Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: /fEiswMy7EtRcTOmoMLH6q/bOsJyj9boo84ylH0VqeA=
Subject key identifier: 76:87:82:61:B8:60:0C:3C:BC:00:7E:61:DD:E1:6C:19:EB:73:99:6F
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019D9A75151B445753BF2E931A208C0288B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: GrA9S7xlHAPjgs2OdLw4SAFuEdtU4bER7GGT6GyjPFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:15:1b:44:57:53:bf:2e:93:1a:20:8c:02:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=76878261b8600c3cbc007e61dde16c19eb73996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:29:24:52:14:1e:a2:6e:83:5b:09:aa:a4:
64:bc:76:ff:5d:85:72:e2:43:04:90:00:6a:17:9c:
6d:3a:85:f9:68:d9:9b:7a:a6:07:2d:16:f0:1d:83:
a1:e1:10:7b:74:76:61:91:a2:b6:a4:44:46:2f:8c:
0f:29:a2:cc:b9:f4:c4:88:fd:50:c1:1f:01:31:3d:
8f:85:f1:59:b5:4d:a0:6e:b5:25:f5:57:cb:da:be:
e2:0a:29:99:a9:d9:c1:8e:f4:9d:17:86:79:bb:e4:
a0:d1:a7:c9:85:69:d9:16:e8:cd:31:76:ff:a7:45:
2d:48:cd:01:20:d1:61:9b:51:d3:ee:84:6f:83:cd:
6c:e5:19:18:f5:b3:4b:7f:4f:95:81:f5:22:05:1b:
60:a9:c0:96:b1:2d:c5:a3:dd:29:eb:8e:ed:85:56:
e8:ed:34:79:b6:9f:26:d7:1e:da:26:b2:97:e9:b7:
33:a4:a4:98:11:b4:b9:23:5e:27:88:e5:fb:72:83:
f7:71:b6:61:78:0e:67:f3:d3:ad:be:d0:13:09:37:
c6:73:cf:42:3f:2f:b7:6c:e8:c0:d0:8e:e8:df:01:
dd:b9:d0:18:93:9d:6e:27:4b:27:52:83:86:30:4f:
30:6e:1b:7a:20:60:de:76:21:20:f1:87:41:bb:40:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:82:61:B8:60:0C:3C:BC:00:7E:61:DD:E1:6C:19:EB:73:99:6F
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ac:0b:23:79:90:56:f2:95:25:f0:ef:e7:17:c8:da:d8:b0:
ff:5e:46:4f:da:9f:64:62:4b:f3:df:3f:a9:fb:f0:75:4b:8f:
9e:cd:78:ef:da:88:60:b4:b9:69:ea:09:35:6f:55:ba:ac:d3:
8a:d2:fc:8e:39:2e:0e:22:e1:fb:7b:a0:3e:84:1e:20:03:9d:
60:51:b1:d3:c6:2f:b5:44:6f:eb:02:05:92:5a:ea:54:d5:c3:
0b:e3:92:77:95:88:3d:64:b7:43:a5:9a:89:b4:95:02:38:fd:
ca:3d:9d:b0:18:b8:98:38:ec:40:c9:89:bc:86:f9:b4:74:0a:
35:f8:31:71:f0:ea:c4:66:92:96:32:ca:eb:88:09:23:31:da:
75:ca:01:45:ae:04:fb:88:16:72:ca:1e:41:53:49:fe:06:0f:
11:74:27:41:76:41:3a:c9:33:b3:e4:60:68:77:5e:ff:47:ed:
22:09:cb:fc:3f:5b:ee:c4:98:ff:01:16:d2:34:0e:de:58:e7:
56:20:a0:1a:1a:b9:87:df:19:81:ef:d1:45:3e:07:31:d5:9a:
60:1a:55:84:7e:b5:64:37:93:7d:24:ac:9f:ee:ad:e2:d0:4f:
75:dc:37:c7:9c:62:97:2f:0a:0f:89:14:7c:4a:8c:25:3a:76:
da:4a:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:02 2026 by rpki-client