Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: /U+jL8j0TUauyqZPTrx1IY7ctyxeNG5/MRgiRokTdcw=
Subject key identifier: 65:7A:40:52:2D:4F:32:70:CC:95:55:4C:4A:4E:F2:05:56:D4:B4:39
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019D98502F84CA7DC1B090947691E304463A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:24 +0000
Manifest this update: Thu 16 Apr 2026 22:01:24 +0000
Manifest next update: Fri 17 Apr 2026 22:01:24 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: a2W1qVGOZgNCOLteDqDXEwqRkVQ9sWhxmM7TT7JS+98=)
2: wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa (hash: CzTKoLpU+KVC67tkElsOnwd+vAA1NZMBJOWkm7nD350=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:2f:84:ca:7d:c1:b0:90:94:76:91:e3:04:46:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Apr 16 22:01:24 2026 GMT
Not After : Apr 17 22:01:24 2026 GMT
Subject: CN=657a40522d4f3270cc95554c4a4ef20556d4b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:5f:85:6a:df:de:2b:3b:a4:d5:da:5d:52:
90:0b:27:98:bf:35:b7:2c:77:32:eb:fe:c9:4b:a0:
cc:7e:60:93:9e:00:55:ff:48:98:90:c8:53:a6:f5:
a4:4c:aa:0f:f6:64:69:43:23:16:a2:0e:a5:14:77:
57:e1:ee:71:5e:da:a7:a2:91:dc:9e:97:65:57:96:
35:07:61:b0:b1:a7:34:3f:6c:a4:69:1d:f6:ae:64:
e4:d9:58:73:f9:12:22:6b:eb:a1:be:a6:06:0a:20:
86:83:ba:31:bf:2b:1d:a9:07:3f:7e:d0:d8:cb:94:
5f:cf:5e:d8:b1:d2:b1:10:4f:68:10:78:6d:ca:8f:
74:03:09:31:38:18:ad:07:29:5d:e0:00:9c:73:41:
76:a8:a6:58:22:b6:5a:76:f0:7b:7d:10:d5:a3:e5:
2c:a0:e6:55:6f:35:b1:29:dc:ad:79:fd:92:6a:34:
fd:25:c0:84:b2:60:c2:44:28:c8:d0:99:52:e3:13:
fc:c5:c9:05:81:8d:a3:dc:79:c6:e9:05:41:ee:97:
8a:09:09:36:73:80:d9:50:ae:7f:14:dc:d8:59:5b:
eb:c2:76:22:d5:e7:c9:1a:e4:98:8c:cd:a2:9f:5b:
1f:96:53:b1:cb:53:30:c1:7a:d2:ee:f7:12:f1:2a:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:40:52:2D:4F:32:70:CC:95:55:4C:4A:4E:F2:05:56:D4:B4:39
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:40:5d:b8:5f:80:dc:fb:a4:aa:2e:a5:db:45:6f:f9:08:9b:
56:e4:ef:1e:25:25:c3:4f:26:4c:48:2e:79:9a:c0:9c:4f:f6:
54:e4:20:c8:e9:f2:7b:aa:84:d4:b5:ec:c0:dc:0a:9b:a3:35:
f1:6f:7a:0a:47:99:4c:30:aa:08:91:73:f0:71:3d:2c:02:bd:
17:db:7d:91:a8:c3:12:73:f8:46:a1:a5:fd:c0:51:8b:8a:16:
1c:2a:8b:9a:b3:69:68:5b:ee:2f:e0:03:ff:15:88:bc:3d:b6:
48:0a:be:48:ac:69:b8:55:71:3f:2b:67:1f:ce:04:97:fb:eb:
90:c9:f0:6b:68:60:35:13:df:96:16:34:6d:45:83:8c:b0:b0:
a0:75:13:3b:cd:c2:64:86:a9:cb:e8:33:08:36:ac:5b:ee:84:
cd:c3:0e:15:e0:2d:aa:b1:3f:ce:8d:a3:be:c5:a3:53:e3:94:
ce:fd:65:79:96:47:4e:f3:6f:82:fa:ee:87:4a:ee:a7:f5:cc:
80:ac:56:3e:c3:d9:37:dd:4c:c1:7b:dd:c1:c7:1d:90:2b:e3:
8c:20:0f:48:cc:9e:1a:84:b2:25:0a:12:ee:39:2b:36:1f:43:
88:68:07:b7:2a:47:d1:e5:d2:01:fc:d0:57:42:6f:d9:fa:fb:
64:98:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:11 2026 by rpki-client