Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: 8XB71WYOcrE8G4wT29037BPxrDx2Wly5uC/HhyVTDew=
Subject key identifier: AA:A4:08:4C:D0:5F:35:A3:4A:E4:F7:B2:40:2E:46:4E:02:8B:E6:14
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019D9A752AAA231BE9A7D87F1721875E67C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:01:02 +0000
Manifest this update: Fri 17 Apr 2026 08:01:02 +0000
Manifest next update: Sat 18 Apr 2026 08:01:02 +0000
Files and hashes: 1: iJabTTtAtZd2-Bt3JGr6szkGsok.roa (hash: 0sW3IKzf/8J/9kZJ3JO4MPvHO33GYi073LMRFSBG6BU=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: nij5E4eB5xBGFm9gNyrd2xIwOp3iGElizjwBkwse51A=)
3: xbuO7BsG7LbkSSQWawkvzIhK7y0.roa (hash: rlJz6+DJBLMlRi3myws4jEcOw9pVWqZGLHBQLp+0Ork=)
4: y3sbhhs4VAa9_leAXdVqA3jNjH8.roa (hash: Y15UbgY+4x80GYEq/q2RiWXokuPdkLl/xPzz6tjdo0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2a:aa:23:1b:e9:a7:d8:7f:17:21:87:5e:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Apr 17 08:01:02 2026 GMT
Not After : Apr 18 08:01:02 2026 GMT
Subject: CN=aaa4084cd05f35a34ae4f7b2402e464e028be614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:31:08:c5:fd:28:0e:84:74:22:17:d2:80:
99:21:12:51:0f:11:ad:43:e7:f8:18:51:51:9b:a2:
63:29:7d:65:6f:a4:fb:7a:9e:84:a8:4b:17:43:bc:
4f:75:8b:84:04:b5:28:c6:f0:99:26:fd:d4:78:2c:
a5:32:99:69:54:5a:b8:77:6a:98:43:b8:50:55:42:
0c:ed:9c:2f:57:79:ca:60:77:ac:74:a6:92:c3:e2:
1c:7f:09:3c:e8:aa:19:0a:15:58:ec:53:47:80:81:
58:05:c8:59:6f:99:b0:59:9f:d1:88:1c:b6:ce:ab:
99:d6:3e:04:65:8e:94:99:41:c6:92:54:29:54:a4:
cd:9f:d1:c2:6e:f9:91:0e:e1:3c:d8:f1:1c:c2:90:
4b:8d:5e:9e:c9:db:f8:6b:03:e2:90:f8:4c:1a:02:
49:32:d5:ef:30:e7:65:78:08:9d:fc:24:4a:4e:08:
5b:00:42:89:10:bd:cd:b5:42:70:85:d7:6d:77:6d:
ba:bd:66:30:9e:42:b9:d2:92:df:5a:91:67:89:b4:
db:63:65:2d:6c:56:a7:07:eb:2e:c5:1d:25:97:64:
21:91:8b:3d:17:dc:ec:b4:42:35:c3:c5:ed:d2:80:
51:84:d0:8e:f5:29:98:f5:0c:08:af:3d:2c:fe:57:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:08:4C:D0:5F:35:A3:4A:E4:F7:B2:40:2E:46:4E:02:8B:E6:14
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:52:8c:17:82:8c:4f:50:e0:24:2d:43:61:d6:68:56:62:21:
63:53:cd:f4:42:79:43:1a:d8:c3:7e:af:8a:90:67:6e:ce:52:
c9:89:02:b2:be:82:45:34:aa:c2:42:0f:a2:b1:2d:f0:37:4d:
51:76:da:f5:d0:6d:cd:f8:27:41:81:0c:52:7a:c5:69:05:80:
41:11:bf:a1:49:4e:5f:3f:69:6e:a0:ce:79:4b:ea:31:c3:bf:
52:c5:c3:e2:45:e0:85:6a:ea:95:53:dc:ab:e1:6b:fd:c9:73:
09:38:56:28:aa:62:10:a9:4a:c1:13:b5:d3:65:60:c2:06:46:
76:2a:c4:49:ac:8b:d5:b4:17:bf:60:9d:de:5a:ac:b2:a3:53:
c5:10:0b:d6:dd:27:da:f3:fc:06:6e:ba:8e:fc:5d:5d:53:50:
43:d0:34:7c:8f:5e:33:38:9c:bd:db:a6:c3:80:91:1e:d0:d8:
00:dd:dd:d5:23:2b:a3:18:fb:3a:39:b8:c2:e0:8a:b8:af:f6:
0e:b6:d2:ff:a2:ab:1b:ad:6e:88:82:22:0a:b4:e3:a1:a2:40:
42:49:f6:69:05:85:85:4c:48:93:b4:50:3c:ef:5d:18:82:18:
82:33:2e:23:35:e5:fa:f1:88:40:a2:a2:76:d3:ab:96:4d:9d:
0c:77:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:56 2026 by rpki-client