Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: dSsIr65gKUl7rOfFN637bGLCacCnfa1P631uT/rBN5g=
Subject key identifier: DA:C8:6A:25:3E:5E:67:02:E0:B7:B5:43:5A:52:BB:AE:55:53:F0:77
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 019D98F4E32FD0FCD2DCDD633F4C10284D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 096D
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: WDuC+70OQbOdUuKdYakF5jgBVJjMwPXbzTokwhxQgeo=)
2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e3:2f:d0:fc:d2:dc:dd:63:3f:4c:10:28:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=dac86a253e5e6702e0b7b5435a52bbae5553f077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:c3:10:4d:1a:0c:22:99:2b:75:be:3b:24:
22:c3:35:b4:85:5f:7f:dc:9e:d2:66:41:d2:b1:a7:
0a:ad:2b:bd:17:e4:38:e4:a8:d2:af:4c:35:85:06:
8f:58:1c:99:9f:72:e5:51:e9:e6:1e:1b:fd:1a:29:
b5:35:2f:cb:2f:9f:03:11:b4:23:8d:bc:3c:9e:48:
1d:75:55:d4:ba:d4:c8:11:fe:65:df:f2:d4:af:b1:
95:6b:2a:2a:cd:20:2c:77:c8:73:40:af:8c:19:d7:
f4:f8:43:64:68:77:64:71:d9:04:87:ac:fb:6b:3e:
83:bc:2e:88:98:40:55:97:cf:fb:19:c7:d7:0c:15:
20:9a:93:a0:18:73:93:67:21:49:cd:ab:bf:0e:a6:
73:61:3d:90:29:1f:86:d0:13:03:d5:c0:2f:e2:22:
6b:62:5a:26:d0:46:fe:f4:fc:c3:f9:49:e5:24:1b:
92:d3:af:a3:6d:bc:5c:b5:58:28:9a:b7:41:e6:9b:
13:0a:06:e3:ae:f7:d0:21:f8:5e:14:83:2b:22:d0:
eb:aa:fb:f1:98:41:75:03:68:d0:bb:4e:02:3e:59:
3e:bf:9e:a1:73:98:8c:8e:90:12:ce:e1:b4:67:97:
dc:16:ff:4e:eb:a5:dc:59:52:9d:f9:d7:cc:d6:fd:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C8:6A:25:3E:5E:67:02:E0:B7:B5:43:5A:52:BB:AE:55:53:F0:77
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:99:81:01:8b:7a:f9:b2:c7:d7:21:d6:e6:8c:e9:d8:52:
7b:c3:c4:34:69:da:10:a4:2c:5c:96:46:79:10:bd:ab:7c:5b:
cb:f4:de:15:9d:d2:fd:dc:d5:5a:0a:3d:a9:5d:a5:fc:e0:4b:
28:ce:22:91:ea:a6:6a:28:89:b1:05:62:6b:fd:02:e6:db:4b:
02:f1:b1:3c:0b:c1:f6:ed:03:91:cf:86:af:1a:6a:ee:73:e7:
db:1d:de:4f:60:c6:4d:7a:5e:48:28:f4:e4:0e:b9:b0:65:6e:
64:31:f9:e0:e7:19:3f:20:1a:4f:20:87:46:28:24:4a:e6:5b:
a5:29:50:19:01:f8:30:7d:75:df:3a:28:8a:87:d5:c8:07:2b:
2d:34:9f:be:8c:b8:ad:1e:37:66:b1:d4:75:07:13:69:bb:c1:
78:e4:9e:2f:8b:65:bb:0f:2b:19:40:7a:7d:b7:ac:4e:0e:cb:
bc:f7:25:29:fa:ee:20:d4:a8:14:d8:f1:c8:be:4b:23:fe:42:
18:42:33:e2:81:71:9a:d0:b5:23:37:95:20:ce:8c:9a:66:f1:
fc:6b:2d:0e:a0:7a:d3:7b:e3:ac:ee:56:47:94:38:76:30:2a:
4f:19:6e:7f:14:03:3d:6d:8e:9e:9a:22:2a:23:03:c4:35:8d:
fa:a0:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:31 2026 by rpki-client