Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: vWs4h5WoQquh0aC6P17cE/5IT1Ch+bNyZKUf6nTpx3w=
Subject key identifier: D6:56:5F:54:FA:9B:42:13:CA:A0:E1:92:06:47:5D:12:57:F3:9B:EA
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019D9A74D0908C9D6E45397EB8A8616D3AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 1614
Signing time: Fri 17 Apr 2026 08:00:39 +0000
Manifest this update: Fri 17 Apr 2026 08:00:39 +0000
Manifest next update: Sat 18 Apr 2026 08:00:39 +0000
Files and hashes: 1: DJfLC27ZRlLjzQtg9ejcohCVl8k.roa (hash: VymrYhadJDvH9BE1CUEs+UkSRt9NAMcvnOkL0G00Mj8=)
2: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: Vk9yLSieBoL7ouM9NOiRBe13GQiJviW6MFJGeyeCbyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d0:90:8c:9d:6e:45:39:7e:b8:a8:61:6d:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Apr 17 08:00:39 2026 GMT
Not After : Apr 18 08:00:39 2026 GMT
Subject: CN=d6565f54fa9b4213caa0e19206475d1257f39bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:8b:78:f9:84:75:3a:22:6b:8f:04:3a:a0:
25:25:6f:d4:7b:36:86:07:b5:53:9e:85:6d:38:79:
cd:14:5b:07:20:b1:b2:5d:bc:f9:97:f8:f5:e7:27:
b1:12:eb:9e:b6:f4:87:ca:9f:1f:78:43:7a:48:fc:
0a:10:d9:dd:89:90:2d:58:66:21:73:8e:6d:03:b5:
0e:76:91:5d:30:5d:03:f9:aa:27:10:79:e9:c6:cf:
d7:a5:32:88:eb:37:02:fa:03:7e:e8:8e:e7:65:d8:
0f:14:06:00:bf:36:6a:6a:0c:b5:68:c7:5c:ba:fc:
48:e5:93:c8:0d:7c:f0:75:81:70:a6:90:93:44:f2:
3b:40:4e:a6:8c:80:02:a4:02:db:ea:36:81:89:89:
13:6f:09:9a:a6:f0:e9:e6:6d:31:b3:b8:2a:bf:30:
4a:13:88:ff:fa:e3:89:56:70:0b:57:25:4e:cf:c5:
e1:75:66:ad:92:66:50:ac:21:80:c9:5c:e4:99:c8:
a4:ba:b9:1e:aa:f1:b2:7a:02:ca:da:85:31:14:3f:
73:a4:b3:ea:fc:ee:18:01:20:b3:93:f8:74:7e:4c:
3a:63:81:3f:cc:1f:39:1b:f2:04:43:f7:2f:4c:a7:
66:1d:8c:bc:73:e9:ae:79:6b:02:2b:4d:cc:8d:13:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:5F:54:FA:9B:42:13:CA:A0:E1:92:06:47:5D:12:57:F3:9B:EA
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:84:b2:d1:af:d0:11:0c:48:cc:f2:69:a9:ef:44:13:18:
3c:a3:df:af:8c:be:88:d5:84:45:b6:be:3e:f4:67:1f:16:9f:
b0:c9:7d:fc:c9:b5:18:08:59:64:9c:23:62:79:db:a1:31:e4:
2c:45:e4:95:e9:54:24:4e:ce:a6:41:e9:b3:a2:04:b5:25:cd:
1e:c2:de:a5:95:0c:0e:4b:c9:11:88:c4:af:5c:f6:27:e6:ec:
0c:e5:ec:e6:5a:12:36:3d:c5:f3:b9:c3:87:b8:be:05:48:81:
fb:76:24:ec:04:3d:be:10:1a:74:f6:8d:0d:5d:1b:53:47:45:
7b:fc:79:44:8d:5c:7b:48:d8:10:db:1a:db:38:21:a0:15:8e:
d5:ee:08:3c:a3:8f:b5:ec:4e:c7:ab:23:7c:e7:44:78:cb:54:
0d:ac:c4:e3:dc:f2:35:65:4a:8f:4a:3f:95:70:a0:b9:53:ea:
00:22:91:ef:fb:6c:7a:d4:92:93:b6:ea:45:5a:ce:1e:58:00:
c5:46:93:03:c0:ec:55:d6:be:99:30:37:0a:2f:54:ea:c5:6e:
2b:ee:e2:94:1c:9a:69:09:01:9e:6f:72:9e:f0:03:10:cf:9e:
e3:42:4e:57:51:1b:d6:47:c6:6e:f6:e5:6a:ce:4b:b7:f5:a5:
a1:71:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:31 2026 by rpki-client