1d:66:b1:8b:
23:73:cd:74:04:49:16:0b:c4:76:26:91:b3:ef:f1:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:C6:D7:44:7E:44:38:2C:DB:86:23:EC:62:A0:05:A2:DA:9E:F9
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:1c:a4:2d:b1:ad:e8:1c:45:58:35:17:d7:9d:3d:5b:a3:
1c:6e:63:db:05:a1:7e:b4:04:8b:4c:b4:84:d7:60:f8:1f:74:
58:18:09:0d:21:47:c1:09:b3:9f:61:e3:4f:21:ec:2c:76:ee:
df:cb:5a:0f:bf:29:c2:ac:60:e4:7c:46:1d:74:73:5f:2a:81:
38:b9:44:21:92:59:1a:ec:1f:3a:e4:d3:c8:78:77:b4:e9:49:
fb:2c:a3:5f:5f:78:63:2a:2c:d0:78:8d:dd:23:8b:35:ac:45:
72:18:db:43:95:66:67:ab:d6:50:6f:71:fa:39:6d:1e:3e:4d:
a0:e3:42:ab:da:96:ef:2f:0c:e7:9b:e2:f0:31:88:c3:fa:3f:
33:94:94:ab:dd:9a:e6:ce:c9:15:0d:82:17:04:61:8f:ad:2c:
11:e0:43:ed:14:54:57:c5:53:a1:0a:0e:4f:8b:0f:a2:d7:64:
af:f3:3c:d4:05:74:ec:54:eb:17:d1:61:fd:ee:9f:9b:16:81:
cb:be:90:06:a8:7f:ad:b2:c4:ff:61:9a:22:19:09:35:c7:13:
ce:2d:bf:5c:57:9b:3a:4c:5c:8e:7a:0c:9c:8d:9d:66:80:5c:
9f:ca:79:ef:ec:03:36:ac:be:18:5d:36:00:51:e7:d2:70:7b:
7f:b4:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:53 2026 by rpki-client