Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: wyRgwdc1dHKaH6vQ8rNLSZ5nfTtxfdntll5AmtvEyvc=
Subject key identifier: E5:A7:D6:DF:57:B5:CF:4B:BE:61:81:EB:7D:F0:90:16:7D:43:1C:F0
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019D98BD616B8491D270BD6203C6411215E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1889
Signing time: Fri 17 Apr 2026 00:00:41 +0000
Manifest this update: Fri 17 Apr 2026 00:00:41 +0000
Manifest next update: Sat 18 Apr 2026 00:00:41 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: qxHYgHxOuYXdZH5QE7LHRakhwT85JiUU76Ru+DB/x14=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:61:6b:84:91:d2:70:bd:62:03:c6:41:12:15:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Apr 17 00:00:41 2026 GMT
Not After : Apr 18 00:00:41 2026 GMT
Subject: CN=e5a7d6df57b5cf4bbe6181eb7df090167d431cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:74:4a:3a:0a:83:35:69:ae:79:e7:30:d3:
89:f7:63:ca:de:b1:5f:eb:f1:00:7d:b0:9c:40:79:
48:df:aa:88:67:ff:99:f2:22:63:9c:4f:e9:c6:64:
b2:d1:68:de:72:5e:e2:d9:45:a7:5d:e5:9a:7a:06:
f7:fb:60:de:2d:6e:d2:6d:f4:e5:9a:2d:05:48:78:
81:7a:e4:3f:17:e8:4d:99:ab:3d:58:57:ab:cd:25:
c4:4c:7c:10:ae:e2:6a:47:81:67:f4:e2:d5:4d:1f:
cc:e2:a8:71:84:dc:55:34:ac:05:a3:e3:b7:4c:91:
88:0f:39:7f:5e:8a:63:60:9d:47:60:e6:c8:f8:b5:
5c:a4:b7:37:f5:c0:9f:5f:8f:30:e5:53:d6:a5:62:
81:e9:2f:31:92:ec:19:0a:76:ca:5e:7f:07:7d:cc:
80:ff:86:43:e3:f6:09:cb:98:a6:92:f2:4b:43:18:
b6:28:75:dc:80:d6:6d:70:0e:19:97:e4:f1:11:a9:
2a:73:3b:74:62:6a:d2:cf:a8:04:35:48:13:77:7b:
e7:b5:25:ce:e8:94:ec:dc:25:bd:0e:8a:43:6f:6e:
cb:a8:42:02:17:82:0d:3f:72:4d:7f:ca:b1:cb:90:
5a:c1:b5:35:f1:75:4e:7e:63:39:44:6c:ae:7f:46:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:D6:DF:57:B5:CF:4B:BE:61:81:EB:7D:F0:90:16:7D:43:1C:F0
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:07:5e:34:9f:cb:eb:fa:7c:69:fc:9c:ff:ea:09:25:e4:
e8:bf:d6:c9:dd:d3:4f:5b:48:d7:03:c1:58:4d:93:3d:c8:98:
fc:41:bb:8f:06:e1:b1:bd:6c:07:63:b7:e3:4b:82:a1:b8:19:
1c:11:52:d7:b4:90:8a:2b:a7:27:94:80:f4:4d:b9:ff:e0:b4:
ae:c3:75:15:42:4f:2b:3e:d2:ca:f3:53:95:75:5a:c6:e0:67:
5e:d8:f5:8a:ed:d2:e7:ff:7c:9c:b5:87:c4:b8:9f:4f:6c:03:
1a:95:a5:e6:0f:8f:95:f6:78:06:41:01:0e:e2:38:d0:ff:6e:
bb:f6:da:59:87:df:8a:3a:91:8f:ff:69:a2:7c:cd:8c:dc:a0:
77:0e:69:a1:30:fa:01:1e:c6:51:c4:93:45:11:38:40:2f:3e:
e8:62:2b:17:d5:31:86:76:23:3b:9f:af:a4:61:b9:3d:91:ae:
35:f7:e8:38:07:53:e4:8b:be:52:21:8e:20:25:2c:62:38:ce:
f1:98:af:6e:99:a9:8d:a7:a8:8d:13:dd:72:b4:4a:75:e3:fd:
66:43:d0:b8:d2:e2:74:1f:cd:ba:46:4b:00:35:4a:09:2d:bd:
cb:78:21:02:ad:7d:1d:08:63:11:11:f1:b1:73:1f:65:b0:0c:
b7:c9:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:24 2026 by rpki-client