Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: edt7m7qWOkUuBz+gglkSlXW1INi1E1Iyi5ZvunzY4Es=
Subject key identifier: DF:05:94:5B:2A:12:22:60:31:B5:26:9F:43:5C:BF:99:4F:3A:60:85
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 019D984FCA4DD036256F9812790D6787D895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 0B3F
Signing time: Thu 16 Apr 2026 22:00:58 +0000
Manifest this update: Thu 16 Apr 2026 22:00:58 +0000
Manifest next update: Fri 17 Apr 2026 22:00:58 +0000
Files and hashes: 1: 7vJiOOFZVIBu8OTi7uB4Ub56tv0.roa (hash: 4nXeb8eJUJSSZu0hz1s4is8W6GROXevPEkNgkVkf91Y=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: E0CUW8PssHDlh2qg3hX/ZrhKZ0pxUYWxS7pjS8A4xo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ca:4d:d0:36:25:6f:98:12:79:0d:67:87:d8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Apr 16 22:00:58 2026 GMT
Not After : Apr 17 22:00:58 2026 GMT
Subject: CN=df05945b2a12226031b5269f435cbf994f3a6085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:35:41:f9:30:20:64:d1:ab:58:87:a7:e5:
41:dc:64:c3:b4:f7:f1:7f:f3:87:48:6a:f8:7f:3a:
9e:1e:3d:56:de:82:94:16:b0:3f:0a:f0:07:30:ce:
27:89:d7:16:cf:e5:e8:1a:6f:04:a1:d7:64:3a:84:
b3:d7:fd:02:9a:4a:11:cb:c8:b4:79:09:1e:2e:84:
d8:88:b8:2f:62:43:22:0c:a3:59:24:58:3c:af:11:
c2:50:3f:fa:77:a3:60:4d:4d:5c:af:ea:a0:16:ae:
36:f8:e8:bf:58:3c:c4:49:bf:e9:db:41:5e:0c:a9:
a8:65:48:81:57:68:97:7a:a2:60:b5:fe:a2:2c:a6:
b9:87:ae:9c:77:d1:d9:e1:f3:46:d0:6a:a9:23:1c:
09:42:82:7d:f3:34:5d:23:5e:05:ab:e9:00:d1:d7:
a6:e9:2f:39:d7:27:28:f0:79:ab:40:ef:ac:70:bf:
73:a7:7a:1d:28:7c:3a:98:ca:ab:59:c2:a9:2e:b3:
aa:88:b9:60:95:ba:05:9d:03:06:fb:ab:f6:16:76:
b3:b3:99:a9:47:35:50:f7:9f:00:26:96:e6:e5:cb:
8b:8a:0f:d0:0c:a4:6a:27:aa:8c:c2:bc:4b:1e:15:
8e:0f:0d:24:c0:cf:fa:d6:2f:9b:ec:f0:d6:76:30:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:94:5B:2A:12:22:60:31:B5:26:9F:43:5C:BF:99:4F:3A:60:85
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:71:48:15:e1:9f:a8:34:10:04:3c:ef:d4:9f:a6:5f:3d:83:
d4:91:d8:aa:4d:a1:84:4c:6c:c2:9d:9f:6e:cb:a1:30:07:9a:
c1:a3:dd:5f:48:4c:2a:fa:ea:20:ce:7a:26:c9:ef:88:ca:57:
20:35:f9:5a:64:b3:19:c8:e9:5b:54:21:ed:49:8c:a2:e0:b6:
d6:aa:e5:80:29:65:92:aa:e9:7c:3c:4e:12:c0:f7:2a:5a:75:
af:7b:b6:9b:0e:0f:32:2d:0b:3f:b8:c3:6e:65:f5:b2:c2:fd:
43:ca:90:ad:4d:9b:95:7d:01:4f:3d:fa:2d:8b:69:55:c2:e7:
5d:a8:a0:d2:5a:16:8d:cb:70:93:7c:82:03:81:b5:1b:45:64:
b8:7e:0a:6e:40:97:a3:64:b5:db:f0:5c:1c:c0:af:b5:69:1f:
ff:74:40:19:e5:76:34:9a:f3:fe:49:6b:f4:e0:1b:f4:5a:c8:
27:18:51:6a:2f:f3:16:44:6a:93:68:1e:00:2f:b2:62:a4:f2:
ef:c6:04:d8:4c:6b:f9:33:ec:55:27:18:d4:7b:5f:4f:56:68:
58:d4:ce:db:a7:89:15:7e:72:af:e4:7b:00:3b:68:2f:13:21:
ca:6b:8b:8d:00:fc:ca:7a:bc:60:9e:3a:c6:7b:ea:10:eb:b7:
7b:54:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:08 2026 by rpki-client