Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: sOeyVraKgp5C8qBXlG/S1w+Fpe4XDiRySWiuu8+IIpk=
Subject key identifier: B4:7B:E8:55:ED:2F:C0:E5:C3:6A:AB:CD:ED:0C:9F:24:16:48:60:C0
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019D99990BA39C701C870AC292DEE619BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: SWAVY4E1M5+SVFZtWKNOPP0GgHtscvdHZ8lRxbPHzDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0b:a3:9c:70:1c:87:0a:c2:92:de:e6:19:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=b47be855ed2fc0e5c36aabcded0c9f24164860c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:44:8a:43:72:25:77:44:9b:c1:e7:ed:77:bb:
52:da:bd:fb:09:31:cf:da:f1:8a:9e:8e:6c:6c:92:
6a:52:a7:95:32:2d:36:9f:f8:45:8d:74:39:d6:03:
57:ee:78:fd:7d:dc:c9:07:da:9b:a9:68:66:c9:4f:
12:ef:05:c4:b6:9b:31:3d:6e:1c:27:58:4c:27:09:
b8:fe:8e:9a:f6:03:85:5f:08:99:26:d9:7c:a2:06:
4d:8c:a8:02:5f:a7:73:d5:ea:74:a6:80:8e:b5:1d:
48:7e:3d:23:d2:a6:fb:06:57:66:96:0d:ba:fc:6e:
71:1d:b4:49:f8:2c:c2:cb:8d:16:56:cb:e5:bd:2d:
12:e8:ac:e4:a0:43:c8:f7:b5:1f:d6:4c:7e:8c:9d:
98:05:61:f5:43:ea:cb:fe:8f:e6:8a:9c:f3:37:ec:
da:3f:90:60:b1:25:d5:68:2c:3f:0c:63:6f:ee:c9:
27:49:d6:53:ec:2d:9e:3f:df:1d:11:58:b1:0f:8f:
16:99:d6:20:8b:f0:c7:0c:d4:fb:d9:8c:48:a9:95:
2b:b4:3d:17:62:dd:69:47:0f:f2:f7:52:5f:bd:6a:
31:a1:9c:16:2f:61:56:d1:fe:17:f7:db:47:e3:41:
8b:03:bb:16:64:1f:77:33:72:6d:a6:d9:0a:c7:0f:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:E8:55:ED:2F:C0:E5:C3:6A:AB:CD:ED:0C:9F:24:16:48:60:C0
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:9e:d7:17:bf:27:d9:cc:b8:86:9f:2c:bb:46:ef:0a:3f:
ab:c8:14:ac:8a:94:98:12:0b:d5:c0:a9:c7:d0:c9:44:b0:bc:
51:0f:0e:f9:49:27:e3:99:61:a9:35:a4:64:d8:1c:96:c9:1a:
32:a3:36:f8:21:81:65:0e:6d:64:0b:9f:a9:06:01:04:d3:5a:
22:4f:3f:f2:39:67:cd:1f:86:46:72:73:23:1e:f9:d6:24:77:
a7:cc:b9:3f:11:c4:78:a0:95:51:d3:f8:cc:da:67:ca:91:0a:
7c:ca:1f:99:6d:53:79:f6:66:3c:03:ec:16:21:52:b5:0e:94:
ca:d5:c2:53:71:a9:ed:27:b6:97:2f:d6:e3:78:06:99:30:39:
63:00:d0:99:11:13:22:d5:51:0e:e4:e4:5a:26:5f:5d:de:c0:
4e:00:f7:24:ba:a0:47:14:f8:b0:77:00:da:6e:4c:f8:b4:c2:
e9:65:50:af:31:1b:00:a2:4b:92:63:b6:b1:0f:f6:3a:3c:dc:
08:53:e8:b7:a3:d6:ea:81:83:a7:0f:e2:7a:c1:f3:30:16:f6:
44:22:4c:4f:88:9e:88:8b:32:3e:eb:6b:4b:00:c0:ea:f5:38:
cf:10:c1:55:d1:94:20:4a:51:ce:ae:0e:cb:7b:11:54:76:80:
62:b3:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:57 2026 by rpki-client