Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: D5z09DMOdu62Ffestehfg37VkuH5GyR1+0DvupKsj5s=
Subject key identifier: 79:05:03:92:1B:45:C6:76:5F:6A:5A:C9:93:63:DC:AC:D7:B8:AA:42
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019DA453C69716EEFA89495004CB8A40EC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 06:00:46 +0000
Manifest this update: Sun 19 Apr 2026 06:00:46 +0000
Manifest next update: Mon 20 Apr 2026 06:00:46 +0000
Files and hashes: 1: aoOpVJxHaq6lirDB7KBfHBY1mPg.roa (hash: yU+Zr+0ARyapGrg/EO3GqqfA2M5mqsDqcwUrOhZ27aQ=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: X+D4GdjIfGHpFNWIKwNwqmQl27W1GXLtTw9jSfDMorc=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c6:97:16:ee:fa:89:49:50:04:cb:8a:40:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Apr 19 06:00:46 2026 GMT
Not After : Apr 20 06:00:46 2026 GMT
Subject: CN=790503921b45c6765f6a5ac99363dcacd7b8aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:a0:21:a1:d1:3a:ca:fd:fc:95:a5:cc:50:
ae:ef:61:57:e1:5a:a3:90:f4:19:6d:3f:14:51:a1:
20:0e:00:60:15:15:79:4e:57:e5:76:b7:01:34:25:
36:6f:dd:7a:f8:68:78:06:5d:23:08:36:6f:6e:75:
a7:b8:6c:58:62:cf:6e:f3:b5:8c:32:a7:58:fb:bc:
9b:db:90:cf:e4:b9:8c:b6:9c:5a:2a:5c:e3:f2:e1:
2b:21:e3:3e:17:1b:c3:62:5c:4d:d1:b4:de:05:29:
db:ef:c1:39:30:15:b3:2e:52:cc:d3:4f:98:bf:a2:
33:b7:ae:55:ea:d4:fe:f1:4f:3f:b2:dc:88:4e:a9:
96:9a:77:0e:0c:2b:aa:e3:24:89:00:97:01:e8:73:
0a:5b:23:74:69:34:ac:ef:8b:2e:de:61:93:63:95:
25:c5:b1:66:94:42:9d:3e:f9:1c:72:49:3c:b3:62:
eb:64:f5:14:4d:f3:e5:ed:aa:e8:b7:06:2c:ce:39:
20:19:19:c8:76:11:1d:cb:c3:ee:25:d0:4f:7b:ca:
23:5d:4f:02:f1:bf:2c:6e:14:1f:8d:98:df:67:53:
66:92:db:bc:c6:7c:75:28:fe:c4:7c:e3:a4:bb:2e:
33:3e:91:d4:96:c7:7c:fe:8e:e8:4f:1f:6d:a5:bb:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:05:03:92:1B:45:C6:76:5F:6A:5A:C9:93:63:DC:AC:D7:B8:AA:42
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:55:97:e1:df:4e:f6:96:9e:8b:0d:e1:cf:83:12:98:cf:
99:df:14:f2:87:74:25:5a:68:20:ef:29:a5:83:e1:1d:07:6a:
b5:43:0f:eb:03:f8:72:30:ad:25:60:43:64:85:9e:58:46:a7:
10:5c:c0:a4:c1:02:67:31:13:2a:f8:2d:ad:18:61:d7:79:71:
b5:c3:64:78:fd:e2:d6:cc:46:3a:d8:51:cb:72:3a:1d:b6:7a:
fd:15:5c:a1:ee:fc:57:81:5b:29:79:56:d1:be:18:4b:71:81:
f7:c9:d6:f5:65:b9:8e:7d:19:f9:66:f4:2d:57:dc:02:d7:8d:
2c:d8:e8:94:48:2e:e8:ec:a3:74:bd:c9:5f:44:4d:41:16:76:
41:b9:7d:91:f9:b0:24:f0:e3:68:f5:df:b1:b7:e0:80:04:d2:
5e:43:48:52:af:0a:ea:7e:73:d2:f0:9f:2b:01:6e:b7:8a:63:
68:df:90:7d:3e:f9:39:8b:05:42:61:e1:fc:79:fc:96:af:a4:
54:28:91:c1:c1:b1:ee:3a:c3:d8:80:b7:b0:8c:0c:7d:d2:e1:
2c:bc:85:4f:da:2c:e6:a6:4c:9b:80:92:5f:f9:f8:82:92:08:
7d:ba:a8:f6:23:8d:69:e1:bf:a3:be:8d:59:b5:a8:a8:2b:fc:
9f:04:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:00 2026 by rpki-client