Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: We86bZ5XCoSyByTDM3lbARSZg+Ps2OrKSKE/kh+g3DM=
Subject key identifier: 7F:F2:5C:70:23:0E:29:5F:E8:F3:7C:BA:D8:3F:9E:B8:01:CD:93:E2
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019D9BBE95AAB24701A898885E4AF460C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 14:00:51 +0000
Manifest this update: Fri 17 Apr 2026 14:00:51 +0000
Manifest next update: Sat 18 Apr 2026 14:00:51 +0000
Files and hashes: 1: 7f9HWbHfqhKkMVw2UaE7IDcT5xA.roa (hash: MU6q45G8RIkk6hXpuabfnJu9W348nwIp4jrNhUdqsUE=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: No45OACL8siYQeKmDA5YuQV+0kdJ6Nqq9uCN6Kl6+bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:95:aa:b2:47:01:a8:98:88:5e:4a:f4:60:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Apr 17 14:00:51 2026 GMT
Not After : Apr 18 14:00:51 2026 GMT
Subject: CN=7ff25c70230e295fe8f37cbad83f9eb801cd93e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:bd:6e:bf:a2:5b:c5:4d:d2:85:f6:aa:dc:
e3:72:e2:40:c6:7e:f9:1d:56:fb:68:00:89:b4:a4:
3c:fa:3d:cf:72:5a:75:ea:92:92:8f:03:b8:97:37:
eb:a6:6e:dd:bb:d8:8a:98:25:a5:29:2b:de:a8:90:
1c:1d:ad:8f:e8:6f:20:1f:00:48:a3:82:60:41:1c:
cd:5f:b9:e5:88:ab:3c:0f:ef:cc:3c:6e:bd:e0:7a:
1e:af:63:15:6d:85:45:e3:f9:c0:3c:68:a5:79:b8:
74:8c:d7:94:fe:7e:5e:81:36:20:e0:61:bc:b1:44:
d2:31:a9:44:a0:54:60:6c:12:38:70:0a:b6:4a:80:
27:c5:c8:f3:61:f6:0e:f6:32:5e:bb:fc:86:cc:b0:
15:24:a7:33:68:95:c8:3f:13:f2:97:80:70:c5:ae:
eb:e0:a4:9b:32:20:df:93:2d:69:a4:02:f4:c4:87:
a3:4e:96:01:0e:6a:e6:82:cc:33:dd:43:f1:06:f1:
08:25:67:05:ed:12:b6:ab:5b:6e:d2:7c:98:86:2d:
b0:3d:31:fa:c8:be:32:f5:0f:73:10:0f:40:e5:ee:
9a:45:eb:8a:15:45:d8:54:a4:30:ce:9e:e6:a1:4b:
1d:aa:d2:74:71:37:f4:4b:51:43:57:4e:8d:e7:44:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:5C:70:23:0E:29:5F:E8:F3:7C:BA:D8:3F:9E:B8:01:CD:93:E2
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c8:59:95:25:93:2a:ce:75:3d:35:55:0f:80:7b:5e:33:db:
0e:c0:7b:e5:1e:e6:22:3a:f7:94:d8:b5:d9:81:41:95:2b:99:
df:cb:cf:47:c7:53:45:29:ae:e2:1e:fa:b0:56:d4:6a:f2:17:
6d:d6:3d:22:2d:ad:50:1b:cb:14:bf:7c:e7:dc:ed:fd:f9:98:
1c:73:c3:77:08:8d:c1:30:50:f9:a1:11:6c:61:3c:47:16:a5:
9b:71:b7:c2:c2:57:72:68:ee:69:38:fe:00:f4:98:77:4f:90:
6f:d3:d2:75:5c:e4:91:3e:4e:8c:54:b5:94:1b:8f:47:b0:c7:
06:18:f5:54:cc:bb:48:a9:00:be:a5:ad:b2:41:5e:5f:a1:b0:
99:ab:bc:9e:a8:75:ce:44:2e:2b:be:33:b8:4b:50:c9:96:01:
70:c4:29:a8:d9:d2:99:22:5f:cf:0d:ed:20:5d:57:76:0c:71:
9b:f8:0e:54:cd:e3:5e:a4:56:09:16:3b:46:74:08:c4:d7:04:
90:ff:41:c5:90:73:e2:04:8e:34:c3:66:e9:ab:2c:ec:c5:2b:
cb:39:40:e4:57:7f:9e:3d:93:04:5e:7a:48:b9:55:47:de:ac:
59:f8:de:b0:3d:36:a7:2c:7f:92:97:56:95:72:da:44:00:10:
e8:c9:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:55 2026 by rpki-client