Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: CN8/R4QPTJ5yhkE21Be7Ydnm4BiGtf3a+Rzn1dfaYJg=
Subject key identifier: 75:B5:7B:2D:FC:61:CB:34:D4:FE:AF:6A:61:A9:DB:5A:6A:F7:97:19
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 019D9A750740F643E3478D8787693DA80126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1470
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=)
2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 1TrsjtS88hzwEDoqSL3h7p/NtBOz5RDgoC9kBUbgLMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:07:40:f6:43:e3:47:8d:87:87:69:3d:a8:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=75b57b2dfc61cb34d4feaf6a61a9db5a6af79719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:e8:8e:4f:f9:d8:f6:72:80:48:a4:86:7e:
be:34:25:ff:f7:06:6c:09:6d:f3:6c:a2:a4:4c:30:
c8:14:f3:c5:b8:02:3d:df:20:ad:24:30:62:fb:06:
53:8c:5f:ac:64:ae:d1:87:a1:a8:86:af:b0:20:3d:
61:6d:07:04:1a:b4:1a:58:c6:e5:8b:cc:81:40:e1:
1a:ae:e9:bd:32:04:1e:25:47:24:bf:f8:20:d1:ec:
6f:0a:59:0b:1d:b1:cd:c5:d7:e6:50:03:32:d3:03:
01:40:88:8a:a0:5c:52:10:0b:8d:f0:31:13:33:fc:
e1:eb:3d:73:79:a1:7e:49:c6:7a:52:0e:bd:eb:37:
f4:f9:95:db:b2:95:8f:61:04:8f:d5:fe:b6:e1:44:
62:ba:e4:c2:4c:7a:85:0f:2a:57:e6:41:ab:76:a9:
bf:1b:58:39:29:7a:88:25:35:4f:59:cb:d4:c1:87:
fe:84:0f:d8:11:ee:af:67:b9:4d:9f:09:42:b8:b3:
67:06:48:6a:57:42:66:fd:e7:11:61:0c:2c:44:df:
f3:85:66:59:d8:48:02:fb:22:fb:85:1c:e0:d8:6b:
43:b5:56:bb:ac:bb:f0:ee:a7:f2:3c:fb:4a:40:9b:
82:e3:3c:dc:5e:a1:3f:4c:a0:cb:d3:d2:dd:eb:3f:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:7B:2D:FC:61:CB:34:D4:FE:AF:6A:61:A9:DB:5A:6A:F7:97:19
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:07:91:7e:42:97:9b:15:93:5b:6b:ec:77:cb:4f:09:9b:
70:ce:f5:b5:7b:05:24:57:f8:32:c5:0a:39:1f:eb:82:f8:63:
08:0e:0b:76:2e:da:99:da:72:da:91:7b:e4:03:b2:a2:f3:36:
2a:37:5c:11:c7:96:a5:53:b9:7f:5c:03:b1:79:01:6f:c5:4f:
35:96:25:74:a6:8b:41:01:ca:ea:ef:11:31:01:b3:91:87:88:
1e:b3:2d:29:86:0d:99:c9:cb:2b:f6:8c:8f:e1:66:37:60:53:
d8:fa:fd:4a:66:7a:2b:96:fc:8b:4e:8a:bb:20:6a:34:a0:10:
c4:2e:2c:59:02:31:98:bd:3e:ae:a5:0d:c6:bd:07:63:4d:65:
2a:22:1f:09:b2:fb:9f:65:2a:6f:c7:a0:5b:e0:1d:33:18:63:
de:b2:72:a4:47:89:62:2f:a8:5c:3c:be:d5:33:21:c3:7b:11:
72:6b:ef:29:cc:1f:3e:24:04:ee:f1:3e:6c:82:66:58:17:93:
91:57:9a:7c:d5:27:29:e8:c4:49:46:b4:be:1b:f2:b3:3e:5f:
56:b2:d5:bd:3d:06:d1:d5:05:c4:90:03:e6:b1:2c:f9:d2:81:
06:cb:47:84:d8:0e:7b:80:46:85:1d:d6:d8:cf:f2:af:6e:6a:
1d:68:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:53 2026 by rpki-client