Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: nFW+cXbVoN+fjy+RSzKFf5k/2SdDmNDjP6d9ATLQ7Kk=
Subject key identifier: 67:D9:8E:3F:66:35:B4:E2:72:EB:5B:F4:1A:2E:DC:C2:7C:2A:5A:A7
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019D99D04D7E8D899D62825710F8C02B82E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: aJRF9Znf0Rhnpb9tpcdkupvOf5SpxA9CCXFcJnjiy50=)
2: mc9vgt48FDSSjfdsSGOMMwU_Xnc.roa (hash: 7YStYGH0X3lXXsv/wC32bvyXMwAf6g2zLLXt60k5Dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4d:7e:8d:89:9d:62:82:57:10:f8:c0:2b:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=67d98e3f6635b4e272eb5bf41a2edcc27c2a5aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:6f:47:32:fb:0b:ec:19:cc:27:2c:8a:23:
e6:d9:34:ef:e3:00:f6:a3:02:a7:d1:84:12:42:27:
40:9c:8a:48:0c:f0:b4:9f:8a:6e:bb:37:d3:d6:3b:
2a:91:d9:6b:95:8b:67:ab:03:05:16:c8:d2:72:e7:
d2:90:44:f4:7b:eb:a4:60:94:06:97:e8:61:13:bb:
5c:57:f9:7c:49:89:04:2a:01:26:e7:c8:58:fa:77:
1c:08:9d:ef:e7:cf:d3:47:c0:fd:b0:ad:c5:c5:8a:
17:ac:ce:17:87:34:0b:cc:21:27:6a:32:42:d2:97:
cd:4b:b4:2a:f2:b0:71:29:8c:f4:0a:9d:66:a5:ac:
c7:90:e3:c7:4b:6f:f1:69:fc:a9:a6:08:2b:42:6b:
ec:2e:12:5e:f8:73:56:10:74:a9:88:88:2b:20:05:
99:40:3f:85:bb:69:13:04:2d:5b:60:1e:b7:98:d4:
81:24:21:39:73:77:51:c3:b4:4b:06:c9:12:78:8c:
de:16:3d:d1:bd:7e:e5:cf:36:dd:45:af:eb:d1:e0:
24:53:0f:6e:6f:5b:e5:12:d4:71:25:9c:02:1c:b6:
d8:75:b0:6a:3c:ed:00:c5:ed:22:65:dc:25:af:4f:
a0:d8:19:99:78:25:89:00:4d:42:28:c4:2d:3e:4c:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:8E:3F:66:35:B4:E2:72:EB:5B:F4:1A:2E:DC:C2:7C:2A:5A:A7
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:dd:14:55:22:62:44:02:3c:3e:08:4c:e2:da:74:87:b8:
21:ed:e8:6b:0a:e3:87:e8:bc:9b:17:78:f7:05:0d:91:42:51:
af:2a:e7:8e:54:46:99:5a:4b:ab:c2:5c:fe:13:2c:eb:3d:07:
3b:1b:89:d1:78:f0:7b:9e:1c:91:b4:25:d0:ac:cb:86:c7:67:
dd:f7:04:a2:20:55:e0:ca:f7:c4:64:2c:cf:a1:14:e7:46:15:
82:20:2f:1b:6e:40:4b:98:a4:af:90:02:5e:47:47:3c:71:b3:
ea:c0:50:cd:ac:69:04:a1:ac:c0:75:27:81:ff:d5:43:2e:b4:
d9:66:c9:33:86:e9:90:5d:bf:54:05:e4:03:2e:e9:af:d8:e2:
9c:73:81:78:13:21:42:bd:69:5a:e3:33:4c:30:59:ac:ef:72:
d4:12:cc:9c:a7:84:bf:08:0d:bc:fe:22:e2:89:38:1f:ed:4f:
80:31:a0:ee:70:41:68:eb:07:99:db:66:27:d2:7d:e5:bd:d0:
52:e4:39:da:f5:d1:25:9d:39:fc:3e:7b:11:cd:17:60:cf:9d:
05:dc:da:71:52:4a:a7:84:15:81:cd:f0:f4:37:b1:1a:09:4b:
76:9f:02:5f:3f:ee:fb:e9:1b:11:50:f1:38:cf:b2:b0:c7:61:
98:b7:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:48 2026 by rpki-client