Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: QIcA/lwPZcPYHd5GeCpsFW2sS9DX2PgARZsygW9/hd4=
Subject key identifier: B4:DD:AB:3F:1B:6E:F7:51:E7:D2:80:60:85:2F:F1:2F:6E:61:2D:D7
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019DA3E6474AE5D70DB8ED3339B4BD2FE124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 1224
Signing time: Sun 19 Apr 2026 04:01:10 +0000
Manifest this update: Sun 19 Apr 2026 04:01:10 +0000
Manifest next update: Mon 20 Apr 2026 04:01:10 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: NrjMdHgik7XOY7Ig+Xe6aau3qqL3E4LSPPhF0DGvMG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:47:4a:e5:d7:0d:b8:ed:33:39:b4:bd:2f:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Apr 19 04:01:10 2026 GMT
Not After : Apr 20 04:01:10 2026 GMT
Subject: CN=b4ddab3f1b6ef751e7d28060852ff12f6e612dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:33:fa:54:22:1b:a1:f4:59:29:17:63:43:
5d:95:e8:f5:7a:ec:b1:36:12:9d:32:66:66:77:2e:
9e:91:bf:28:65:dd:54:0c:0b:6d:5a:42:bc:3e:50:
cd:7a:d8:36:6e:27:f3:5b:a2:29:db:30:f0:6b:92:
e3:9d:84:f7:54:e1:6c:f3:38:ca:11:4e:4e:d9:eb:
00:5e:e0:05:f0:ea:26:5b:49:dc:cb:94:ef:a6:a5:
f7:5d:a8:99:ff:77:9c:6e:2e:c5:f7:d7:eb:b3:82:
bc:33:10:b3:aa:bf:71:38:dd:79:5d:5e:8e:44:aa:
e5:b6:1b:8b:9a:06:40:48:e7:75:f0:d0:c2:a6:a2:
9a:f8:27:c7:f6:dd:07:a8:fb:9c:e6:88:44:bb:67:
fb:bf:17:a6:0a:9c:bf:48:bd:1b:59:6e:ee:6d:85:
6f:8f:ac:3f:6b:75:f0:4e:f7:aa:ff:85:18:bb:48:
77:cf:02:4b:8c:b9:fd:54:ba:bc:70:88:6f:70:23:
00:b8:b3:08:08:d4:0a:97:36:c6:60:11:18:ad:4a:
df:b9:6d:60:ce:67:c9:f0:3e:7c:8a:ab:5d:00:42:
06:eb:d1:bc:fb:22:b6:ce:05:39:aa:a2:77:50:72:
d5:cd:a5:29:4f:e0:bb:91:b8:76:0c:60:fa:aa:e1:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:AB:3F:1B:6E:F7:51:E7:D2:80:60:85:2F:F1:2F:6E:61:2D:D7
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:ec:d9:3a:ad:dd:ab:c8:5a:5e:ff:be:48:dd:1f:aa:38:
b2:aa:7f:a7:8f:ab:57:a9:ee:16:d8:72:e0:fa:06:cf:0a:b3:
55:ea:1c:aa:5e:8f:e2:ec:74:03:92:16:08:62:40:d5:0f:66:
fa:b3:33:52:56:63:28:fd:8a:0c:03:fc:ac:27:d3:fb:86:f2:
f1:4b:0c:05:b9:eb:98:e7:3d:ca:d8:ca:d2:e1:d5:35:fe:50:
62:d6:14:03:ae:d3:40:1b:4b:20:9f:b8:49:09:57:3d:5e:60:
72:d6:82:d4:e1:27:e2:1c:74:17:78:ea:a7:d8:70:80:b8:b2:
b9:ef:11:d7:ba:83:69:8e:89:83:91:5a:23:29:36:53:cd:bb:
35:c1:e2:82:18:3f:94:77:ae:c7:2f:96:aa:11:2f:cb:0f:c6:
8c:c8:81:98:67:82:fb:eb:81:76:34:16:ed:6a:5a:f0:a6:7a:
76:fe:61:33:57:75:5d:9e:69:1e:a4:6b:c2:49:8d:a8:af:56:
34:4f:17:6f:47:67:3d:a9:03:95:4f:82:2e:9d:88:3f:11:39:
02:e3:d1:5e:06:09:d4:9f:db:bf:7d:60:98:7a:54:8a:ab:cf:
11:4d:b3:b9:ff:50:29:4c:9a:dc:3c:fd:4a:e6:be:69:d6:97:
43:ff:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:38 2026 by rpki-client