Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: vbTvgMePLMVk9SZsEWUJZkreuD1aP3Nk0JSFebbMapg=
Subject key identifier: DC:D9:68:9E:16:2D:27:E5:17:A9:E8:DB:A3:45:0C:97:98:C5:4F:CF
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 019DA30A246276C0080B7E65312A71FBCA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:00:43 +0000
Manifest this update: Sun 19 Apr 2026 00:00:43 +0000
Manifest next update: Mon 20 Apr 2026 00:00:43 +0000
Files and hashes: 1: T_qkUaWs2ghdwUxzU0iuiusb7H8.roa (hash: bDaxnxgxc6VXP3Xzs/otfCvYZy7RhWEhtlo/OlQbb/g=)
2: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: dtIzFV9EuHAS0aFiv6+n+PRcYsTXfs4SojvafuFbD2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:24:62:76:c0:08:0b:7e:65:31:2a:71:fb:ca:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Apr 19 00:00:43 2026 GMT
Not After : Apr 20 00:00:43 2026 GMT
Subject: CN=dcd9689e162d27e517a9e8dba3450c9798c54fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:8f:1d:f8:a9:71:15:8d:a7:2a:63:54:89:
33:1d:84:b8:6b:c0:c6:1d:68:f7:37:d7:23:ae:34:
4c:ef:58:1b:af:71:7b:4f:a6:10:9f:8f:bc:29:69:
1f:50:98:b8:64:06:01:ea:ed:e8:41:1b:90:3b:c3:
48:da:ea:25:2c:d2:f4:56:14:c0:71:6f:f7:3a:a6:
93:c6:ec:f9:51:4a:0f:13:b6:97:94:51:2c:7f:70:
48:f5:d8:34:c4:a0:57:44:4d:4e:d1:0c:49:4b:2b:
2a:c9:75:ae:94:ba:ad:e5:8c:6e:28:b4:e8:30:aa:
59:75:07:ec:b0:86:2a:ee:83:0e:a5:81:28:f8:4f:
ad:d5:2c:a9:31:a9:ba:2f:a4:6f:1f:dd:5c:6c:3d:
e0:a9:91:39:62:ea:bd:68:c5:32:5b:1b:69:a0:6a:
a7:d1:a1:74:58:68:bf:c8:83:d1:13:a0:bd:d4:63:
7c:aa:e8:2a:4e:1a:dd:6f:c6:c5:d0:7c:9c:6c:28:
66:f8:0b:c0:7c:2f:00:50:7f:11:a7:5c:94:ae:25:
18:96:24:c0:a0:6c:74:fe:76:55:a2:47:5a:1c:f5:
d2:be:c3:70:0f:71:eb:20:3f:2a:fc:40:d6:f2:0b:
13:84:f8:72:5b:ad:6e:c5:28:0c:e8:47:b0:38:a0:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:68:9E:16:2D:27:E5:17:A9:E8:DB:A3:45:0C:97:98:C5:4F:CF
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cf:ac:1a:b8:0e:88:ae:5a:73:5d:40:ad:41:d9:7c:30:38:
d0:f6:8e:b2:07:56:99:93:c6:81:2b:cf:bb:5d:6b:94:3f:a2:
ca:8c:af:62:78:a7:9d:cf:74:d3:dd:fe:dc:d9:2f:cb:d1:2a:
5f:03:e3:cc:04:5d:6c:9e:b4:4d:34:a5:94:d1:10:41:e7:0e:
85:ee:76:d3:92:37:f7:f5:1f:80:87:a0:1c:d7:c7:5d:6f:3f:
49:ee:61:66:f6:6e:2e:54:09:2d:b9:d0:ab:0d:9e:01:01:10:
cc:1b:a0:67:58:cf:da:f8:32:b4:bb:dd:38:dd:5e:06:7e:ba:
60:a0:9f:c0:51:02:07:da:22:36:a2:cb:7c:f6:62:fe:22:8f:
ab:a2:ec:56:0b:4d:ad:18:a6:0a:65:00:e1:3b:9f:36:25:37:
ce:d1:89:5f:06:f9:65:e4:3a:04:1d:d6:cc:fd:4b:ee:9c:43:
51:0b:95:d6:c3:4b:d3:42:25:71:14:4e:d2:05:a4:44:5e:46:
52:26:6b:09:99:57:32:83:23:0a:4a:00:4e:11:3c:1c:a2:73:
6c:45:ac:52:3e:1b:5f:e5:5d:d6:a7:a1:9d:0b:0a:8d:26:b7:
84:8f:d4:9d:bc:56:73:56:c8:a8:60:d6:91:b7:70:45:78:3e:
90:d3:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:13 2026 by rpki-client