Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: yeOVA0h59cFmPGf1HOmYxYAgkK8R5o5YRUzzQnCwEDk=
Subject key identifier: 40:DA:DA:81:26:E0:1D:1C:B5:FB:88:D7:A4:7B:7E:A1:66:BD:C7:74
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019D99995293856489B4E1A918AFA77DEBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: D5K8QPUyMYfagYASYwL4lujklys.roa (hash: hyr6M3p6aHhLRaW47SkFIlt8kwLspMP/qCLs3ZNqvMQ=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: w81Eq+NK3Kki7boyDnbR4PNDfDUQjOlfIbRiOlGIyto=)
3: c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (hash: Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:52:93:85:64:89:b4:e1:a9:18:af:a7:7d:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=40dada8126e01d1cb5fb88d7a47b7ea166bdc774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:07:97:3f:9e:5b:1e:4c:91:10:99:a0:80:
a0:ba:b8:eb:4c:2b:ee:3f:62:c7:dd:af:1c:80:d1:
b2:ce:0b:bc:4f:13:19:d9:21:97:b6:d7:b2:d2:1b:
b8:c7:e6:84:b7:30:76:a8:6f:dc:af:f4:7e:6e:16:
c3:e8:54:bc:7d:06:c8:ba:a8:63:6f:bc:2b:b0:b7:
67:b8:a6:25:c3:b6:49:a6:f4:91:1c:a7:c2:2d:6a:
ef:63:6d:5d:11:ce:44:8c:a7:a8:ba:fe:d7:40:e2:
63:69:96:f7:9f:fe:4b:eb:c9:4d:db:3e:7e:2d:46:
8f:a6:ed:1d:a3:c0:57:bc:d2:a2:74:68:2f:bd:7b:
c5:96:3b:f3:6b:ff:00:b3:b9:d2:f9:27:07:56:06:
16:a2:28:55:9f:4a:2c:f1:13:b8:13:22:e5:19:13:
37:6a:fb:c1:5f:c0:90:e8:04:51:0e:76:da:37:19:
0a:09:de:71:8c:b0:3a:fe:59:e0:ea:60:ef:34:ba:
59:5d:31:0a:9b:79:30:73:c4:c4:2a:2f:64:b0:9b:
7d:ba:69:68:29:0e:d4:df:f4:de:31:46:61:ca:44:
da:3a:b3:57:fa:01:2e:40:11:7c:72:da:92:01:cd:
6b:58:56:46:32:c3:f7:e9:2a:6e:01:31:20:c1:f3:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:DA:81:26:E0:1D:1C:B5:FB:88:D7:A4:7B:7E:A1:66:BD:C7:74
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:63:9f:67:4b:7f:20:54:17:a3:5c:de:45:b0:d2:fa:ad:c3:
1f:0c:d8:4b:bb:b2:ab:d5:4b:06:5b:ee:27:4d:b9:d5:88:c1:
d5:2b:94:e4:2e:76:ad:22:7e:14:16:ba:a9:27:30:6b:b2:5f:
6d:7f:52:67:50:07:20:e2:41:cc:95:4f:0a:cc:41:60:18:25:
55:c7:0f:26:b2:f0:9a:d3:da:a5:7c:16:17:98:d0:1b:8c:4a:
50:3a:7b:0f:cf:dd:04:fd:2a:2b:71:7e:db:97:d9:66:83:d2:
da:22:08:99:cf:1b:79:3c:d2:3b:a2:1a:c9:bf:71:09:49:f3:
75:f2:ff:ce:5f:66:62:89:40:69:77:a6:61:4c:9e:d4:17:c8:
28:f1:ee:6c:0f:8e:c8:1e:81:69:8f:cb:4a:ab:a8:d3:92:f9:
74:4d:63:16:f5:f6:5e:61:02:57:68:d2:0c:c9:9c:94:e6:60:
4c:e7:8f:77:ed:de:6a:8a:37:aa:b4:bf:62:dc:a4:93:68:c7:
0f:8c:fc:d6:a5:bd:c2:01:cb:d2:59:3b:dd:58:9e:06:41:8a:
58:b2:5b:a0:5b:c7:f3:2b:4d:04:e5:4a:07:af:36:45:0b:ca:
3d:83:56:96:75:c4:fe:fa:9e:07:cd:50:eb:3f:73:46:d6:03:
c5:b0:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:52 2026 by rpki-client