Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: 72E2/bfFDbCkxSg25NBUGSt4JB0+3uNB5WrjOUBpTnk=
Subject key identifier: 02:D3:17:D2:E4:32:70:0D:E1:2B:57:86:FA:38:B8:1B:C1:4F:54:28
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019D9AABA38883E3119849AE7D96812F3A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 09:00:32 +0000
Manifest this update: Fri 17 Apr 2026 09:00:32 +0000
Manifest next update: Sat 18 Apr 2026 09:00:32 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 0KNN93f48PSaZ+m845qtBhhbyOgTs4qGhbWnjPhoczQ=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a3:88:83:e3:11:98:49:ae:7d:96:81:2f:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Apr 17 09:00:32 2026 GMT
Not After : Apr 18 09:00:32 2026 GMT
Subject: CN=02d317d2e432700de12b5786fa38b81bc14f5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:46:4d:9d:3b:20:c4:33:b4:60:ad:5c:95:
39:4c:26:32:ab:6c:28:30:b1:b3:d4:bc:18:b0:7e:
26:59:c2:23:15:9e:93:e9:a5:a4:80:d4:c5:07:3b:
d1:f3:d9:be:54:30:af:2a:72:ca:f3:07:9b:10:e5:
ad:23:c0:32:65:31:f8:db:22:74:11:38:30:c9:de:
52:af:98:20:74:41:69:31:b1:33:79:c3:62:36:dd:
4b:ef:50:87:a3:70:de:fb:9d:51:78:44:a5:a7:1c:
66:02:2a:84:df:1d:3f:d3:6f:d0:a7:09:31:1d:d6:
89:74:2a:1e:32:ba:6d:ef:cf:9e:70:3f:5c:5d:85:
20:19:dc:94:ec:e0:78:07:bd:76:3f:d9:73:0a:46:
fd:7b:d3:07:cb:60:28:21:a5:a1:83:73:3a:fa:ff:
9f:eb:15:3b:ef:b5:af:a4:0a:a0:9b:ca:e3:7f:72:
c3:07:0c:f9:13:5c:6e:e4:6f:2e:b5:e1:c8:c9:cd:
1d:90:96:5b:81:4b:41:7c:13:c4:5b:69:3a:b0:f4:
19:c5:48:19:a5:da:7c:65:f8:73:13:1f:93:81:f9:
f1:8b:4e:f3:fd:f7:e2:30:ee:76:d0:64:d1:3c:28:
58:24:ea:38:36:5e:04:d8:a9:d1:8d:f5:6c:21:c6:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D3:17:D2:E4:32:70:0D:E1:2B:57:86:FA:38:B8:1B:C1:4F:54:28
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:74:8c:9c:22:5e:e9:f4:99:e6:10:d3:94:c9:4c:ff:c4:e4:
f9:8d:d6:67:d0:bd:2a:51:d8:f1:82:ab:0f:65:92:fc:42:54:
38:a9:00:f5:f4:ce:b6:10:2c:f6:12:30:33:aa:27:af:39:7f:
d0:53:44:bb:4a:ff:01:dd:5c:91:50:34:74:f2:af:5b:ae:77:
9f:f7:af:2e:5c:1a:2a:e7:87:5e:0c:07:ff:f0:e9:af:ff:b1:
7a:ba:7f:c5:51:98:f6:67:fa:44:e0:c7:de:8a:6c:4a:00:1a:
f4:5b:b5:86:95:d1:4d:2b:d7:14:a6:10:25:34:50:5f:ee:b0:
44:06:e6:77:a6:17:db:33:5d:fc:61:c3:36:59:52:81:ef:f5:
2a:04:ae:1e:4e:67:28:09:1b:d8:ef:5a:46:0e:88:3d:89:15:
4a:74:8a:1e:18:e6:fc:09:70:45:54:fd:9f:5a:e5:69:fd:94:
9a:ea:71:3e:93:06:72:14:66:c5:76:d6:dd:a9:9f:60:7e:db:
33:2f:16:16:e1:b1:85:a2:9c:89:89:65:30:02:0f:28:85:61:
dd:79:ba:e7:6b:12:2a:41:ca:55:e7:c7:4e:d9:ff:b8:eb:63:
8e:c5:fb:21:d7:37:a8:f3:90:6f:65:85:37:f6:8c:91:5e:f6:
02:b8:28:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:10 2026 by rpki-client