Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: azlNpVl/M+OPGyQyEI6Ut8+IFlztQhoskEyL5DdN+Yg=
Subject key identifier: C3:56:8D:58:C6:A9:D1:1A:DF:52:21:E7:85:4A:81:F7:3A:C4:5A:33
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019D97E1A7361E38CE11D3EDBFA442E64258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 0890
Signing time: Thu 16 Apr 2026 20:00:41 +0000
Manifest this update: Thu 16 Apr 2026 20:00:41 +0000
Manifest next update: Fri 17 Apr 2026 20:00:41 +0000
Files and hashes: 1: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: CJlLzhhYNBlTiKRxYMM3MQjIAb2VpQaYj8J0a+l7JcU=)
2: m6f0KblgDdn2oDmiijUoJd1_umI.roa (hash: QlWp9v6ktsMkYvji1hdedyPM7rbbm0wOY1KKEhtnmFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:a7:36:1e:38:ce:11:d3:ed:bf:a4:42:e6:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Apr 16 20:00:41 2026 GMT
Not After : Apr 17 20:00:41 2026 GMT
Subject: CN=c3568d58c6a9d11adf5221e7854a81f73ac45a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:60:a3:8d:54:75:ea:95:18:cd:81:8f:72:
b0:49:2f:6b:05:7f:63:7c:28:0c:42:de:5b:d9:e4:
57:f5:6d:02:9e:d3:95:86:20:0e:ad:57:03:65:6c:
43:cf:fe:7e:df:56:ac:27:27:b5:0a:d7:7f:05:0d:
ef:80:a7:70:46:b6:21:ff:6c:00:10:7d:e0:d2:e6:
dd:3f:25:bf:8e:99:ae:cf:bd:19:d4:1e:ce:3b:8f:
19:62:31:7b:8e:3e:ae:aa:03:a1:8a:09:d3:ae:db:
30:23:2b:fa:d0:35:1e:1a:60:b9:c9:15:43:95:b4:
b2:2d:24:27:4d:b0:80:87:9d:d4:78:7c:b1:f9:00:
a4:32:b6:8d:44:93:cb:2f:b7:e6:3c:fc:45:66:1f:
19:2b:e5:ca:e5:c1:4a:83:3e:08:3f:f9:03:28:78:
44:63:fe:c8:74:bf:6f:29:72:f6:76:71:19:d5:78:
33:29:43:0b:33:ac:5b:21:18:88:8a:0a:a9:23:01:
a1:ad:63:31:b1:5d:dd:df:92:53:0b:54:97:7b:dc:
ec:75:ef:19:1a:ad:97:fe:f3:0f:3a:f9:e8:0f:30:
c3:70:93:3b:94:9b:fa:3d:8f:85:3f:05:d8:f1:15:
23:ab:8a:0f:f2:5a:ce:73:d5:57:1e:93:05:42:23:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:8D:58:C6:A9:D1:1A:DF:52:21:E7:85:4A:81:F7:3A:C4:5A:33
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:9d:4b:9f:94:69:01:bf:c9:a1:76:01:99:d1:d6:a7:9d:
f9:6d:06:ac:b4:05:34:65:3a:ac:f8:5f:45:78:d0:bd:79:9d:
b1:97:1d:3c:a4:85:f5:ed:38:b6:e4:11:5a:d3:70:c4:49:0a:
a2:06:e6:d9:a0:7a:dd:ef:40:e1:98:31:80:d4:bf:76:f2:fe:
0c:69:3a:4f:46:40:8b:7e:dd:93:5a:67:eb:cc:db:ea:f6:de:
8d:56:fb:94:15:6f:bb:6e:3e:88:bd:54:49:4d:2c:ab:f6:e9:
b8:a0:54:6f:47:e7:a4:8e:21:2a:15:69:22:14:dc:16:11:bd:
e6:24:8d:f9:a9:99:75:69:67:70:06:7e:1b:92:28:b9:f6:47:
1b:63:05:a5:55:36:72:ed:e7:52:42:e2:69:e5:f3:08:78:a5:
7a:51:95:a8:e4:ab:dc:3d:69:8c:78:e9:cc:9f:4b:8c:73:a9:
eb:36:86:61:49:a1:2b:ca:3f:8a:f9:af:c4:93:f6:7f:70:2e:
ca:4e:9f:bf:73:0a:9a:ef:62:0b:87:fc:b6:61:bf:70:6c:b9:
88:92:f4:f4:78:57:93:2f:70:7b:77:d4:56:12:fa:90:5f:ff:
85:3d:33:c0:80:b0:ad:e8:6d:ca:9a:4c:36:d9:a7:50:e2:45:
dc:2b:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:14 2026 by rpki-client