Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: ulYW1tvmZQxwjvbnCINKn1K+vhXHnBy1qsKrHmrO5b0=
Subject key identifier: 04:2C:69:5A:6D:B1:6A:35:50:E8:45:1B:51:1A:96:99:A6:E4:5A:4F
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019D9AABB3FE060AD4E65E256F033DAA4058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: o+mzmN+pl7djMeIN2WKwglEvTgOg/QDvoYT0mn74PTM=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b3:fe:06:0a:d4:e6:5e:25:6f:03:3d:aa:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=042c695a6db16a3550e8451b511a9699a6e45a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:8b:14:0c:d6:93:fa:74:13:30:57:e9:e2:
7c:5d:2e:3e:c1:c0:d2:4d:bb:84:db:34:97:26:63:
94:f4:12:80:3f:9f:05:74:4f:be:5a:d4:b7:8f:63:
4c:2c:6f:3f:e5:d3:19:01:f5:54:0d:13:98:31:e0:
65:a0:96:96:b4:3f:46:78:03:54:6c:86:c7:ef:09:
7f:26:e5:9a:58:62:a1:03:eb:1e:74:a0:8a:34:99:
19:9f:2b:41:0c:21:29:d2:fc:f2:09:fb:dd:25:cf:
6c:f6:89:0a:bf:bb:6f:3c:31:e8:d1:05:c9:c8:ef:
ce:59:d3:c0:5f:1c:63:c1:4c:09:6c:0c:9b:61:d0:
4c:64:ef:aa:49:33:f1:22:1b:86:2b:fe:34:31:c8:
d9:60:ba:0b:b2:6a:12:09:35:84:eb:af:0b:51:04:
03:3a:c5:d8:ad:12:d1:73:e2:8a:ff:9f:bc:18:cf:
fd:91:bf:6b:a1:b5:d4:22:7a:87:06:8f:84:be:74:
97:b6:3b:39:4b:b3:22:d0:19:d4:67:c7:9e:d2:a3:
c6:7d:36:e1:10:64:ca:0e:c5:57:2c:13:2c:ee:9b:
22:b7:ca:49:6f:95:cf:e4:80:a0:5f:2a:84:3a:6c:
e1:80:60:81:b6:d4:60:05:aa:27:02:59:0b:03:31:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2C:69:5A:6D:B1:6A:35:50:E8:45:1B:51:1A:96:99:A6:E4:5A:4F
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:47:81:0f:72:0a:de:1f:8c:24:56:4f:0c:27:b3:14:a5:
9e:03:aa:b3:79:72:37:e3:92:3d:77:47:8b:27:13:1e:d7:74:
51:47:b5:e7:bf:3d:51:c7:98:39:d5:c8:06:32:c2:a2:e7:e3:
e4:61:0d:1b:4d:2f:0d:a7:dd:79:74:3b:46:7d:8b:bf:db:1f:
af:e6:e5:a7:50:25:95:17:aa:9e:77:d6:3b:e2:c6:f2:75:a9:
dd:d9:44:3d:31:6b:b3:01:76:ac:b8:7a:a7:c0:cc:b0:2a:b1:
1a:fd:ff:94:e3:e3:2d:fe:e6:aa:07:0b:52:80:b4:44:6a:0f:
a0:4c:1f:c6:a8:6b:88:46:d9:c8:1f:a4:ea:c3:96:d3:6b:15:
5d:d7:f8:1a:b6:88:0c:c7:ee:81:16:27:fc:5d:08:3a:6c:23:
49:87:7a:bb:ab:73:de:b6:e5:bf:e8:d9:cd:1a:c5:a6:03:bf:
81:fe:4f:0b:5f:13:c1:88:21:3c:66:cd:ac:4b:69:d9:e4:08:
11:29:9c:69:a6:01:6f:35:e5:7d:58:20:e7:d4:95:cd:2b:da:
63:56:cb:2e:7d:15:e4:61:0a:35:9c:72:db:a7:08:fd:18:59:
d7:10:25:4d:5d:3a:4d:0b:a0:46:b4:86:57:1f:3d:93:a2:9b:
4b:24:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:50 2026 by rpki-client