Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: Uwm3jtj/Leu2BzBWsxZ9BD4w86Br464sqcBCIyXaI0E=
Subject key identifier: 00:24:1A:97:27:2B:11:65:D5:7E:03:7E:A2:03:E5:D1:22:CB:47:FF
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 019DA3790F44C80A82BE1EB61743732D7902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:53 +0000
Manifest this update: Sun 19 Apr 2026 02:01:53 +0000
Manifest next update: Mon 20 Apr 2026 02:01:53 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: MqckTikYZJySX9vUMDDobyZRcRaYM/3X4MJERiMF5ww=)
2: tFjiAtBO9U55a6Xkgw-0Lewen6w.roa (hash: Ab4KI/0wBP7Je2+K1QY9msj3vGabiImZGpVEtrWZ558=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:0f:44:c8:0a:82:be:1e:b6:17:43:73:2d:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Apr 19 02:01:53 2026 GMT
Not After : Apr 20 02:01:53 2026 GMT
Subject: CN=00241a97272b1165d57e037ea203e5d122cb47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:c3:9f:5f:63:f3:fa:ed:8c:3b:7b:1d:fd:
83:d8:47:c1:4b:e7:99:ea:0e:25:94:75:48:2e:aa:
0f:46:fb:0e:21:22:60:1b:ef:52:d4:32:98:b4:99:
48:b1:4a:83:b1:1f:9a:b6:93:d3:2d:91:28:01:40:
be:76:1e:ad:2f:8d:76:a5:60:5b:f7:89:56:ff:ee:
f6:8c:b8:51:84:ac:d6:40:ed:f6:b3:43:1b:a9:18:
da:07:7f:f1:af:2a:7b:fb:7e:e7:61:e1:9b:69:30:
5a:5b:fd:52:c9:cb:dd:2b:03:3d:16:3b:a5:2b:90:
c2:77:84:2f:45:fb:c3:39:76:9b:03:5c:d1:50:60:
db:60:e6:1c:ca:5e:38:7e:7b:e1:78:02:7a:f2:85:
04:c7:4c:b1:e6:0b:d2:76:4c:72:eb:eb:6b:5a:46:
35:f6:36:f6:08:f6:34:6b:a4:79:f3:f8:7d:ff:50:
eb:10:dc:59:5f:4d:3e:b3:ca:7a:cd:7b:d3:c9:0d:
74:4d:c5:09:7e:bc:33:b0:50:08:e3:20:12:87:58:
b2:ad:7e:91:30:df:33:e0:b2:16:99:1c:36:da:3d:
9c:d5:f1:b9:16:b9:40:5e:b5:fb:cb:a8:1a:84:4f:
1e:81:ee:75:e4:83:2e:c1:e2:59:88:85:c3:75:20:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:1A:97:27:2B:11:65:D5:7E:03:7E:A2:03:E5:D1:22:CB:47:FF
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:2d:4d:50:48:23:9a:1c:be:05:bb:01:fa:9c:b1:8b:a4:
61:01:b8:3f:d0:90:27:4d:58:d5:bd:32:a5:01:4b:12:61:65:
0c:9e:00:e3:8d:cf:2c:7a:8b:51:0a:1c:37:51:a6:d0:ea:0a:
b3:0b:8f:5f:09:69:46:7e:bd:50:de:07:d1:fe:25:52:a2:04:
df:16:c3:f4:7b:a2:de:41:c5:0b:79:62:69:b0:15:9b:bb:f1:
bf:b8:48:3b:73:97:a3:45:0d:06:da:13:45:a9:37:78:78:c2:
1a:f1:cd:52:23:4b:d0:f3:57:4b:28:e9:b6:e5:e9:40:7b:7d:
ae:e2:42:af:05:ba:0f:41:6c:0b:cd:31:0a:8d:0d:05:e2:c0:
31:12:c3:ea:6d:12:05:64:5b:26:01:5a:04:0c:b9:c3:fc:ed:
d2:a9:0e:b1:69:5a:a0:82:d6:9b:15:d4:67:57:6d:25:54:49:
77:a5:6a:bb:6c:bf:cc:53:44:5f:99:34:19:a7:98:e3:06:61:
08:32:82:4d:da:34:ef:7a:3d:12:4b:d7:13:4e:89:2b:99:40:
92:89:4b:24:62:16:98:1a:6e:73:2a:57:53:2e:16:02:0b:01:
87:82:57:3d:b4:3a:06:4c:ea:9a:72:77:a3:81:7e:e7:d4:73:
0e:0d:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:01 2026 by rpki-client