Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: 6vcQyedbgSfzswFeU8iy+V5RQYjeb6DgcUijiE/6X0A=
Subject key identifier: 68:38:26:A1:AE:3A:81:7D:F8:E3:47:F8:C9:10:C1:A0:CD:CD:0F:C2
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019D9AE2B83EF70103CCEA0E294E23EC06C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0B78
Signing time: Fri 17 Apr 2026 10:00:42 +0000
Manifest this update: Fri 17 Apr 2026 10:00:42 +0000
Manifest next update: Sat 18 Apr 2026 10:00:42 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: BQh0eY/Q186DgJ8GRFlHG5s/oZ98dn7qkk4Ka2AklCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b8:3e:f7:01:03:cc:ea:0e:29:4e:23:ec:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Apr 17 10:00:42 2026 GMT
Not After : Apr 18 10:00:42 2026 GMT
Subject: CN=683826a1ae3a817df8e347f8c910c1a0cdcd0fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:51:2f:e6:13:1a:a0:56:51:28:d0:72:e3:
02:c4:15:e2:3b:19:2a:4b:76:fc:f3:6f:4b:59:fc:
0e:01:53:cd:ce:e4:34:4e:c3:8c:0c:c3:7c:64:06:
6f:e9:91:c3:0e:59:42:40:49:a3:4d:09:94:41:31:
d5:c0:cf:69:b9:b2:ef:c7:f3:72:96:08:da:17:3e:
d9:28:84:1a:b5:ea:34:77:d1:e2:2e:62:fc:02:72:
1e:11:99:d1:f3:65:e1:d8:af:2e:0c:41:fd:d2:01:
12:41:54:80:ee:1c:7b:6e:1b:d9:22:05:fe:6a:61:
a3:cc:ec:d3:5c:94:17:c6:f5:e8:71:ef:5d:49:cd:
65:8b:40:17:e7:b7:1b:c4:02:a8:14:46:67:6e:50:
d4:93:18:a6:4f:32:19:24:e7:0f:71:7f:9a:0b:e1:
e1:6a:6e:a0:31:d7:a8:04:d5:e6:2d:8c:bb:c1:e0:
64:5d:95:52:2f:b6:aa:4d:c3:a3:88:b3:c5:4a:bb:
d9:46:e3:07:ee:0a:c7:a7:61:5b:e4:3f:dd:65:ca:
5f:d2:e3:f6:cb:16:a0:bf:a1:5a:a7:ff:a2:01:ec:
5c:5c:00:6d:6b:da:86:46:37:34:47:ac:07:fc:62:
86:da:74:d0:3e:66:86:3b:1a:c5:90:b4:af:22:cf:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:26:A1:AE:3A:81:7D:F8:E3:47:F8:C9:10:C1:A0:CD:CD:0F:C2
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:dc:84:d6:8c:10:e5:4a:0b:d6:ed:77:e1:93:c0:1e:1a:
72:c7:95:60:44:32:f7:a6:e8:3b:c7:b6:94:9f:27:aa:20:53:
d6:2a:d1:d8:cc:bb:0b:72:30:e8:ec:81:f4:ee:50:c0:c6:90:
c5:1a:1b:1a:d6:9f:0d:ff:14:45:c3:19:9a:0b:4a:c3:d2:ba:
56:c0:38:6e:0a:73:3a:ab:c2:38:4d:c6:6b:2a:68:9e:e4:18:
d3:44:66:84:cd:f7:7b:1a:4a:7d:0a:e4:fc:3b:ce:f0:d6:63:
5e:24:cf:46:eb:44:78:a6:0a:c3:5a:33:5e:cd:91:36:bf:60:
d8:5b:a9:64:5c:f0:7c:f3:09:80:a2:11:0d:29:9b:20:2b:2c:
dd:5f:c5:b9:3d:dc:fb:7d:f9:dc:e0:28:d4:a0:18:c6:6b:05:
12:1d:96:f8:cd:48:e0:1e:47:54:52:42:7e:4a:2d:e1:3d:3d:
73:c3:8e:c4:bf:f0:5f:f4:4c:6a:a7:ee:41:5b:a8:01:86:15:
e7:6b:9e:78:11:d5:ab:f4:4f:62:c8:f7:be:2b:29:0b:c9:aa:
6f:72:27:a7:fa:36:09:d1:8a:08:12:e2:b5:ac:3f:37:bf:8a:
af:8c:27:ad:39:3e:de:36:63:43:9e:54:1a:e8:e1:4e:fb:b3:
73:26:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:27 2026 by rpki-client