Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: rBrQPZ1uKoxUsmekoC30YxAm7hqhAh/a7MBBeS1RMBI=
Subject key identifier: C5:99:C1:BD:D5:BE:D3:06:C2:D4:3D:97:25:90:A5:AC:98:D0:77:5B
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019D9962B5EA0FDCAF1431BC0ECAFE8E1E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: TVcrTFxmK1xct9bAAKcirugY6O/9EyrxqCaQ3lSHSAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b5:ea:0f:dc:af:14:31:bc:0e:ca:fe:8e:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=c599c1bdd5bed306c2d43d972590a5ac98d0775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:10:ce:fa:14:0d:ae:bd:0e:79:83:67:ff:
6c:64:8b:be:57:66:21:6a:92:40:15:6a:38:20:11:
e3:24:d0:24:19:ec:b7:89:5e:03:18:ef:a7:d0:c4:
97:5f:cf:c4:1a:da:a2:77:d7:42:a8:a2:32:77:41:
f3:b6:da:c6:c2:5e:8d:01:38:43:cd:88:1f:81:77:
88:27:72:92:9e:79:d0:af:8f:47:ff:60:0f:96:db:
d4:a3:ff:a0:fa:f3:b5:49:19:fa:dd:0d:01:40:3d:
4a:e8:92:af:14:f1:a4:8a:d8:b9:a6:67:5a:2d:7e:
ec:3f:76:93:50:61:b5:f6:55:c4:48:d1:8c:4c:ed:
ce:8e:c5:ec:06:a2:f5:5a:9f:7f:b0:13:be:9f:ca:
66:05:0e:a1:78:d9:7f:6c:0a:50:ce:10:a1:78:81:
4b:4e:1d:7c:c7:01:1b:72:f3:bb:60:80:cb:69:12:
12:13:26:ba:80:fb:f1:37:4d:32:d0:62:8b:ad:9e:
ac:ec:db:50:1d:f2:17:e3:64:64:0c:28:5d:5d:e6:
5e:65:d6:9a:54:e5:9e:9f:07:a4:2e:f0:30:cb:30:
48:76:5f:22:e4:3f:29:76:76:24:ae:6c:f0:05:a8:
cb:53:b9:a9:d4:60:95:87:87:c6:c5:97:35:37:48:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:C1:BD:D5:BE:D3:06:C2:D4:3D:97:25:90:A5:AC:98:D0:77:5B
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:44:59:6f:2f:38:7d:5c:0a:46:8c:cf:e1:58:04:11:80:
ae:41:57:9f:d3:64:45:90:c6:f2:f1:00:af:20:f5:42:2e:c0:
bf:f6:13:05:f6:92:2e:26:87:1c:cb:b1:b5:5f:74:26:5c:d6:
ae:01:91:72:1e:be:a6:09:60:bd:44:8e:13:88:07:fb:4e:a6:
7e:02:f1:9e:68:92:e6:be:a1:82:32:05:e4:3b:ce:53:4f:62:
9a:38:6d:04:d9:76:64:45:01:f9:5f:87:72:86:23:f9:7e:2d:
0b:f5:8b:14:6e:61:6f:f7:5f:88:f1:f5:74:df:c5:e9:cf:e6:
2f:ad:42:3d:1f:37:53:fd:2d:27:af:60:77:dc:79:88:5e:27:
d5:82:84:ff:eb:f8:9c:d6:20:d2:ff:29:0e:72:5f:99:45:2b:
fa:d7:e7:a8:b8:5a:fe:cd:a4:c4:f8:ca:cc:96:d2:af:96:05:
cc:2f:e7:78:a2:e0:1e:16:32:25:b6:38:80:62:57:4e:ac:fe:
d7:68:49:93:27:8f:93:59:0a:1d:60:76:ad:92:9d:e4:da:61:
e9:73:84:ec:91:09:e3:4d:a6:78:00:c6:b2:aa:82:67:e9:fa:
54:56:fc:55:2a:4b:c4:73:01:2a:6e:b2:44:0c:cd:fd:48:67:
fa:17:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:53 2026 by rpki-client