Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: prCjThJrhf97dpjCDM4Ft6pZP5SSNZkvbcoTChr80ws=
Subject key identifier: 00:85:80:65:C1:06:3E:6B:26:8A:B0:05:2B:0D:48:FF:99:3A:80:F7
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019D9B5158E6928565C54BCC0380CEA255C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1486
Signing time: Fri 17 Apr 2026 12:01:32 +0000
Manifest this update: Fri 17 Apr 2026 12:01:32 +0000
Manifest next update: Sat 18 Apr 2026 12:01:32 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: 9K4nZZbJ8tmOQo6pskA+vcqYNkRQPO/Ty7R1dHVH1oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:58:e6:92:85:65:c5:4b:cc:03:80:ce:a2:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Apr 17 12:01:32 2026 GMT
Not After : Apr 18 12:01:32 2026 GMT
Subject: CN=00858065c1063e6b268ab0052b0d48ff993a80f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:67:1c:08:bd:21:d7:c2:0b:e2:9a:79:03:
c7:2a:d8:86:27:96:e5:33:72:b7:f4:24:e9:f8:91:
7a:db:a4:99:89:65:af:01:80:90:8c:8f:67:6e:14:
82:1b:ba:a4:4b:17:1a:62:e7:23:ce:d5:1d:51:ac:
1e:ef:87:79:0b:dc:fa:25:d8:2b:dd:23:5d:b0:d4:
6c:0d:13:aa:de:6e:4e:e6:1f:af:bc:3e:30:73:d1:
3b:25:cf:f7:c5:cb:35:fe:94:fb:a3:a7:9c:25:35:
45:60:8c:4d:4a:f0:cf:4d:75:2a:48:a4:9f:47:55:
23:13:77:37:a8:ec:6c:48:6e:7f:00:70:62:b1:59:
19:00:15:86:d8:03:6b:9c:13:bf:d5:57:d6:ed:15:
56:ba:9f:a8:e3:fe:90:e7:e5:3f:2e:6d:e8:3d:de:
50:7b:08:20:ac:e9:be:de:38:57:99:a7:e6:4d:e7:
47:e6:5e:bd:8c:de:61:6d:1a:e7:5e:45:eb:93:7a:
1a:be:42:da:68:7e:68:d1:64:c2:5a:d7:a0:87:1a:
a4:fb:87:28:0a:dd:a9:e9:5f:b6:0c:79:55:d6:b6:
f8:c6:fc:19:9a:f2:bd:93:db:fa:8e:73:ad:38:23:
2d:34:71:13:1f:d3:78:85:07:47:bb:37:84:c1:70:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:80:65:C1:06:3E:6B:26:8A:B0:05:2B:0D:48:FF:99:3A:80:F7
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:0b:ef:31:94:ef:9c:f3:a8:1b:5c:65:f5:b9:1d:d6:d5:cb:
93:b3:17:02:fd:e7:c7:b7:ab:12:10:4c:1e:d7:49:6e:02:e8:
7c:f1:31:26:17:54:14:12:b0:14:ad:33:2a:63:03:d8:c4:55:
92:30:e6:38:12:f8:97:9e:6b:06:74:75:eb:b1:62:a7:39:5b:
0f:b4:50:95:24:d2:da:de:43:13:86:51:1e:b8:ab:15:ce:17:
97:7d:cc:4f:61:c8:08:2d:05:bb:94:92:50:dd:dd:7b:1e:fc:
81:54:36:db:4e:53:92:1c:6b:97:b4:2c:7d:e0:8c:7b:db:1f:
52:81:9a:35:06:a0:de:42:01:2c:e9:b5:04:da:b8:40:ae:87:
0a:22:42:58:2f:28:0d:07:07:8c:c2:78:94:dc:e2:f4:8f:e6:
0e:97:6b:70:b0:97:38:72:97:48:3c:54:3b:f4:77:ce:f4:69:
31:48:bf:66:1e:1f:20:5a:af:6f:a4:4a:18:e9:e0:f9:e0:a6:
a3:52:81:27:e4:59:bf:51:b5:7e:b5:64:22:fb:79:79:63:0d:
bb:d7:7b:01:6d:bb:db:b0:d2:21:54:19:ee:7b:1a:da:f3:3d:
e6:ec:6b:30:cd:dc:83:8c:72:e0:a8:0e:c3:27:ba:90:01:2b:
a2:cd:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:29 2026 by rpki-client