Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: HvOmf4EXqJTUorm+Vd+d4VTaAMPOVZU/S4RimHZA450=
Subject key identifier: 7B:C3:7C:14:DF:A7:0C:93:D6:D1:F5:F0:3C:27:06:98:39:04:0D:EF
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019DA41CB73919112D21506FD39A0CD139B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 05:00:38 +0000
Manifest this update: Sun 19 Apr 2026 05:00:38 +0000
Manifest next update: Mon 20 Apr 2026 05:00:38 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: MPdxM6YVurnkwsJlEsVDM6tbCy/dAiUEth198P01Wo8=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:b7:39:19:11:2d:21:50:6f:d3:9a:0c:d1:39:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Apr 19 05:00:38 2026 GMT
Not After : Apr 20 05:00:38 2026 GMT
Subject: CN=7bc37c14dfa70c93d6d1f5f03c27069839040def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:e8:0a:97:8e:75:df:cc:58:6d:53:da:1d:
de:f7:53:96:a0:21:c5:63:21:98:f8:67:db:cd:e0:
15:2c:02:27:c0:e1:8d:4d:40:c5:e0:d5:e4:09:e0:
bb:25:25:0c:61:56:b2:8b:02:38:cf:0f:03:35:5c:
29:e5:42:4f:fd:be:c3:b8:4b:4d:7d:66:cc:0d:04:
af:c9:cc:b9:e2:5d:bf:f0:f0:42:e7:3c:0a:1a:99:
3f:0d:9a:0a:28:cc:59:64:8c:aa:95:b6:63:7c:3e:
af:dc:33:21:9e:6d:e2:ad:ce:49:38:3e:22:fc:9f:
c4:01:ea:b0:cb:70:90:27:ff:d1:01:90:67:61:f4:
d9:00:b4:09:ee:a1:2a:e2:a6:4b:0f:ef:21:06:52:
59:4f:1e:60:b8:e2:73:7a:51:37:cd:80:f3:44:7e:
66:52:a0:b3:69:93:f5:38:8c:de:ed:c5:a4:bc:57:
00:f5:04:70:0d:35:75:19:a3:0d:5b:06:87:ec:51:
ad:3e:21:20:63:75:3a:83:c0:3c:64:d1:f3:7c:0c:
00:b8:03:4f:11:be:1b:a6:de:90:9f:dc:3f:c6:80:
16:d0:22:d4:79:00:2d:ea:8c:4d:df:2d:4b:c6:4c:
19:8a:78:32:4e:75:a2:70:41:af:d9:c5:51:c6:68:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C3:7C:14:DF:A7:0C:93:D6:D1:F5:F0:3C:27:06:98:39:04:0D:EF
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c5:3f:38:28:b1:f4:44:4b:28:98:2c:f0:d7:7a:5d:ad:fb:
28:7b:dd:ed:9f:e2:59:0e:ec:6a:ee:35:d2:07:c6:db:95:06:
75:ff:7a:27:b3:2a:a9:11:39:8c:d6:c2:3a:54:0d:0a:4b:58:
83:3a:be:c5:b0:38:2f:9e:84:ba:64:e4:a9:4d:68:e6:89:bd:
0e:8e:3c:5f:0c:a2:97:a4:d1:26:a6:5d:fb:e6:ee:61:e3:c4:
aa:7a:6a:15:1e:73:85:50:d6:6e:18:cc:87:7d:4e:1b:2b:da:
c9:37:75:69:25:af:14:d1:15:6b:ab:f6:24:ef:84:12:dd:ee:
5c:37:09:41:91:33:b4:e4:9a:ea:30:ef:89:8f:85:e7:bc:6d:
d8:b4:f9:28:b4:7f:d1:d2:19:0e:12:c3:6d:cb:f2:d9:7f:e5:
13:1a:a7:12:f1:5d:41:02:f1:35:b1:92:fe:2a:fe:98:16:87:
98:c3:3a:cd:12:fe:25:63:79:a1:d4:fe:8b:f9:2b:34:04:98:
2d:97:12:bd:70:15:4e:b1:ee:69:09:ab:b1:dc:1a:ea:d4:4e:
64:f1:fa:2c:de:da:7f:7d:2e:ab:31:00:8e:63:55:59:d2:b6:
50:84:39:3a:a8:5b:8f:2e:78:dd:f4:c2:38:02:25:cf:93:6c:
fb:47:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:27 2026 by rpki-client