Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: NOcaHB+emfIsWliYfxycxwbzG1xNuVdXelAoLBccDeM=
Subject key identifier: D4:78:38:AB:2C:4B:93:FA:65:19:60:86:E7:12:A6:2C:97:04:E0:8F
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019DA3AEF25A40833E22CA2501B80B5BBF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 03:00:44 +0000
Manifest this update: Sun 19 Apr 2026 03:00:44 +0000
Manifest next update: Mon 20 Apr 2026 03:00:44 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: tpUNrPF3K7RKxLGvkDkkNDVFAl6+UBmxSAIefL2Lxas=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:f2:5a:40:83:3e:22:ca:25:01:b8:0b:5b:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Apr 19 03:00:44 2026 GMT
Not After : Apr 20 03:00:44 2026 GMT
Subject: CN=d47838ab2c4b93fa65196086e712a62c9704e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:fd:c4:6a:45:e6:60:58:8a:56:1d:ea:99:
89:48:bf:56:bd:fd:a5:f1:5e:bb:54:c3:7e:22:ee:
fa:40:ad:3e:34:46:74:ab:86:b4:2b:a3:aa:fb:b6:
c0:98:21:e9:c2:3d:90:2b:24:58:dd:2d:24:8d:f9:
bf:20:14:14:a4:06:bd:a9:c1:51:49:9f:ab:30:c3:
b2:8b:7e:eb:71:02:59:4c:f2:e3:75:05:41:41:7b:
66:66:a2:bf:33:11:d0:7b:12:89:83:d8:c9:d5:e3:
85:6e:e7:6a:a9:f5:93:57:0c:ba:1f:14:3a:d5:b2:
50:b1:3e:84:68:ee:82:1a:f3:b5:a8:af:19:bd:57:
b8:49:dc:ea:f3:82:4f:6e:df:87:73:b9:7e:8a:53:
55:06:f7:d9:f5:54:24:9d:30:39:6c:a6:a4:26:0c:
10:3b:b6:89:7d:52:c1:23:04:29:9c:af:80:5f:67:
b5:38:54:8d:a5:e6:c3:58:65:b1:db:67:77:d7:82:
0c:99:7b:35:2e:ae:b6:1b:cc:ea:9e:9a:36:24:49:
1e:28:ed:1e:dc:1b:72:05:77:16:b2:ff:10:22:43:
16:63:ca:18:e6:f3:53:8c:32:63:93:39:89:8d:59:
d5:f9:eb:45:82:e2:6c:08:e3:cd:10:4d:fc:7b:27:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:38:AB:2C:4B:93:FA:65:19:60:86:E7:12:A6:2C:97:04:E0:8F
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:f2:38:c9:3f:ca:d1:e7:61:7c:10:1f:32:45:3e:c1:f5:
b7:44:2b:b2:a1:38:db:49:30:00:7f:10:76:b7:a5:42:5b:0a:
5e:7b:7c:0a:4b:b0:b7:3f:60:5b:20:da:ab:18:ce:e1:3d:1a:
8a:02:58:6f:dc:f3:d8:c6:64:3c:b3:8c:66:d9:ac:50:a9:ca:
76:80:aa:15:25:b4:d5:de:58:11:a0:3d:0f:b6:48:70:50:d6:
3a:68:3e:d1:c6:f6:75:91:c1:e2:f0:9a:90:59:4f:45:04:d9:
7e:6c:31:1d:25:09:4c:5e:3b:63:3a:f4:fe:e8:97:c3:a6:4e:
eb:b1:7a:c8:6d:54:46:51:4f:cb:a6:f0:e0:9a:13:d1:7b:2f:
13:d5:50:6e:8a:37:f8:25:ab:d4:c4:10:13:81:98:fa:6d:51:
7e:a4:c5:4a:08:d1:87:b5:76:49:bf:22:46:08:00:e0:3a:8f:
b1:32:f0:b4:99:65:c5:26:1e:58:89:fb:0b:ea:e2:3f:a6:29:
cd:13:c4:be:61:e0:c9:9e:ad:9c:df:ec:f2:0a:96:6f:61:be:
ee:11:62:1f:ee:07:4b:5f:32:c1:ce:6d:b6:07:b7:5c:0e:97:
4f:f0:16:c7:78:8e:f9:07:5a:a8:dd:b9:3c:7c:04:ab:c7:8d:
29:20:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:43 2026 by rpki-client