Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: ZUE0jjJbISXMSmGKEBxdgTHO55b1w0Mc00ac5NkKRx8=
Subject key identifier: 4A:E7:DA:4C:CA:22:BD:64:96:A9:6D:E3:25:98:AD:36:CF:25:D4:18
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019D98189A1BA4B0AA1ADCEE9F03A0C18A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:00:42 +0000
Manifest this update: Thu 16 Apr 2026 21:00:42 +0000
Manifest next update: Fri 17 Apr 2026 21:00:42 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 1tX2SyF8uUNw7qhU2zcRVGHzWq3K1uBrFCyb7E2nBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9a:1b:a4:b0:aa:1a:dc:ee:9f:03:a0:c1:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Apr 16 21:00:42 2026 GMT
Not After : Apr 17 21:00:42 2026 GMT
Subject: CN=4ae7da4cca22bd6496a96de32598ad36cf25d418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:2f:7d:04:46:19:7c:c2:59:2e:37:e7:d7:
09:a0:24:a2:ca:d6:83:dd:b5:3d:17:b3:5b:be:37:
50:4e:9c:71:d5:50:0b:79:73:61:4b:c2:6a:06:08:
e4:b2:03:db:92:56:68:7e:f2:a8:e2:92:7c:d8:87:
35:39:f8:9e:04:00:17:09:5d:7f:11:45:b0:1a:34:
07:c1:f0:0d:67:cd:c2:ca:7f:77:3f:9f:cd:6f:79:
60:b3:c2:c0:0e:ea:28:fa:08:eb:ba:0c:59:c0:4b:
b5:93:6a:5a:95:59:0d:ed:95:38:e1:8a:24:66:5f:
58:a7:dd:b5:f6:d1:1c:90:fd:75:cc:92:ec:01:51:
2f:11:07:6f:16:18:e1:e9:ba:cc:92:05:4c:4e:bf:
24:3b:c3:34:c9:88:05:61:27:ae:b5:dd:c8:ae:b3:
46:52:50:cd:52:76:55:4d:2f:98:7d:af:9c:21:2b:
c6:e9:78:32:1b:d1:4e:05:b5:50:57:17:7f:79:c3:
e0:c3:b8:fc:6a:34:e8:fc:ec:12:b3:50:1d:2d:25:
7b:b4:bc:13:9b:84:37:ef:43:89:eb:aa:2a:fa:63:
ae:8a:28:09:a7:3e:fc:83:1a:0c:24:65:3d:de:5d:
50:15:b6:f3:65:ff:8f:2e:f5:d7:78:38:9c:02:62:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:DA:4C:CA:22:BD:64:96:A9:6D:E3:25:98:AD:36:CF:25:D4:18
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:85:70:63:b1:83:29:6a:18:31:f6:39:d0:0d:7b:ae:24:f4:
be:8d:94:62:12:f8:4b:94:a0:3f:89:23:c8:38:5c:c8:94:3f:
59:01:7a:06:63:e9:74:54:31:be:fe:8d:80:82:44:15:0b:78:
31:39:9e:e5:d4:bd:e2:d6:a1:58:56:ab:00:62:e9:b8:73:03:
e3:ba:38:bf:e9:d2:18:7a:d8:1f:ab:09:4f:5c:c9:9f:75:67:
20:a3:01:4c:86:f5:f1:e5:0e:00:2a:d2:c0:f8:d2:d8:ba:ba:
b3:6d:7d:d3:26:90:0e:20:5d:52:37:b9:3c:fa:7a:d8:6b:61:
3c:7b:4f:80:9f:fe:2b:76:e7:1b:db:bf:85:a8:18:32:84:4b:
4d:dc:fe:9b:69:61:1f:50:c2:35:82:86:23:a8:b9:07:35:57:
52:94:3f:4b:11:24:91:66:a1:84:44:b3:83:13:45:f9:29:43:
a7:f7:01:af:9c:d4:da:c5:dc:53:a3:1c:81:27:d1:cd:9e:df:
4a:d4:4d:64:ef:2e:f4:1c:8c:6c:7d:3a:7c:00:6f:ec:6c:65:
12:4e:c6:df:1a:30:59:0e:18:c9:1c:97:95:6b:5a:e2:ac:10:
03:8f:2f:04:e2:2d:31:c7:d5:6b:e0:4a:72:94:d8:15:3c:61:
6a:3d:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:54 2026 by rpki-client