Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: tBDwq8E1DKi77hd6dDFSPtqeeBz4IKJXlaSlGlq/aas=
Subject key identifier: 9F:35:CA:8E:23:65:F4:DD:9F:1D:D5:E7:25:8F:2F:C7:31:62:B8:5D
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019D98BDC11D3445390138BD70D2DEFB4E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: ID1axsYnddt2R6nkinyXt2/X09/yDBEX+nA2JVbfPvo=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c1:1d:34:45:39:01:38:bd:70:d2:de:fb:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=9f35ca8e2365f4dd9f1dd5e7258f2fc73162b85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:d1:59:a1:89:46:74:4a:ec:36:f9:78:1d:
a1:56:20:41:ff:bf:12:84:06:47:ba:79:d5:d4:e3:
01:fe:09:51:ec:41:2a:0f:f8:1b:e3:b2:36:d1:cc:
e9:f3:f9:67:21:8c:2f:24:17:46:b3:31:64:38:ef:
86:9c:39:6b:47:9a:fc:50:15:18:20:24:4c:df:ca:
57:42:f1:a9:11:ac:9a:e1:5e:5a:0c:bf:c7:82:56:
df:d7:de:ce:c0:9a:62:0c:1d:f7:34:4f:d3:ed:4e:
89:b7:28:3d:75:41:94:fa:59:0d:39:b2:78:3f:f4:
1c:2c:f7:63:ca:00:c0:d4:57:4c:8d:db:a2:b9:71:
07:68:5f:47:ad:9c:76:45:9b:59:fa:3a:98:4f:2b:
61:b2:1f:58:c6:be:23:e3:5b:41:ef:62:14:da:c5:
df:6f:10:bb:cc:55:50:f2:ea:81:77:a3:f2:fb:74:
34:dd:28:4e:8c:58:63:b4:b1:d8:0d:05:50:2c:33:
34:a3:0b:fd:82:13:3e:d5:9f:63:b8:cd:ec:42:78:
8d:58:94:b5:ca:59:ef:80:e2:c2:38:67:9b:18:ee:
90:45:6c:e2:3f:27:9a:35:b5:ee:5e:94:b1:d4:ce:
05:c1:ed:c5:c8:db:37:41:31:91:11:2a:82:da:c0:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:CA:8E:23:65:F4:DD:9F:1D:D5:E7:25:8F:2F:C7:31:62:B8:5D
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:fc:56:e3:5d:2f:34:d5:e1:2c:df:8b:6e:13:a4:8b:b8:
32:e6:e9:1a:4f:d7:73:6c:da:41:5b:f9:e2:d1:1f:4b:bf:5e:
ed:d2:00:9d:11:f6:6c:1f:06:97:dc:86:1e:50:ea:b9:40:1b:
16:52:2d:0f:f0:91:59:61:c8:0d:55:b5:d8:24:fd:48:a9:17:
e2:fc:71:6f:59:3b:00:6e:c4:80:99:57:6f:92:9b:ec:b2:2a:
07:42:89:69:4d:fc:a1:f1:b1:4a:53:36:b6:6d:93:3b:c3:22:
d5:b0:a0:74:e3:36:15:ad:aa:11:72:8d:2f:60:76:cd:54:0d:
90:8f:cb:fe:e7:42:6a:f5:02:20:9b:61:04:36:f2:c8:c0:f4:
c0:7b:c2:17:6d:42:f8:23:29:6c:b1:37:f5:b6:c1:d2:be:e8:
56:9f:69:ae:ee:3d:07:dc:f2:41:7a:78:67:28:25:dd:ca:44:
2f:44:ee:a8:bb:b2:8e:4e:36:2e:59:95:7b:7e:3c:03:55:39:
22:eb:ee:b4:be:c1:eb:8b:5d:90:1c:7d:6a:93:9d:61:7d:ca:
84:d4:81:2c:17:d4:e6:cb:d8:5c:ee:07:26:b8:03:08:2d:13:
12:f2:4b:6b:48:4e:3b:e0:6f:2a:94:96:25:d7:f0:10:15:aa:
49:19:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:30 2026 by rpki-client