
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: j55nejAMmAdTvKWGvlOu5O8TJPDC3dt+Ixy67vf/iA8=
Subject key identifier: E6:98:68:05:80:65:B6:1B:9D:1D:99:C9:10:03:EA:69:AA:65:60:6C
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019D992B46B56B29618ADCACDF251584DF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0558
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: /k+pt/ZhT34x8GJd3Da0+WWc20Wae8xsbVO2ZhPrJgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:46:b5:6b:29:61:8a:dc:ac:df:25:15:84:df:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=e69868058065b61b9d1d99c91003ea69aa65606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:11:d6:fb:c7:d5:76:25:16:ce:93:f7:93:
aa:60:7e:8b:d7:95:2a:8e:48:ca:6e:4b:c8:60:a9:
bb:40:89:80:a7:d9:e5:a6:ee:82:c6:62:b8:38:63:
74:00:07:7c:57:b2:6f:bb:f1:1d:68:86:2f:db:0d:
d9:2e:36:2b:f5:d4:97:9d:64:15:e2:49:a0:e5:2d:
e5:77:e2:f2:b4:7c:05:41:bf:c9:59:6e:8c:e3:3e:
29:a3:0d:bc:57:93:c6:f0:7b:dd:8d:1d:08:9f:dd:
4f:35:73:02:51:26:9a:be:53:46:43:87:a2:86:0d:
01:50:91:fa:67:b4:2b:d9:dd:9f:d4:c8:fb:9e:f2:
c0:e2:64:85:50:4e:8d:85:8a:d1:5f:be:68:4d:61:
41:1b:3f:56:17:aa:67:67:03:51:9b:99:b5:6d:5c:
3c:8c:c2:e4:28:be:e8:b9:1e:22:b4:cd:ea:cf:b9:
66:5d:1b:5c:94:44:38:af:cf:ac:29:da:18:c6:77:
ff:f4:3b:54:16:d3:c6:82:d9:29:30:2b:40:81:08:
6d:91:08:a5:b1:a4:f0:77:64:c3:3d:db:40:ce:d1:
a9:90:34:c2:93:00:02:a8:ab:0c:70:40:52:86:cd:
19:cc:e2:1e:2c:74:f0:7a:dc:8c:df:92:72:0e:20:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:68:05:80:65:B6:1B:9D:1D:99:C9:10:03:EA:69:AA:65:60:6C
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:68:26:6e:13:8b:aa:98:02:de:27:d0:4a:04:5c:98:f5:bc:
c0:3f:e4:05:5a:fd:69:4f:80:9f:33:48:ee:ea:11:8b:37:2c:
1d:d5:08:b1:fe:03:40:75:6d:51:73:e8:48:bb:ae:8f:7f:71:
9d:65:c5:05:c8:21:1e:e1:95:31:25:be:a5:bf:cb:bb:57:48:
40:6b:5c:4f:19:b6:ac:18:6c:33:97:4c:07:1e:b5:c8:60:6b:
bd:d9:62:10:f1:67:81:f8:e8:77:f5:60:d5:54:e5:5c:26:a7:
79:23:f1:ef:30:ab:50:02:f9:66:17:05:32:5f:4d:f6:54:75:
cc:66:92:fe:b9:97:3f:1b:15:f5:3b:d9:2e:65:7a:fe:eb:9a:
f8:e2:d1:ec:cc:ef:b0:94:26:9e:90:20:2a:22:e9:30:32:e7:
39:6d:07:ad:45:eb:3f:3d:59:e9:46:c0:0c:a5:33:23:a8:d4:
a0:4e:da:2d:c2:9c:93:8e:c7:b2:4b:f9:04:44:62:41:c1:cf:
6d:c2:b8:c6:44:b1:18:9a:a4:81:d1:4b:14:3a:36:fb:4c:60:
b7:2f:64:f1:b1:8d:29:a1:3c:43:03:48:20:ed:ce:71:8e:35:
02:5f:fd:58:cc:ec:cd:ec:ca:60:2f:88:50:87:96:06:54:b4:
ad:9c:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:23 2026 by rpki-client