Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: QfGdn+0UQ45uTgoMmgCJ1f5ZEY3I/s9iE8VugdiZuKQ=
Subject key identifier: C0:3D:10:C9:30:A1:1B:D5:DA:24:E1:6D:95:32:DE:7A:B3:93:A4:15
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019D99CFF6F50C8858BA3678DD524F3BCBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 182B
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: Wazx3LZDxhV9N5q9JPv8h2Qs-YE.roa (hash: KJ3tWSAQqQBPzmhSgtG5aN79Rwb62j6iubPkCvI++ds=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: 6DuncdR9qY4TeIZzvmPHv+qnSdfVYdRaEQzr6k+aVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f6:f5:0c:88:58:ba:36:78:dd:52:4f:3b:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=c03d10c930a11bd5da24e16d9532de7ab393a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:91:e4:a4:e5:0a:25:61:55:17:41:1d:97:
11:9d:36:c6:07:21:52:d1:82:91:e1:66:73:90:b7:
af:43:8e:cf:dd:c6:b6:c3:fd:3e:5c:a7:7e:7d:b0:
9b:f4:7c:6f:48:02:11:0f:51:e7:5b:e6:28:52:19:
ad:af:7b:fd:25:ba:01:35:60:af:fd:11:3e:e6:71:
27:9c:10:96:59:47:c8:76:e3:52:93:20:3a:5e:70:
f2:85:6e:2c:76:e6:92:84:c6:cf:01:cf:8e:3c:c5:
51:59:31:87:62:f8:9c:2e:eb:d4:f2:8b:8b:b5:78:
ab:ac:0c:43:ce:6c:d4:03:39:6f:ba:6c:55:6c:b9:
64:a3:69:2e:c1:c7:97:46:08:32:68:58:28:70:d6:
9b:b1:8c:7c:2b:fa:fa:c8:02:d9:13:25:0f:4d:16:
b2:58:ea:38:22:da:2b:39:9e:62:a1:11:59:e9:f8:
53:f5:16:5b:f2:10:8d:f2:76:ca:37:3e:ac:d7:0e:
bc:1e:66:10:19:14:84:34:82:bc:62:cf:7d:e2:26:
28:84:9b:09:d9:a8:02:a1:22:c3:57:7c:c0:06:d0:
30:94:9b:5e:6a:8f:d9:d3:d4:01:b4:d1:71:ac:b2:
2d:10:41:a6:24:56:ef:a2:e9:9b:04:69:f8:a5:d2:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3D:10:C9:30:A1:1B:D5:DA:24:E1:6D:95:32:DE:7A:B3:93:A4:15
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ce:c4:6b:3d:d3:b5:66:78:cf:30:17:3c:50:27:74:9b:da:
04:41:cf:d8:1b:68:92:22:43:72:ff:31:cf:b8:d4:48:bb:e4:
7b:f5:fb:b9:0b:28:cf:2f:81:ac:06:a0:8e:5b:0c:cc:a9:67:
df:e9:30:f9:00:dc:f1:1e:45:80:de:f5:e7:46:b0:c8:f6:70:
7d:a3:6b:77:58:18:e7:f7:5e:a3:70:2e:66:8c:a3:5b:1d:f4:
89:93:11:f2:40:3d:4e:01:af:df:b7:4f:e1:1f:03:d1:b3:fc:
d2:97:38:b6:8a:16:cf:0e:3a:58:a8:79:66:28:62:7f:7c:04:
1e:90:df:73:3b:d7:03:ff:c2:e3:f2:1d:91:6a:65:41:d0:3c:
d1:37:42:da:1b:4f:fa:5c:e0:2b:94:a4:f1:c0:8a:98:30:63:
18:8a:2f:5e:72:c6:a6:5e:22:54:9b:33:63:32:fc:b6:21:85:
cf:29:86:6d:43:0a:28:ab:f5:93:3b:7a:26:1c:00:89:7d:f2:
e3:3f:a7:f6:a6:04:c1:17:7d:d8:52:09:fd:12:9e:0c:1e:61:
0a:37:39:0b:8a:81:c9:89:be:f8:68:7b:f7:a4:1e:86:79:31:
f8:a8:9a:b2:c7:9c:82:2d:27:8b:45:8a:6a:39:61:cf:9b:84:
c9:fe:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:51 2026 by rpki-client