Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: mUCsWalJpDpE0k/ZTJrYaZPzXb966zRzRapfqSVgUmk=
Subject key identifier: FC:CE:94:5E:7E:1A:A6:C8:81:2F:AB:B3:D9:E2:43:E9:0C:D7:6C:D9
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 019D9AE3A5132D3734B40E37A80B8B7AAB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:43 +0000
Manifest this update: Fri 17 Apr 2026 10:01:43 +0000
Manifest next update: Sat 18 Apr 2026 10:01:43 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: FLpJBTazVDui4lB2ASqcWdxQzmCrCyDW+ZSq7N4csko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a5:13:2d:37:34:b4:0e:37:a8:0b:8b:7a:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Apr 17 10:01:43 2026 GMT
Not After : Apr 18 10:01:43 2026 GMT
Subject: CN=fcce945e7e1aa6c8812fabb3d9e243e90cd76cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:8a:d5:fc:e9:56:a0:a0:3f:7c:52:fa:6f:
e8:47:7f:46:71:e1:07:01:cf:d3:2f:ad:0d:fc:38:
17:40:f4:11:f3:9e:ad:0f:19:6d:61:64:01:05:de:
35:11:82:7c:3c:5d:72:56:e1:37:6e:58:7b:f3:71:
50:83:50:bd:0b:48:93:7b:ad:2c:fd:62:53:da:ad:
4a:61:39:bc:70:70:d7:8e:13:b3:29:13:42:34:05:
2d:fb:60:85:52:d7:38:a5:bd:53:30:a8:14:9c:ae:
12:ae:08:88:d8:83:62:28:21:e9:33:30:6c:ea:ae:
15:1c:a0:ae:ca:d0:42:aa:23:86:d9:0a:56:02:dd:
9d:08:cf:3e:8b:93:43:2f:fe:60:8b:ec:d1:87:aa:
ae:2a:e1:ef:67:98:8e:db:b3:71:dc:ea:74:e2:3b:
82:5d:99:a8:17:0d:b8:17:76:8e:1e:96:64:5e:f9:
71:49:b0:d6:6b:a4:45:a2:a3:78:10:93:24:95:95:
0f:3e:7e:f0:e4:97:e3:78:f3:ca:c7:b8:a4:58:4a:
f3:8e:14:d0:66:cf:1a:b2:be:03:e0:90:a2:d5:97:
8d:5f:94:59:0d:ad:58:0e:03:29:d3:c7:df:69:79:
45:d8:b8:f6:9d:97:19:ce:5d:21:29:da:6f:4b:80:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:94:5E:7E:1A:A6:C8:81:2F:AB:B3:D9:E2:43:E9:0C:D7:6C:D9
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6c:21:5a:6c:34:24:7b:7e:1a:c5:60:58:76:2f:fa:bd:4f:
9d:77:b8:3e:19:3c:12:78:bf:d7:2d:aa:fe:28:a4:79:03:1e:
e0:cd:73:4c:b2:62:d3:b4:3c:ad:7e:20:38:14:43:03:b5:6e:
b3:56:a5:53:e1:2a:84:14:43:f0:f0:20:5f:49:c7:81:d1:f3:
8c:b5:a6:31:73:46:79:e1:01:23:3a:80:92:ed:f1:de:ec:dd:
32:4b:26:ef:1b:1b:73:de:96:1e:e5:cd:c1:fe:d3:29:54:02:
e0:8b:a8:f8:0e:30:a1:4b:f4:e9:20:f8:ff:38:e8:20:3f:14:
a3:80:29:30:28:13:de:ec:eb:e9:ea:46:c3:b7:39:b3:af:25:
44:f8:33:01:10:31:03:36:f1:3b:a7:1e:b6:2d:93:61:83:68:
32:58:df:44:2c:90:53:3b:03:b0:9f:ae:a6:30:89:db:8b:45:
fe:de:fa:36:27:58:82:99:b4:e7:2b:39:47:62:57:30:63:78:
8a:7b:5a:bb:20:0a:e9:86:f4:05:f3:38:e1:be:58:4d:f2:1b:
8e:9c:a2:bf:b6:ce:c0:16:35:38:c5:f2:f9:b5:2a:50:3e:a0:
7d:01:e6:dd:c6:f9:a3:d4:b9:22:0a:4f:86:90:91:df:2f:78:
71:14:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:51 2026 by rpki-client