Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: QaLTTGDeA4ryjiM/1BspMlT6v3OmuBRvMS8K1MM6alQ=
Subject key identifier: C4:C1:A5:8B:D9:FE:F9:75:B2:B9:1E:C0:23:72:4E:42:E7:9C:7C:8A
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 019D99629F10E2C2D02B6415B26E3B9D49F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: q/Zj2yBPOgPv1cNf3fgbrZCf/OGk9CDmopIVDlIFVZQ=)
2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9f:10:e2:c2:d0:2b:64:15:b2:6e:3b:9d:49:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=c4c1a58bd9fef975b2b91ec023724e42e79c7c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:1b:ac:07:6f:26:7b:88:a8:ac:6a:66:9c:
36:32:2e:ef:25:85:50:c3:5f:81:16:28:ea:f4:af:
f6:d5:5d:b4:aa:37:7c:2c:fb:88:e5:9b:d4:a0:05:
20:dc:d8:ef:0e:da:dd:ae:0b:3b:5f:2a:f8:1b:b1:
c7:ee:e9:d9:75:c1:a4:4a:5c:ae:d9:e4:9a:04:c5:
53:be:41:6a:17:38:20:db:2e:c1:e7:0a:92:b6:2d:
f1:00:d8:02:c9:0e:49:9c:90:67:67:e6:38:aa:6b:
11:81:78:de:11:c2:70:24:4c:f2:d5:ec:91:71:e3:
3f:23:c8:33:bb:e8:51:40:2a:98:d0:ae:9a:09:9a:
9f:96:cf:3c:d6:f8:a0:eb:48:dd:14:a9:d8:78:c0:
98:ef:7c:7e:ff:00:e4:01:84:e1:4b:16:13:d6:f1:
57:5a:03:63:19:b7:90:1b:83:f5:34:03:1d:14:30:
34:b5:a9:1a:f7:59:6b:4b:18:a9:20:f2:a1:57:b0:
68:5c:3d:91:59:52:6b:60:23:b8:20:e5:f4:ff:31:
5e:9e:6b:cc:3b:3e:71:58:40:ef:bd:8c:63:8f:c5:
92:43:7d:7c:db:3a:21:df:53:2f:78:0c:28:a4:81:
95:dd:0c:6f:90:56:a8:c9:25:03:e8:10:aa:45:a4:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:A5:8B:D9:FE:F9:75:B2:B9:1E:C0:23:72:4E:42:E7:9C:7C:8A
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d7:47:21:a3:b8:fb:97:bc:85:58:51:8c:f1:2a:ad:41:20:
61:67:aa:d3:bc:1e:99:32:34:17:08:de:40:ec:3b:54:e4:51:
a4:ab:84:49:b5:d1:e5:62:94:f4:78:3a:9c:bf:cf:1d:d3:f8:
84:4e:53:97:02:3a:dd:1b:bc:1d:f7:89:4d:5e:f6:cb:95:1b:
c0:f2:5e:1e:0a:17:40:0b:93:61:8e:ad:a9:9a:e6:f5:4b:1b:
c7:34:ca:6c:63:93:c3:ce:30:be:53:cb:10:c6:ff:14:b3:73:
7b:b3:3e:fb:c9:7b:a9:74:6d:f5:64:37:65:f9:74:f8:cd:68:
99:ae:c9:56:ae:94:5f:ec:bb:6b:6c:fd:ab:7c:67:68:d0:df:
3e:b7:1a:5b:c0:71:6a:e6:ff:2f:42:9a:81:fc:d0:5e:ba:64:
f4:af:1f:45:79:80:1d:23:54:29:2e:4f:2e:19:f8:7c:0c:cd:
54:a5:65:3d:33:d9:71:f7:07:42:31:19:c3:ac:a3:96:b1:82:
6b:fc:d2:90:a7:dc:ce:dc:f8:17:97:08:9d:d0:1d:9d:65:5e:
b0:82:f0:5c:0d:c9:89:21:63:e1:06:96:2d:85:7c:af:bd:18:
7b:55:81:95:30:65:82:4c:f4:c1:44:e3:09:46:64:56:2b:03:
16:88:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:50 2026 by rpki-client