Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: aCLYu43izOWenm9rPPkuYQDMFGw+oVUrkIz9q3T4GT0=
Subject key identifier: 07:9C:8B:EE:91:AB:2F:43:8D:C5:BB:AB:76:83:07:24:A3:ED:5D:6C
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019D9B87C1897FD88248E140D3F48E03C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 1558
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: FgSNIq54bUwMnzVMY+0mF689XfJjAhv6+EpEzQfyGD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c1:89:7f:d8:82:48:e1:40:d3:f4:8e:03:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=079c8bee91ab2f438dc5bbab76830724a3ed5d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:bc:da:cb:58:b4:1e:57:80:6a:c6:d9:4f:
01:7e:67:71:5b:4a:c3:d9:09:b0:09:fb:b9:d2:12:
3d:4a:ea:73:a1:1b:6a:ff:45:2b:95:c6:7b:9b:e7:
21:5e:2f:66:bb:76:45:6b:21:a3:98:0a:b2:20:05:
1f:62:c8:5a:07:92:5f:59:c5:12:6f:ef:b2:21:de:
0b:46:cb:9b:4b:5f:cb:ce:e5:48:9a:98:32:2f:44:
c7:8a:14:f6:e1:38:83:1d:b1:2c:d9:ed:2b:63:6b:
51:e6:a9:52:1f:5c:7b:f4:71:fb:d2:40:f4:bf:24:
65:45:e8:af:36:76:1b:32:b1:bc:8c:a1:a4:ac:62:
94:30:aa:26:39:4c:e1:04:db:08:9f:27:b9:06:cf:
5b:d0:44:c7:62:11:c4:6a:54:05:b2:1e:d8:18:a2:
bb:40:ef:7b:39:8c:25:10:39:d8:c0:f7:dd:15:a6:
61:98:ca:13:cf:9b:99:90:bd:81:24:ce:41:36:23:
32:f4:34:d9:c8:78:41:1f:ba:70:5d:b2:37:bb:c2:
ab:fd:58:d3:aa:7b:1d:88:8a:8d:0a:81:6f:3f:7b:
48:6f:cc:4c:21:11:df:b1:cb:36:ab:c3:e6:24:b5:
08:ba:a0:89:b8:70:1a:0d:6c:d6:29:cd:22:8b:e4:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9C:8B:EE:91:AB:2F:43:8D:C5:BB:AB:76:83:07:24:A3:ED:5D:6C
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:31:5d:9a:d4:d5:7d:c4:1c:19:eb:c1:1f:9e:24:22:c0:71:
ad:cd:9a:22:cc:6c:9f:b2:b9:15:99:de:35:49:39:c8:f2:1d:
ef:b9:06:34:ef:40:9a:d8:d5:f6:33:16:54:27:11:1b:8e:0c:
ee:d3:91:bb:e8:95:c3:25:78:1f:6a:74:2a:6d:b5:69:25:7d:
0c:e8:c6:1b:ca:5c:55:79:94:33:77:2d:58:a9:38:42:b3:92:
2c:b6:dd:a1:14:13:1a:47:9c:80:a2:19:e9:22:66:7b:2f:94:
be:9c:69:73:f7:6e:9e:e0:4f:e9:ce:fc:a3:74:d2:89:90:74:
f7:63:7c:29:d0:37:05:80:e0:e2:9f:26:6e:db:7b:23:4a:6a:
db:26:56:7c:c5:7c:e7:2b:10:71:b5:da:96:fe:99:b4:d3:24:
f5:b8:c2:2e:d1:ee:ff:3a:89:1e:de:bd:d0:68:7a:82:3e:b1:
f8:87:cc:f6:35:7a:db:de:02:bb:b2:f4:b9:4e:ab:3d:4c:0d:
c8:36:b3:6e:ec:c6:cb:f2:0c:93:b8:2e:0b:8d:7b:45:6a:94:
74:50:75:97:be:f8:af:f8:b0:51:6b:1d:2f:3c:ec:ff:1d:03:
06:7f:67:2c:35:51:2f:61:8c:a0:4c:6d:6a:67:c4:c0:73:4f:
46:bf:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:16 2026 by rpki-client