Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: QM9/jH/E46s8XK8rsVsaagBtDmbje1jCsPJzMIxdHIA=
Subject key identifier: DB:67:A2:05:F6:25:56:D3:7F:10:E9:D7:C4:84:49:F4:C6:0C:8B:28
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019D9886C1A83608C2B21EA90D3E876A7B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 087C
Signing time: Thu 16 Apr 2026 23:01:01 +0000
Manifest this update: Thu 16 Apr 2026 23:01:01 +0000
Manifest next update: Fri 17 Apr 2026 23:01:01 +0000
Files and hashes: 1: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: gJK+oT7Di8QyG59LpRrhxwlnog+BjP019Oij1YSC5XE=)
2: tKebX1FWuux3IXuG2sUXIXIBJsw.roa (hash: +oj9FAD3Ulh0IuD5nAYshWSIbL3rR2EIAg3bpYOtpOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c1:a8:36:08:c2:b2:1e:a9:0d:3e:87:6a:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Apr 16 23:01:01 2026 GMT
Not After : Apr 17 23:01:01 2026 GMT
Subject: CN=db67a205f62556d37f10e9d7c48449f4c60c8b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:be:76:2d:27:ff:30:76:7d:36:94:79:f6:
97:98:9b:cf:5c:d1:87:9e:a2:de:2f:a9:1b:f5:24:
40:91:d3:7e:4e:82:ef:a6:85:a7:76:01:57:0a:59:
70:63:ef:a2:65:f2:29:66:1b:f6:99:aa:7d:b5:eb:
17:20:45:10:9a:ae:8d:88:8e:d6:10:2a:24:9c:a8:
2e:78:f9:ad:a3:7f:d3:d5:6a:cc:f2:4a:a7:d7:8e:
2f:6b:75:54:87:2d:7f:50:3d:14:42:d2:c0:7a:18:
c4:4e:46:a0:b2:a4:29:87:43:08:2d:74:f8:d4:a3:
3a:6e:a5:5a:64:53:75:1a:66:61:8d:bb:fb:da:a7:
83:21:5d:ce:70:aa:66:66:01:27:5d:b6:0b:52:58:
34:d7:8d:66:fc:b1:5f:a7:18:2a:49:4b:1e:4f:63:
41:88:15:f9:92:bb:ba:f0:b7:60:0b:09:bf:8a:de:
5c:3d:06:ad:cd:13:5b:d7:eb:23:bf:c2:86:49:43:
4a:18:d9:91:6f:ab:6b:15:db:00:eb:97:d5:26:a4:
95:e3:5b:b0:94:eb:ed:2b:a6:a7:eb:22:1f:bc:ec:
d7:19:7d:82:43:d6:b9:92:7a:f7:13:cd:0d:96:19:
d7:c4:00:28:ff:35:40:a4:c4:2e:92:2f:78:cc:17:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:A2:05:F6:25:56:D3:7F:10:E9:D7:C4:84:49:F4:C6:0C:8B:28
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:26:55:49:0e:7f:00:f7:a0:b1:d3:df:ef:c0:1b:c6:c5:
59:18:9b:ad:bb:4c:c2:ba:ff:fb:0c:00:f9:a9:ef:37:6b:33:
61:89:23:3c:ba:4e:b2:f9:7b:3b:2b:e1:31:69:a0:e6:ec:39:
70:3f:3c:eb:dd:65:1b:de:06:c1:67:67:d3:a3:a2:91:14:8b:
f9:29:59:48:fd:2d:10:0f:2c:9e:8c:01:bc:f6:f8:6b:37:e9:
93:a2:b3:a7:94:fc:f5:49:ea:2f:87:35:06:0e:00:6e:ff:fc:
c8:a5:50:96:6a:33:a9:0a:43:78:cf:75:c2:ca:3b:8d:9a:1c:
38:eb:92:a7:59:ba:ce:57:37:59:6f:01:64:e5:64:f1:b0:44:
84:dc:43:32:1f:fa:7e:53:f3:7e:1c:a2:28:00:0e:fe:62:dd:
b4:f2:f8:5e:a5:37:33:8b:1c:30:f5:fe:f6:f4:97:f5:1d:e0:
32:bd:68:6c:77:2c:19:ab:41:52:36:64:51:df:e2:61:f4:01:
ee:a2:e4:80:ec:18:35:48:60:85:1e:90:0d:05:51:ae:d2:d2:
9c:41:b5:6e:49:77:4b:bc:e8:ee:6b:ac:72:71:52:e2:8c:20:
eb:b4:be:b5:cf:8a:72:a1:c0:ff:3b:42:74:43:fc:4c:df:ac:
7e:0d:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:27 2026 by rpki-client