Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: Uql898CAslbmKaiQaWHd0lAC0i92sZUAcyAPo950dwk=
Subject key identifier: 31:33:81:F9:5A:0B:DB:5F:58:47:66:F8:5C:14:3F:F7:32:07:3B:AE
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019DA45443FACC1BF6ECC5E2D4A5C710E387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:01:18 +0000
Manifest this update: Sun 19 Apr 2026 06:01:18 +0000
Manifest next update: Mon 20 Apr 2026 06:01:18 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: F6V0Az//nT3eVRzlR6h92NXyuX/VHKF4OsmaGKBytrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:43:fa:cc:1b:f6:ec:c5:e2:d4:a5:c7:10:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Apr 19 06:01:18 2026 GMT
Not After : Apr 20 06:01:18 2026 GMT
Subject: CN=313381f95a0bdb5f584766f85c143ff732073bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:cd:b8:66:60:0d:32:90:42:4d:87:17:24:
e8:29:e0:f4:b0:41:af:c6:04:e3:05:7d:bb:cd:74:
40:1d:e8:d2:27:ea:b8:d6:d8:46:d3:0c:95:e3:36:
f4:d5:7a:ca:c3:ea:ad:bc:59:3e:00:21:ef:9f:67:
bb:42:19:52:28:6e:b3:e2:af:55:a3:9a:d9:11:f0:
ef:91:81:b6:74:e9:69:52:db:eb:0e:cc:8d:a6:67:
b4:3b:a7:ce:f7:48:8b:8a:f2:a0:3c:68:e0:56:26:
ad:2f:89:48:d3:39:cb:7d:e9:d9:9c:9e:0b:c4:78:
3c:9f:d4:a0:f4:88:b2:b2:e6:49:72:2d:79:9d:1e:
70:f5:e7:81:b8:db:fa:fc:64:a9:55:7d:f5:3c:44:
57:5d:92:c6:24:3a:32:4e:25:e1:dd:59:80:f3:aa:
a3:42:9f:c2:dc:5b:c1:2c:86:57:81:e5:0d:40:15:
e2:e2:94:54:f1:83:80:f3:99:87:ec:ca:8a:89:59:
18:f8:12:c9:f7:a1:f9:33:cd:8d:d9:3f:32:f7:1e:
22:f8:cd:8a:71:ae:a6:d3:59:9b:e5:7b:7e:a0:40:
d2:58:af:c0:57:8c:65:7b:21:7a:a7:84:51:c9:48:
00:40:20:3d:29:d8:69:3f:7c:18:8c:e7:60:1b:cc:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:81:F9:5A:0B:DB:5F:58:47:66:F8:5C:14:3F:F7:32:07:3B:AE
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4d:82:03:ad:b9:a7:13:dc:29:1e:39:a5:fc:18:38:54:73:
fb:1d:8c:59:96:0a:7d:6c:88:5e:44:93:5f:ec:bf:ac:b4:38:
6e:cc:aa:51:ce:49:98:9f:e2:30:47:b5:1e:05:33:31:21:6b:
7a:c0:ae:c0:f4:b0:31:60:1d:2f:8b:43:14:23:cb:f1:c5:f9:
e8:44:a9:f0:11:5b:0c:5e:ed:18:52:28:7c:f1:8a:ee:9e:17:
6f:67:04:6f:6e:9b:22:3d:f8:c1:68:6f:4a:fd:6c:7e:22:3e:
1d:42:7a:48:13:6d:70:df:1d:18:c6:48:e7:89:f3:ea:f6:ae:
a2:49:ec:90:9b:7c:90:38:e3:2e:6b:f9:26:85:53:d3:76:a4:
eb:6e:a1:b4:44:89:04:8c:30:73:d1:ec:cf:5c:ff:6b:70:b8:
18:c8:92:66:38:fa:f3:dd:89:16:83:c1:6d:05:10:9c:fd:4a:
51:f0:45:45:75:7a:a8:17:43:ce:31:e3:85:85:16:97:93:dc:
2c:4f:63:59:39:32:6b:97:b0:1e:58:9c:fe:eb:de:32:a3:0c:
9d:aa:39:b9:2f:b9:de:58:02:97:59:61:b9:a3:42:60:f4:57:
a4:9f:6c:d4:89:04:fb:a5:b8:60:e2:90:1c:9c:30:dc:79:1b:
f2:58:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:10 2026 by rpki-client