Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: VfGd54IbFWPpOyIHvE0lJF305vmIVm7wE4/po96hxWA=
Subject key identifier: 5F:DF:32:71:0D:4E:F7:47:03:57:AD:17:F4:1B:67:28:42:DE:40:57
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019D9998E90273D5B4417C43E5651169B7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1604
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: eUG_AmjvEk2Uh9jdu3zrIDZcE_M.roa (hash: crSLoIhk/emALC03/EeOK1gvgnibfibC83SpQwGH7wc=)
2: hAHPjweyfzEmZctOAqBgVej6D9Y.roa (hash: hZD266S3QeLuF8KPvtFtT0P+a47oHHfhQQOsd40VTSc=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: UUlfHTSZfATGDG8uzNrzLlDT5t8soEx3LRWzfahEt+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e9:02:73:d5:b4:41:7c:43:e5:65:11:69:b7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=5fdf32710d4ef7470357ad17f41b672842de4057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:1e:e4:5e:09:1d:e0:18:ca:16:32:12:67:
a2:2f:22:ca:bc:70:8b:b2:47:37:fa:5c:32:7f:67:
80:e8:84:db:a1:d4:9a:2c:e6:71:eb:26:49:19:35:
b5:80:fa:7f:df:c7:1f:95:09:16:e6:d7:a8:b3:42:
d9:ec:0a:ff:2b:88:20:a3:32:76:5c:46:03:1c:54:
5d:ba:d7:aa:4f:01:47:ef:d8:bf:af:d6:3b:89:f7:
c2:ca:d8:62:f7:92:91:c1:63:88:32:dc:0a:85:e8:
d6:56:0b:cb:9b:ad:84:e6:03:9d:5b:c9:5a:64:a9:
80:52:dc:8e:e1:c8:d5:e3:4b:0c:15:75:b6:5a:7a:
0d:fc:48:1b:80:7c:a2:dc:ec:66:f9:17:55:a4:f7:
00:c3:b9:e1:7e:98:d9:2b:9a:b5:a7:fe:0d:e2:38:
83:3a:12:a8:2e:f2:9f:2d:c3:f4:b9:a1:66:1f:44:
f3:bd:c6:a3:a0:96:27:93:fe:ef:49:92:a2:57:47:
5c:62:35:80:da:bb:dd:61:dd:33:11:bd:a4:1d:b5:
51:f0:1b:b1:4f:9d:19:4d:cc:22:8e:77:f4:15:6c:
7e:87:50:c8:5b:46:1b:ee:5a:81:f9:46:49:08:e8:
ec:1e:65:c8:25:fd:cf:5e:a7:df:19:e6:08:53:04:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:32:71:0D:4E:F7:47:03:57:AD:17:F4:1B:67:28:42:DE:40:57
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:f6:f3:25:1a:cf:a3:33:70:33:9d:b7:ec:ad:53:50:ac:
5a:5f:b9:0c:93:d6:39:11:3f:3f:90:62:3b:0d:0a:0f:34:b8:
08:9f:b2:31:16:ae:47:ce:8a:c4:74:b1:ff:f1:6a:47:39:7b:
34:63:6e:78:3e:66:f9:a3:b2:a2:ef:94:8d:85:90:60:bb:62:
0c:f9:a5:8c:82:da:d8:af:7a:ec:3a:d0:c8:09:ac:24:d5:b9:
be:f4:41:76:b6:34:ac:6e:81:ea:69:e1:22:d8:2e:a1:1b:7a:
0e:89:bb:d6:36:6f:07:0a:dd:e7:5f:fc:ec:5a:20:10:a9:3b:
cf:9f:79:c6:57:50:9a:c6:52:db:f3:50:48:48:fe:e9:55:24:
93:2c:cb:79:d2:13:a6:0e:a5:e0:7e:87:05:4c:be:ff:f0:25:
24:0c:d4:86:20:db:33:de:47:31:fe:68:d5:5b:8f:11:53:a0:
4f:a3:94:c5:45:69:d7:21:ba:54:0c:5d:05:e8:e3:c8:fa:32:
fe:7f:54:f0:bc:ea:27:1c:a4:75:15:18:18:00:15:76:be:16:
6d:f9:23:41:59:18:22:ab:68:6a:50:d5:3e:72:68:b6:11:23:
54:b5:02:d9:3a:58:05:5d:db:36:ce:93:95:6c:03:2c:f9:e7:
1a:9d:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:18 2026 by rpki-client