Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: CBE7OrzZA2FtqtcR4cZD5bvG2qv6KgTTK1/z10ZMD7s=
Subject key identifier: 61:88:A5:EC:05:AA:8E:6D:D7:E0:E3:19:AB:CA:CE:4B:B1:D5:C9:43
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 019D9A3EA610C946B396D9E04590A656FE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: ylSRtv2XKgB+XV8IQ/wL+7R5x9u8NIBvChrvIQJlajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a6:10:c9:46:b3:96:d9:e0:45:90:a6:56:fe:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=6188a5ec05aa8e6dd7e0e319abcace4bb1d5c943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:90:c4:45:eb:b7:18:ee:19:3e:08:c1:f1:
a1:0c:93:d8:35:f6:70:fc:53:9a:d3:11:b6:99:43:
77:da:8e:68:00:69:b9:8a:57:3a:bc:13:88:60:5e:
2c:50:83:ee:0d:7b:51:ff:9d:82:cc:0c:97:59:b9:
89:f5:51:27:ae:2e:66:e0:fb:96:65:22:75:e9:c7:
c9:b8:c8:c5:84:35:76:ea:d4:d3:c9:b4:b2:eb:7d:
ea:36:39:bf:03:2e:bb:ea:6f:a2:58:d1:3f:d6:0b:
8a:5e:c6:bc:3d:e8:a2:89:a6:ff:48:18:1f:a4:78:
84:48:09:a0:db:d0:ae:c5:aa:3d:41:56:ae:4f:2b:
cd:5b:3c:34:43:a4:a7:67:34:09:04:e9:54:08:29:
e5:58:c0:b7:7b:aa:ff:ed:72:8d:1e:84:c6:8f:2a:
bb:0e:42:08:4e:64:62:c6:ca:cc:a6:51:59:cb:e4:
bb:e5:64:de:f2:8d:ea:b6:47:35:c2:4e:b3:c8:b6:
32:90:98:f8:94:b4:7a:18:93:7f:0f:0f:0d:ab:b4:
7a:19:31:24:33:bf:a6:07:70:34:85:35:13:cc:3d:
63:01:03:13:be:40:50:07:9c:46:51:49:9e:d6:fe:
38:6e:6b:f7:f7:80:e1:22:66:63:9d:89:5e:03:e7:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:A5:EC:05:AA:8E:6D:D7:E0:E3:19:AB:CA:CE:4B:B1:D5:C9:43
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:82:79:1d:ba:b9:4d:d5:07:33:8e:7f:f8:95:8c:ed:57:
52:d4:8a:a9:41:a6:f1:80:30:46:d9:93:c1:00:76:a9:65:d1:
28:20:5d:18:6a:5c:a7:5f:de:7e:b1:a9:2d:a3:18:ad:63:cc:
b1:61:98:73:15:f1:bb:66:57:91:46:12:9f:16:dc:33:56:77:
e6:e9:e6:03:43:fa:cf:e0:9f:89:e3:38:53:20:38:de:72:e9:
4c:f4:36:aa:d5:27:fe:4b:91:f5:ef:41:ea:1f:d8:fd:00:69:
2d:f4:a3:2c:c8:3c:47:2c:10:a7:2a:98:cb:f0:0a:f7:f3:f4:
89:57:e1:e0:25:ce:46:52:d4:f1:25:84:00:3a:ac:a3:2c:f9:
17:40:15:76:6d:98:03:9c:02:72:48:f6:ad:b5:0f:3b:04:e8:
68:68:44:01:19:56:9c:f2:f5:9e:fb:93:36:e8:22:6c:2d:0c:
30:9b:e9:25:66:de:38:30:61:b4:ba:f0:74:71:5f:e7:15:aa:
4c:76:0e:6e:36:74:08:09:f3:ce:59:95:8d:bc:8e:b9:fa:74:
ac:39:5a:92:57:d4:fb:de:e3:0b:1b:49:6f:25:2b:41:1e:c5:
1b:16:e4:1f:71:f6:32:27:5b:44:19:3d:0c:3c:47:e7:d0:1f:
f7:a9:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:41 2026 by rpki-client