Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: NSdMdVR28XVa90XJC/gBFTqfBxb0UQUs7rPgL1Y9jrs=
Subject key identifier: 12:3D:7A:4C:B7:DE:9D:67:BE:FA:14:3D:DB:70:FD:F1:A4:DC:55:5C
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019D9A3F15E4291D4795C6844C4F45E267A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 07:01:58 +0000
Manifest this update: Fri 17 Apr 2026 07:01:58 +0000
Manifest next update: Sat 18 Apr 2026 07:01:58 +0000
Files and hashes: 1: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (hash: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4=)
2: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: rADuVzJFD0C7SoNDYIrRnjaOnMFKwdIm8NzegkSFsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:15:e4:29:1d:47:95:c6:84:4c:4f:45:e2:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Apr 17 07:01:58 2026 GMT
Not After : Apr 18 07:01:58 2026 GMT
Subject: CN=123d7a4cb7de9d67befa143ddb70fdf1a4dc555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:07:a7:bb:17:1b:80:58:5c:b7:05:10:1d:
0b:90:ff:79:b5:63:e5:72:cf:3e:d5:38:ea:98:cf:
21:23:2e:e1:76:a9:eb:73:3d:a6:af:7d:e2:b9:06:
ad:ef:b3:13:08:84:0d:29:ca:58:09:18:1e:1a:e3:
55:36:70:fa:85:c6:31:8c:91:6d:e1:d6:9f:6a:c6:
af:4d:59:a3:e1:d3:da:08:08:89:07:e1:ed:a8:8e:
92:b5:b8:21:a6:db:98:c0:29:f8:38:d0:1e:a2:d8:
3f:86:f7:8f:44:59:09:38:f7:99:1b:38:cf:5d:ca:
25:a5:1f:58:9c:96:11:2a:bc:d6:83:34:fc:ee:e8:
36:c0:e6:ef:28:5b:a5:27:fc:cc:60:78:ea:f2:a9:
f4:7e:83:91:63:e2:28:22:e5:b7:1a:fa:9a:99:07:
f2:ef:2f:3e:d3:68:56:db:c8:fa:61:83:f3:03:c0:
a9:4a:ce:f3:4b:a2:5b:dc:c7:aa:c3:82:83:73:ca:
a6:cf:04:d0:0f:4f:79:74:4d:ab:f8:a2:39:fc:63:
49:ac:36:9c:44:0a:24:22:28:03:c9:77:80:03:76:
a7:05:98:8d:d1:6e:f7:f1:c1:d9:29:a9:0c:bc:8c:
99:f4:c4:1d:4b:3e:1a:34:96:7f:75:17:06:93:95:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:7A:4C:B7:DE:9D:67:BE:FA:14:3D:DB:70:FD:F1:A4:DC:55:5C
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:ff:e4:6f:52:fe:6e:97:df:2c:51:d2:fc:d2:92:e4:ae:
75:30:55:77:d6:ad:88:58:2a:a7:8b:38:d4:0a:7a:75:a5:97:
50:38:84:16:84:01:66:1a:fe:5e:0e:91:f4:47:30:e0:cd:c1:
e8:af:2e:c8:ca:89:1f:53:a9:d8:be:1e:45:27:35:61:91:63:
25:31:7e:c3:4a:a4:a2:42:dc:94:54:96:3c:d6:69:50:1a:60:
40:df:6f:b0:7b:a9:0b:c6:8f:49:4f:96:01:42:32:c7:47:55:
5e:ec:b6:05:56:b2:4b:01:fd:28:0d:5f:f7:44:68:ea:4b:26:
e9:11:4a:4b:08:36:4e:f8:c6:c9:22:fa:9a:9f:c0:5b:4d:4a:
5a:25:d4:f1:2d:b8:ef:3e:eb:47:0a:1a:db:88:b9:cb:0f:2b:
20:d4:4f:45:d3:71:d2:50:46:c8:41:02:4a:7d:99:04:d1:11:
34:8a:b9:3c:0c:c4:2d:3d:a9:59:91:fc:02:51:a1:d0:c6:62:
87:ab:5a:a3:73:97:d3:b8:1c:ed:89:27:bd:ca:51:e4:3d:6e:
20:10:bf:f9:e0:e2:58:24:ab:03:db:1a:b5:3c:0b:f4:04:45:
71:a0:14:fa:55:a6:3f:37:94:9e:98:45:be:dc:a3:5b:aa:50:
af:5b:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:18 2026 by rpki-client