Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier: YQtrH+iR6M72tZrRNczEGVAIo+2G08AizVzwB6jHF3Y=
Subject key identifier: BE:C1:BC:BC:31:57:85:5A:78:F4:85:E7:C7:5E:A4:D0:75:12:01:E1
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 019DA48A6C77C85560F6EE19372E5D3CAA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number: 1627
Signing time: Sun 19 Apr 2026 07:00:28 +0000
Manifest this update: Sun 19 Apr 2026 07:00:28 +0000
Manifest next update: Mon 20 Apr 2026 07:00:28 +0000
Files and hashes: 1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
4: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: 9yEBIB+hr4khG9iuBBU9Dh9DdH0sQvr1EeBnynjkEX4=)
5: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:6c:77:c8:55:60:f6:ee:19:37:2e:5d:3c:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Apr 19 07:00:28 2026 GMT
Not After : Apr 20 07:00:28 2026 GMT
Subject: CN=bec1bcbc3157855a78f485e7c75ea4d0751201e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:50:85:23:82:dd:02:2b:6b:c0:a8:34:ca:
73:f4:02:1b:fd:39:8d:3c:8d:13:8d:33:95:45:14:
77:6b:09:4e:e7:08:f0:8a:65:9c:23:bc:7c:9b:e7:
cc:c0:1b:94:66:7b:7e:c2:03:ec:07:67:8d:f4:af:
70:74:c6:17:5e:31:06:66:56:3f:61:e4:ae:ef:74:
fa:d6:1c:88:2c:59:dd:dd:2b:94:43:05:8f:50:ca:
b7:46:54:28:c7:1d:d3:4d:3c:47:fd:94:73:e4:cc:
c6:d0:16:ea:c2:7b:0a:d9:42:73:34:5e:83:30:24:
c4:3e:3a:aa:ba:2e:d9:3a:f1:27:b0:51:c0:f0:3e:
d0:70:1e:c4:25:40:c7:39:a7:dd:c7:d2:4b:83:28:
d7:70:43:1a:10:39:95:0d:93:65:5d:89:61:09:ef:
6a:b6:44:a7:66:68:a0:b0:70:76:21:ad:ae:97:ff:
ad:e3:01:35:99:74:66:87:7c:92:c5:3a:6b:46:41:
4f:7f:53:03:0a:d5:83:5c:30:70:a4:67:f3:fc:e5:
0e:87:a0:ab:7c:eb:f4:ba:f9:a5:02:85:6a:34:02:
22:92:eb:72:42:1e:a7:23:d6:4a:a3:bb:e1:01:9f:
62:a8:a4:33:5d:17:24:99:fb:fe:94:33:50:25:ca:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:BC:BC:31:57:85:5A:78:F4:85:E7:C7:5E:A4:D0:75:12:01:E1
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:26:ff:1a:b3:1c:8e:d6:9b:f3:a3:5e:fa:e7:2f:bc:0f:
6c:df:df:ec:49:5d:a9:2e:36:4a:79:1b:3f:0c:8b:d4:63:62:
ec:eb:33:b1:ac:8d:69:65:af:79:b6:2e:08:d5:94:7c:ff:a7:
ca:23:86:38:5d:fd:11:bb:a6:44:73:ce:d2:3f:65:e3:ca:5a:
09:98:d7:03:fe:2f:41:a4:e9:6e:b5:d3:c4:e3:72:16:13:cf:
fa:ee:4f:6d:3d:42:fa:51:ae:db:8c:c1:02:f0:bc:8b:fd:f1:
f8:ec:6c:f3:1b:61:18:d5:75:77:e6:58:bf:9e:7b:49:9a:2c:
ef:cd:fa:ce:c9:d0:a2:08:88:d7:a6:ef:a6:5b:4d:b8:b3:0a:
12:b4:0f:67:f3:e0:4b:8d:f1:57:be:78:cc:8f:a3:a1:b1:e2:
4f:0a:55:6e:0a:7e:b5:5d:01:79:dd:8f:20:9b:9a:c5:0a:76:
ec:72:3d:fe:a0:b3:15:63:1a:73:ac:4f:d7:64:dc:b6:b7:e4:
07:79:68:01:ad:b4:48:12:27:ee:ea:a6:63:c6:88:6e:d3:5a:
64:32:8f:d8:8b:f4:dc:a3:ab:a7:25:d3:ea:d1:cb:1e:42:6a:
82:f8:ad:be:db:37:ae:8a:a9:12:5d:90:de:68:d1:2f:19:2d:
63:da:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:57:56 2026 by rpki-client