Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: bEhZNFfOhkalzFVuDLR41XFDdn8WX1fZvaEviRtABR8=
Subject key identifier: 39:64:5F:9A:80:BF:C5:30:9B:31:94:66:4C:F4:28:28:D3:CA:84:89
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019D992B83C86749A7A02F197544AF27973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 123F
Signing time: Fri 17 Apr 2026 02:00:58 +0000
Manifest this update: Fri 17 Apr 2026 02:00:58 +0000
Manifest next update: Sat 18 Apr 2026 02:00:58 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: AwY9LGZpYpKKWGtghhayBgdbT8z/OX89L5FCOT2OBtI=)
2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:83:c8:67:49:a7:a0:2f:19:75:44:af:27:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Apr 17 02:00:58 2026 GMT
Not After : Apr 18 02:00:58 2026 GMT
Subject: CN=39645f9a80bfc5309b3194664cf42828d3ca8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:96:e9:4c:1e:b2:5f:ab:2d:35:c0:8d:7c:
fa:13:ac:dd:7f:e3:ab:f9:79:66:d0:f7:cb:5f:9d:
60:e7:2e:43:31:f0:a7:50:da:89:38:22:3e:1c:ee:
d7:cc:ac:cd:ee:88:60:dd:17:ec:4c:a6:8c:d3:79:
f6:ae:b0:18:c4:71:b3:7b:19:08:52:68:b7:3c:93:
ed:81:fd:53:12:b8:3e:21:9f:5d:9b:5a:54:d1:a5:
d2:2d:35:18:81:0d:28:db:0b:7a:0a:95:ef:b4:d5:
3a:f6:c9:d8:80:32:7b:d2:71:57:b5:d0:60:d5:21:
b3:48:fe:08:07:dd:ca:56:13:21:92:c9:5f:8b:29:
7b:e5:05:38:74:fc:d3:26:28:91:27:74:ce:3c:da:
c0:01:40:e1:28:39:9d:96:bc:52:e6:d0:45:34:0f:
c0:22:ca:5c:df:e4:5c:eb:04:80:e7:ef:b2:c2:c7:
15:0e:11:c5:f4:1c:55:f8:3d:86:71:a9:2b:3b:e5:
81:71:f5:4d:f6:ea:88:8c:d1:a8:a7:d4:4f:d5:c3:
98:1f:8b:65:84:8d:5d:21:3f:f1:ce:0e:55:ab:fb:
44:d3:c5:a7:17:6d:29:0b:d6:1b:69:9c:a6:6f:7e:
c7:4f:de:d8:56:8b:47:21:2b:8b:b0:16:30:bc:b6:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:5F:9A:80:BF:C5:30:9B:31:94:66:4C:F4:28:28:D3:CA:84:89
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:f2:07:b0:02:bb:2e:0e:db:7b:81:0c:40:4f:e8:8a:2f:
42:57:31:fa:dc:2b:7c:2d:13:f3:e7:75:94:f5:07:38:e2:d0:
30:f3:17:2f:da:17:76:7a:d8:ac:65:d5:66:03:84:1f:40:a5:
a0:c1:91:bb:4c:48:87:23:e4:98:17:9a:65:7f:b9:b2:fd:c8:
e9:e1:10:89:7b:38:ca:af:ac:33:c2:ef:2a:8b:08:84:2d:bc:
3a:67:36:87:93:41:bd:cc:65:f2:ac:0a:5d:05:5f:c4:75:2b:
16:f3:a4:00:c6:8f:eb:c8:ff:a3:66:40:bc:f6:4b:35:1c:eb:
78:3b:8b:5b:b0:38:cd:bf:29:a5:3c:7d:07:dd:26:a7:fb:b1:
7e:91:a3:32:60:ae:b8:ad:e8:92:82:19:90:8d:51:0f:0a:0b:
68:58:c1:96:45:f2:06:38:a9:92:a2:87:17:d8:d5:5a:83:ec:
da:f8:7e:36:f6:70:a1:de:5b:ab:5c:13:83:35:c2:64:43:a5:
2a:d7:cc:44:d7:ce:6b:4b:9a:70:fc:ae:fe:f2:34:9a:19:75:
7f:dd:c9:13:f5:7f:04:50:d7:8a:ed:76:3b:d7:50:ad:63:48:
d1:8f:21:61:c5:20:bc:e1:a4:b4:16:1b:af:a0:4b:98:23:11:
21:f8:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:12 2026 by rpki-client