Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: cawryfffGJ1a6vfEcdcOsKP16cbEAUjBsJe6N+vDLH0=
Subject key identifier: D9:D5:B9:65:84:1E:3F:EC:99:3E:5D:D9:E5:E6:FB:F1:1E:EA:AD:B3
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 019D9A3E081E001B65D277A91CF21D50F183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1707
Signing time: Fri 17 Apr 2026 07:00:49 +0000
Manifest this update: Fri 17 Apr 2026 07:00:49 +0000
Manifest next update: Sat 18 Apr 2026 07:00:49 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: 6IPIpdH7gqkpzTts/Z4Stdvec3RxG0gT+O9AIgYNKd8=)
2: olOKcJA3lY2C5AHAA9EvwRDOMTk.roa (hash: 2fXZ6uCGSZ0urqxK7sMB+s4D2FSNMW1R9BEHHUDguZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:08:1e:00:1b:65:d2:77:a9:1c:f2:1d:50:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Apr 17 07:00:49 2026 GMT
Not After : Apr 18 07:00:49 2026 GMT
Subject: CN=d9d5b965841e3fec993e5dd9e5e6fbf11eeaadb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:d1:7e:d1:fe:60:91:4f:c0:db:3c:ea:d5:
54:57:b7:e8:a3:9e:e0:e4:e0:d4:4a:a7:5c:87:e2:
7e:e8:1e:a7:ee:89:77:6e:3d:ca:86:27:62:4e:53:
f8:3b:7e:d9:84:f1:97:6e:68:f0:21:6c:1d:16:c1:
1b:c8:60:9c:68:df:bf:5c:3c:19:b2:17:cb:da:85:
37:10:36:fc:3b:ac:a2:2a:98:1b:59:5b:81:c9:39:
d2:fe:09:3e:99:11:f9:ac:dc:27:d9:9e:fc:f9:ab:
7d:9e:03:1c:ba:4d:60:3f:15:10:ba:0e:ff:e7:1f:
cb:f7:1d:89:34:ea:4f:e7:4a:7d:ae:b6:0d:ea:f1:
8b:ae:63:f8:d0:0a:30:b5:2d:84:f5:ac:a9:ef:66:
a9:7e:35:da:4f:e4:a5:ec:ae:f4:9b:da:ae:90:e6:
ee:a3:0d:75:ef:d9:26:75:e2:13:18:25:46:70:81:
40:41:20:65:db:9b:e4:f2:2c:a2:65:6e:15:77:64:
a0:e9:40:9c:7e:e9:60:03:a9:fc:13:82:06:d8:d3:
5a:cc:0c:95:78:c7:54:8b:c3:8c:01:72:43:a9:24:
a0:25:bc:55:fa:6f:ca:d2:37:15:48:5b:48:7e:02:
61:e9:66:a9:e5:e7:71:e7:39:19:0f:66:17:59:67:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:B9:65:84:1E:3F:EC:99:3E:5D:D9:E5:E6:FB:F1:1E:EA:AD:B3
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:b3:8f:26:01:14:ad:ab:2d:23:f7:9f:f8:88:dc:20:d9:a0:
0e:fc:ae:20:a1:9b:7f:f0:45:99:96:cf:22:54:90:71:ac:6d:
c0:87:a4:49:13:c9:4a:1f:ec:76:cb:f1:9b:16:7f:81:4e:b6:
ec:a9:f9:ce:e2:35:87:1a:2d:90:9b:7e:2d:ef:64:94:41:de:
36:67:86:71:87:17:5b:18:02:85:f3:e1:6d:8c:c8:0a:82:ac:
b9:22:40:89:e8:d7:f3:35:13:25:1f:d9:c7:50:54:62:87:fb:
31:85:de:1c:ad:65:82:a1:b5:cf:aa:dd:86:fa:b6:e2:4f:e7:
41:dc:70:73:6b:bc:98:d1:2c:70:95:09:59:00:d3:56:8c:76:
08:60:81:01:65:ae:49:a1:61:e9:eb:17:d4:b1:cc:6c:62:c0:
26:1a:d5:37:08:a0:4a:79:6c:23:4c:d1:a5:ff:69:c9:fb:ae:
98:de:c1:59:fe:61:e4:4e:73:f8:f9:97:a1:5d:08:3b:7b:d0:
94:55:db:e1:10:20:24:fb:62:8d:45:7f:8d:32:7c:87:bf:ad:
59:8f:ef:c9:81:ab:10:75:52:50:60:5f:34:1b:89:7f:ea:e9:
1c:64:d1:07:d8:29:24:23:f7:1b:2b:b8:ee:32:9a:bf:34:5d:
c7:26:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:20 2026 by rpki-client