Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: mI11g8wSbtgLqcXJ+cN/rRjxVorhLGvX1mghwjNwiPw=
Subject key identifier: D0:87:AC:E9:C7:62:22:51:67:39:F4:CE:58:5C:E2:95:C0:6D:8C:9C
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 019D9A7491E123063585449ABF890F820344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:23 +0000
Manifest this update: Fri 17 Apr 2026 08:00:23 +0000
Manifest next update: Sat 18 Apr 2026 08:00:23 +0000
Files and hashes: 1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: FaTaW3GyOdS1oxUiv4iJhRf+pASO9n56JJM6tAliyYQ=)
3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=)
4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:91:e1:23:06:35:85:44:9a:bf:89:0f:82:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Apr 17 08:00:23 2026 GMT
Not After : Apr 18 08:00:23 2026 GMT
Subject: CN=d087ace9c76222516739f4ce585ce295c06d8c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:61:4c:ce:32:2b:ba:87:a7:bd:99:b9:ea:
de:d7:fc:d4:13:ce:fc:9c:af:e9:e5:34:6b:3a:bd:
10:e4:a7:81:59:9a:4b:89:95:7d:e5:12:52:8c:a6:
56:0f:90:87:4e:d8:22:93:38:57:ae:77:05:57:06:
93:2a:01:7a:a5:b9:49:1b:c3:ba:d7:94:d8:ed:de:
9d:3e:fc:01:0e:94:7f:98:50:3d:14:a7:ac:6d:ea:
24:5f:f1:ba:46:d6:d7:e6:35:7d:8a:d6:db:20:2f:
a7:60:6b:c5:ad:bc:d9:75:b2:e2:9c:ce:fb:22:6c:
f1:c9:d3:00:69:bb:d8:67:1f:14:9a:ac:2a:5b:c6:
44:b5:c1:ab:b1:ea:69:d8:b8:aa:82:d7:0a:5a:f9:
1a:c9:1c:3d:04:70:40:51:a1:3e:e1:0f:b5:b4:8a:
b6:fe:f6:67:7f:0b:2b:51:9b:2b:6b:fe:b5:b5:bb:
b1:04:45:fb:cb:04:8c:7f:99:4a:1f:0e:11:ea:22:
a7:e7:f6:17:ae:63:f2:6e:52:7a:d9:6b:1c:38:56:
22:07:61:84:db:b2:83:28:eb:b6:b7:17:e9:30:e3:
ed:8c:46:54:bb:5e:a2:b7:cb:0d:21:a9:9e:51:53:
28:f2:f8:48:47:e4:bb:bc:f7:c9:a4:19:56:21:05:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:AC:E9:C7:62:22:51:67:39:F4:CE:58:5C:E2:95:C0:6D:8C:9C
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4d:29:d4:bf:08:5d:ca:ee:b9:9b:f4:65:32:38:26:9f:dd:
98:23:b6:5a:b0:25:8a:36:35:4f:90:62:72:df:3e:5b:7f:88:
8e:a4:a8:3a:74:c9:8b:30:62:53:e2:f4:7f:35:de:81:5f:3c:
d4:27:48:b2:c7:1f:43:79:c8:94:e7:de:0f:8e:03:2b:24:74:
bd:53:35:b9:4d:0e:f0:62:e8:3d:eb:6a:a6:a7:31:c0:1d:25:
5a:ee:8b:b8:76:a0:6c:ac:47:b6:88:d8:a7:82:6a:17:6a:44:
f2:b5:e1:47:87:14:50:17:9e:03:28:00:04:df:38:4d:84:83:
a5:17:dc:5f:69:fa:84:9d:a1:fa:06:ab:ce:a7:b6:9d:e7:ad:
ee:52:53:3a:f8:15:8a:a1:6f:90:bc:b1:33:01:92:3c:33:b9:
73:9c:ec:de:07:a0:6d:c0:27:d4:df:32:56:c8:04:cb:b5:23:
ab:03:fa:4d:3c:7a:75:6b:91:8a:98:d2:03:12:17:ff:ef:37:
f7:ae:f9:2b:e8:c3:94:b7:d4:5e:6f:ec:d6:42:09:e8:57:d9:
d0:e9:c3:41:3b:71:d3:5f:31:dc:b9:c9:c1:76:a9:74:80:95:
0d:ea:32:d6:2f:ce:45:e6:8e:34:b1:e4:c6:f3:18:11:01:28:
fd:e2:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:16 2026 by rpki-client