Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: Xd5nUrmefnFzPS2d3jHK2TppBsdRIrtCYOqem0X/FqY=
Subject key identifier: 07:2E:61:37:66:F8:6D:71:16:EB:38:12:17:14:C3:95:08:43:5B:0A
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 019D9A071E390DAD7B89F92046B35AA46312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0CD6
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: P_Lt8AY8fM5LppruerzO34vRqLY.roa (hash: zp6zmtIN8JWsWA0pcCGjGihKqrwJVCtW0jabbQoyYms=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: HCbrsuvGY1FVJzsUt0GqxxIlT14Tu4C4TuXGf44iLCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1e:39:0d:ad:7b:89:f9:20:46:b3:5a:a4:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=072e613766f86d7116eb38121714c39508435b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:fe:81:af:bc:13:8d:13:45:08:69:9e:e4:
57:0c:a8:d0:00:0b:d6:27:95:dd:7c:cf:28:64:14:
c8:c6:25:77:50:d8:9b:a6:e6:a4:8f:50:c3:8f:37:
ba:c1:0a:cc:48:56:37:d3:dc:68:3e:b3:1f:72:78:
cf:b4:0e:a6:8b:3d:b3:0f:19:0b:16:72:2f:23:4f:
89:46:3f:bc:49:05:1c:cc:b9:71:db:e7:bc:8e:76:
28:b1:60:52:55:f0:30:f6:af:24:fb:f9:25:65:21:
8d:d0:7b:67:24:49:e3:c1:ec:5a:2b:68:92:bc:09:
25:04:9a:46:ae:0b:6e:47:4b:c2:e5:a3:1e:be:a9:
20:60:c1:8a:46:19:9a:67:60:6a:05:04:48:a6:87:
89:2e:21:cc:18:92:db:d3:cf:f6:b8:89:02:69:f7:
c2:85:d2:ec:12:1e:d1:02:dd:a9:33:69:8b:75:f9:
30:5e:dd:f4:06:c7:86:57:87:4d:bf:d2:6d:34:ad:
ed:13:b4:72:ec:ca:77:f6:5b:5c:fc:12:b8:7d:70:
bc:d2:69:39:37:e2:6d:1c:14:5e:b4:4f:49:ac:f1:
5a:9a:96:94:0a:49:8a:23:80:35:0a:a6:87:24:ec:
a3:4f:d9:9e:37:d1:09:5d:a2:84:0d:6b:0c:5d:f4:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:61:37:66:F8:6D:71:16:EB:38:12:17:14:C3:95:08:43:5B:0A
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:56:16:22:6e:9f:63:79:4c:84:96:b6:9a:88:c6:f1:5f:08:
38:2e:6c:ec:13:6f:a2:0e:b0:02:89:fd:06:ed:73:f3:65:4a:
38:3c:2a:d2:8d:d7:14:33:b1:16:5b:19:e3:f5:3f:7c:17:d0:
e6:8b:d8:7b:92:32:86:3d:f0:4e:83:6f:6f:ca:62:2f:4f:3a:
4c:5b:bd:93:41:53:ac:da:79:c5:32:ba:16:73:92:bf:b7:88:
f1:ae:8d:05:a5:ff:6b:90:5c:30:49:a5:04:c2:f5:40:88:56:
3d:f5:34:59:7e:31:9e:1f:fc:e3:73:b9:91:10:46:fa:3c:35:
05:7e:3b:14:ea:c4:cc:2f:84:8d:e1:2d:3a:fd:68:10:9f:2b:
18:7d:b6:9b:30:2e:0c:52:3e:53:5b:4e:0f:82:42:9b:8d:89:
e4:87:b7:5d:54:3a:3e:b5:38:12:97:9d:a7:25:25:7d:42:e3:
00:7e:23:12:d0:54:9b:62:ab:e7:78:44:e7:fe:63:fd:6a:9a:
1b:8b:e0:29:36:a2:f3:46:12:98:f1:74:f1:80:55:20:7b:83:
90:ae:64:2e:32:25:d9:27:52:a3:e0:0a:3c:4d:b3:cd:61:2a:
cb:18:ce:6a:2a:ad:8c:b5:08:b2:80:d4:50:cc:e3:e6:5e:2a:
fb:b6:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:21 2026 by rpki-client