Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: WwMgNNGNmfSZKyFF2qDyV7gyOd4HWxRoXlO2MQQhNwc=
Subject key identifier: B5:EC:E9:23:41:88:FA:6F:56:04:59:86:1F:57:CC:DF:3D:AD:BB:5E
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019D9C2D181D4BF3E2E20C9D2A6B1624475C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 16:01:34 +0000
Manifest this update: Fri 17 Apr 2026 16:01:34 +0000
Manifest next update: Sat 18 Apr 2026 16:01:34 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: uZJM9mhTUIdtl+ijOxUIBdiq5MO94+yuHSF9K9ZGJEI=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:18:1d:4b:f3:e2:e2:0c:9d:2a:6b:16:24:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Apr 17 16:01:34 2026 GMT
Not After : Apr 18 16:01:34 2026 GMT
Subject: CN=b5ece9234188fa6f560459861f57ccdf3dadbb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:ed:33:1d:df:96:04:bb:e9:81:ef:0a:d4:
23:55:8f:25:87:84:81:60:eb:71:ba:55:c6:11:c3:
2d:6a:93:9c:82:d7:8a:07:87:8c:24:0e:ce:28:46:
07:50:14:f0:e4:4d:21:fc:bd:0f:91:e2:75:17:a5:
6e:74:8a:d4:9c:5d:bc:e2:ad:e0:0d:32:e9:5f:d9:
e8:a9:85:0c:55:87:ab:8d:04:1b:e3:bb:1f:b8:8d:
ec:cf:a0:01:db:67:7f:eb:32:d0:0f:04:45:78:f4:
17:c1:43:60:01:28:1c:91:6a:31:af:51:9c:df:ea:
db:7b:9c:6e:79:60:79:a6:47:f5:e0:b4:10:41:1c:
b5:08:81:4b:a2:56:a4:25:f2:1b:82:2b:b3:70:cb:
8d:33:9e:59:85:df:ee:da:b3:ce:76:31:29:82:17:
44:65:0a:8b:89:f4:db:b0:4d:94:f0:d8:70:5e:e6:
88:38:02:b9:ff:06:4a:9d:f9:e7:f5:59:16:1b:16:
5d:4a:38:09:ac:2d:9e:5d:e2:db:9f:fb:fe:3f:69:
2a:00:5f:b6:23:f4:0d:89:f8:34:e3:e6:f5:81:91:
f3:7f:01:46:5d:25:03:2e:1d:ec:70:8d:88:d0:40:
bb:b4:8b:83:f9:48:eb:09:7f:91:09:e1:4b:05:c8:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:E9:23:41:88:FA:6F:56:04:59:86:1F:57:CC:DF:3D:AD:BB:5E
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:bd:53:1d:fe:49:52:11:f6:32:32:bc:4a:4e:87:37:78:
28:ed:00:c3:0c:24:f9:d6:ae:5f:3c:aa:15:ab:e8:6c:9c:2b:
f2:85:cd:1b:1a:b3:7b:93:ed:81:09:4c:5c:37:c0:4b:f1:c8:
b2:f6:38:49:7d:59:7c:10:cc:a8:77:b3:6c:df:e6:77:f7:97:
73:b8:aa:7d:90:e9:29:61:09:bc:c7:9e:70:d1:8a:33:b9:3d:
97:e6:b4:fa:24:29:55:93:9e:0b:70:67:ae:db:95:27:91:05:
78:8f:06:13:06:67:df:49:8a:33:34:ef:2d:51:07:d9:e5:3c:
9a:1a:72:9d:a9:b6:6d:f9:ec:f8:12:57:84:55:fe:44:9d:a7:
53:64:13:d4:1a:34:d9:11:53:e0:7b:4a:e6:b3:76:b2:8c:0e:
a5:20:57:e5:20:a9:02:df:92:e3:74:d6:ce:79:89:9e:ab:bd:
2a:c4:c2:73:8b:a2:56:f3:4a:93:6f:11:ef:19:5e:ce:39:0a:
f5:1b:37:c5:01:d2:e3:41:44:ce:07:30:0f:b3:27:f7:4c:2a:
31:e9:5d:47:be:99:6a:38:8c:a8:f9:de:59:a3:b8:85:da:30:
ca:f3:c6:2b:55:68:f4:2b:68:65:d2:d4:b0:f9:73:71:b3:1b:
f8:b1:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:21 2026 by rpki-client