Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: OteXfwa3rjOxUAymWH8mhBnCil/ug2lujGIViQbTJUo=
Subject key identifier: 46:70:BA:18:F5:72:8C:3E:6D:99:E4:F6:E9:E9:F3:E8:AF:16:BC:68
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 019D9B8761E711961E8A35C9D2B2DFE92B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 0787
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: q6MOXLoBjdleO0UPrUQwBCPdP4sbDS8/Ew8YZ5OKJkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:61:e7:11:96:1e:8a:35:c9:d2:b2:df:e9:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=4670ba18f5728c3e6d99e4f6e9e9f3e8af16bc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:ff:dc:42:3e:fe:8d:47:20:2a:4f:ab:ed:
c5:21:7d:98:11:92:cf:02:e0:ad:a8:88:72:58:7b:
1b:c3:95:9b:b3:0e:0b:91:d9:29:0f:6a:11:7c:fb:
d2:9a:45:fc:ec:3b:c5:46:33:60:22:35:1c:94:73:
a0:b2:ce:5d:e8:79:79:90:f9:b8:ec:54:05:2a:18:
02:1d:fd:06:7b:97:0d:21:54:44:89:e6:2f:20:91:
c1:52:25:f2:65:64:ea:87:80:03:9d:c8:31:79:dc:
8f:f1:f7:ca:16:68:53:a4:4d:3d:81:eb:3a:b0:16:
a0:00:66:e8:35:90:8d:9f:03:9c:1c:2d:b0:08:b3:
b4:8a:d4:ce:fb:92:02:0b:27:96:0d:54:3d:c7:93:
a7:74:27:24:19:07:c5:51:93:f1:cf:a2:8f:8f:84:
40:c3:b0:61:44:fb:69:01:aa:73:4c:59:08:9c:72:
a6:86:3a:bb:38:2a:e9:3d:74:13:51:6d:87:1a:ee:
9e:48:8c:9c:a4:16:39:14:ae:1b:c4:a7:e1:05:6e:
3d:f4:ac:23:19:60:87:ea:c1:02:d6:54:bd:72:e5:
b7:15:1c:a3:06:7c:ce:60:c1:c8:2b:c3:8d:e9:9c:
a7:32:26:4e:3b:a5:b1:54:8d:42:89:96:67:9e:04:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:BA:18:F5:72:8C:3E:6D:99:E4:F6:E9:E9:F3:E8:AF:16:BC:68
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b3:3f:f6:50:15:bf:c1:68:32:89:ce:19:a8:ad:0e:8d:a1:
2b:17:a0:dd:2c:15:58:5b:df:22:8a:8a:08:31:49:4c:72:ce:
67:65:22:2a:2d:90:4f:b6:d9:da:2b:cc:c3:09:5f:79:70:63:
46:f1:1e:8c:19:28:6e:5f:a9:16:7a:4d:c2:e2:47:27:5b:ef:
81:b2:32:04:90:f6:db:7a:84:1f:b1:84:c9:5e:9e:29:f1:f4:
5e:4c:51:e2:a4:05:79:b0:fd:de:47:fa:ab:7b:a8:58:a4:31:
14:d8:e8:72:21:aa:d9:80:e0:31:35:cd:6f:ca:90:c2:38:b9:
b1:71:f5:b3:bb:96:bc:15:b1:60:6b:f7:9f:9c:20:df:bb:6b:
46:26:25:31:d6:fa:76:6e:76:b5:7b:22:1c:92:cc:81:ff:31:
fc:04:3b:d5:12:83:4e:e5:76:f4:36:8d:66:45:77:a3:63:0e:
40:59:af:c2:76:fa:78:0e:36:ef:9b:5b:e1:ce:04:73:0b:24:
65:d1:ef:38:75:d7:42:fa:76:af:d7:29:bf:54:e6:5f:4a:6c:
88:58:94:9d:1b:52:b7:0f:b6:3f:2e:ee:5c:63:1a:d1:47:5e:
1b:ee:0b:94:b5:85:b8:7b:29:ec:f4:d1:19:d5:9b:d4:14:fc:
1c:62:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:47 2026 by rpki-client