Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: mNwjixhWumgnTQIZGL62Z0KPvYVGFNdfT35etlKPDgM=
Subject key identifier: 45:77:28:40:DE:46:7D:75:D6:5E:85:C2:5F:07:26:27:96:CE:14:C5
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019D9BBE66CD652A76826D8F8476F481BB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 14:00:39 +0000
Manifest this update: Fri 17 Apr 2026 14:00:39 +0000
Manifest next update: Sat 18 Apr 2026 14:00:39 +0000
Files and hashes: 1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: R8m3pQOHg9BZT52mKhaMLN+ArIA75ZHJxM9tVnl6sz8=)
2: fhF1gg6tTaPV39pNHXzapn66B-4.roa (hash: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:66:cd:65:2a:76:82:6d:8f:84:76:f4:81:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Apr 17 14:00:39 2026 GMT
Not After : Apr 18 14:00:39 2026 GMT
Subject: CN=45772840de467d75d65e85c25f07262796ce14c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:43:ff:7e:a1:40:87:1b:9f:40:44:91:26:
b4:10:1c:05:ba:7e:e1:ce:3e:3b:7d:24:c5:46:e0:
57:35:78:b8:4f:91:1f:3b:f2:b1:8d:f5:e7:d6:ee:
2d:af:fb:ca:1f:fb:65:7a:77:c5:78:4e:88:1b:51:
09:23:88:5e:a8:16:22:31:d8:46:28:6c:7d:97:01:
b6:f7:5c:fd:57:37:fc:7c:1f:6a:47:4d:76:5f:b2:
fa:1e:01:7f:4e:9f:5d:9b:d4:c2:aa:ba:fd:94:79:
4c:94:4d:e0:27:dd:f5:aa:5c:05:77:1b:7c:65:1e:
17:90:47:cf:ca:d2:de:e6:75:4c:e1:9f:7f:3e:ad:
41:66:7e:87:0c:8d:64:e7:6d:4e:86:61:25:7c:5e:
3e:bc:e9:2f:ff:fe:d6:d3:93:f5:66:02:ab:19:d9:
63:62:5a:be:e1:bb:99:84:09:c0:9e:3b:74:11:32:
00:a9:3b:71:e3:26:2a:7d:c5:ea:54:4a:0b:86:eb:
3b:3b:6e:cb:2a:66:86:c8:3d:de:29:46:41:2e:cd:
fc:60:13:44:58:a1:79:c6:6b:93:3e:92:ab:48:42:
a4:91:8c:4e:f7:e9:98:5a:65:49:72:dd:bb:33:31:
c1:ba:f1:84:e7:e8:0d:0a:00:a3:ef:80:a4:0b:8c:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:28:40:DE:46:7D:75:D6:5E:85:C2:5F:07:26:27:96:CE:14:C5
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:e4:ad:d5:d4:da:bb:54:6e:b2:1e:c2:78:69:ab:de:92:
5c:be:00:13:60:52:80:d8:be:2c:7a:b8:34:a2:1d:c3:00:de:
b5:f8:17:a1:63:75:9b:c7:bb:76:42:57:c3:8f:be:c8:07:53:
5b:b0:fb:fa:d7:9a:6e:89:49:3c:d9:dc:d5:ae:df:1c:a3:4f:
c0:c2:43:b2:f2:c4:f1:bc:6c:fd:4c:42:47:e6:8e:45:06:8c:
a9:69:ca:bf:b7:5e:99:a0:9a:2e:ed:d6:5c:80:cc:af:9a:7f:
31:95:0c:4a:99:dd:f6:06:31:e5:f7:da:1e:5c:46:a2:83:1e:
4a:7d:1d:38:a8:2c:b2:2e:84:d0:10:c8:b6:c8:10:7e:c3:d6:
95:e7:36:61:09:a8:23:c7:be:c6:b9:28:6a:50:79:41:be:83:
3b:0d:d7:cb:a9:6c:34:84:c6:29:5e:4a:bc:c9:e6:8c:22:32:
04:2d:dd:6b:a7:82:a9:7a:73:8c:c4:ec:46:66:2e:a8:56:6b:
d9:f7:d4:99:0b:ea:da:5d:82:bd:49:7a:ac:ce:9d:de:df:63:
3b:d2:ee:f4:8e:69:c3:b3:d2:3b:9a:31:18:3b:f9:6b:13:75:
a3:82:2e:b5:24:b4:a2:46:b4:74:a0:1e:60:6c:1d:97:e0:54:
7f:88:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:20 2026 by rpki-client