Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: cknoYOtvjPlxRtF2xyhhh1OTOYc1FHM1MQ433VUn4Eo=
Subject key identifier: 6D:27:1A:C6:ED:87:8B:62:2C:56:F2:7F:EA:E3:BA:CA:E4:4F:D0:7D
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019D9A74C863F140C42A1FE25B90A622A913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 17C0
Signing time: Fri 17 Apr 2026 08:00:37 +0000
Manifest this update: Fri 17 Apr 2026 08:00:37 +0000
Manifest next update: Sat 18 Apr 2026 08:00:37 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: sybAgHYd3ppJfrQFRpm43p9ZdAOleW4qX/2Rji0uXN0=)
2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c8:63:f1:40:c4:2a:1f:e2:5b:90:a6:22:a9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Apr 17 08:00:37 2026 GMT
Not After : Apr 18 08:00:37 2026 GMT
Subject: CN=6d271ac6ed878b622c56f27feae3bacae44fd07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:42:82:a7:bd:78:53:17:23:77:27:25:f4:
65:37:b9:9d:14:ef:85:7a:ca:b9:6e:04:f9:de:6c:
d5:b9:68:41:2c:90:cd:dc:1c:2f:8d:08:90:0b:c4:
e3:39:c2:26:ac:db:25:e3:8c:14:db:64:30:32:65:
a8:0d:65:65:4b:1b:d7:0d:eb:ac:c8:e5:a9:2d:e4:
c7:2c:23:d8:f9:ac:91:8f:e2:e8:09:e2:5e:36:8b:
6b:bb:6d:28:2d:15:6a:62:c0:d3:84:06:86:42:67:
d9:4f:79:f9:8c:f2:2c:05:d8:95:4d:8c:3a:a3:ce:
c9:86:29:84:a0:d3:45:88:94:ba:44:16:9d:dd:c3:
a7:04:d7:46:59:f5:27:d3:b2:59:05:22:32:49:b0:
4a:2d:76:b2:91:e2:e1:a5:8c:92:d4:d6:85:d9:06:
d0:0d:d8:21:a0:11:2e:ed:9e:8b:59:b2:46:d6:7d:
fe:45:8b:7d:4f:80:b5:2b:79:9a:b4:fb:84:4d:48:
8f:3d:f8:7c:75:b9:1d:59:d3:fb:86:f4:67:f0:91:
c0:9c:4c:f2:70:fd:f0:a9:69:20:e2:c6:b9:d9:98:
64:74:f6:c1:41:19:8a:ce:f3:05:72:30:53:4f:c3:
1f:eb:53:7f:d5:1e:96:0b:ff:49:84:9f:d0:dc:5b:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:1A:C6:ED:87:8B:62:2C:56:F2:7F:EA:E3:BA:CA:E4:4F:D0:7D
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:00:7f:71:44:ae:b8:d0:96:9c:36:b8:5b:d3:26:60:c7:9e:
f5:2a:d7:17:ee:f0:4e:8f:90:f2:be:05:5f:96:fd:75:f4:82:
5b:f5:57:ec:d9:f9:cc:7a:13:fd:65:a9:c1:2a:e6:fa:c2:b2:
2f:15:72:0e:be:ca:a7:1d:f0:1d:ab:63:92:5a:18:34:d3:e8:
14:2a:35:0f:9c:88:37:70:3f:fa:60:f9:79:70:7a:5a:22:77:
2d:8e:f3:34:a1:c4:d7:61:30:98:3a:6d:71:24:01:62:19:5a:
67:55:d0:39:7d:94:64:4a:f8:69:31:1d:6c:23:7a:de:a8:47:
93:3e:3d:47:e9:93:d9:b3:04:71:3e:6c:ab:f6:6c:57:46:22:
42:40:e8:2f:fe:55:1e:6a:93:64:64:8a:83:fe:9a:ec:5b:0e:
83:43:16:17:2e:b4:a7:0d:15:f9:95:62:98:3c:93:f2:23:0b:
22:0e:36:0d:8a:b1:69:52:6b:c1:81:ad:87:fc:45:ee:d6:5a:
c3:f2:5b:41:03:2e:f7:91:43:af:b8:e5:1b:1f:28:89:b9:b8:
7a:4c:0b:7a:5a:b5:37:fb:c0:43:07:c8:5f:18:65:c3:1d:7c:
59:7c:75:9a:19:a5:66:c3:35:68:f4:47:9e:ea:b5:a6:a3:8e:
21:e0:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:31 2026 by rpki-client