Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: wmNRla9NjRVWI3TJZvz7th1W3g/OclH63sz3+hSgjEc=
Subject key identifier: 97:28:85:DC:22:1A:EB:FA:7D:E1:83:9D:A3:F2:65:C8:95:90:5E:CB
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019D9A74B68EB8D1B1FD6009DD7D05F90D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1113
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: Y09RPTpzyvXwpSeRTWC6gMyfD/pfYP6+Ef2VAbL/Ogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b6:8e:b8:d1:b1:fd:60:09:dd:7d:05:f9:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=972885dc221aebfa7de1839da3f265c895905ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:1e:0a:45:6e:cb:0b:07:8d:aa:16:cc:21:
34:16:1b:de:e1:42:c3:35:d2:c0:4b:b4:84:f1:22:
77:76:89:b6:2b:73:82:6f:6d:2f:af:f6:59:60:e9:
8f:1c:bb:08:cd:0f:4a:23:38:81:dc:26:71:e5:e9:
9d:aa:c1:59:64:6d:a4:47:a3:ed:e4:01:8c:4a:b9:
15:7c:00:8b:53:37:6e:45:41:9e:a3:90:b4:7f:d1:
27:46:2b:3e:30:6e:83:89:6f:31:4e:93:fb:76:91:
f5:29:50:cd:f9:64:0f:ab:de:53:6a:9a:bd:5d:07:
e0:4f:90:da:80:c5:4d:71:25:40:5e:02:a0:b8:ad:
de:e0:46:83:ab:0c:31:04:6c:42:c6:8c:d7:d3:64:
16:42:f6:6c:78:b3:94:73:4a:c6:26:fb:44:23:57:
1c:ac:1c:4f:e3:2e:7c:04:d6:6c:3c:d2:23:26:41:
ee:7c:86:64:38:55:7a:cc:fa:a2:77:e2:a8:b5:d1:
83:9f:ec:33:f9:fe:65:57:fe:0f:ee:de:ba:3a:59:
0e:8b:f4:1d:98:46:4f:ea:42:ca:99:5b:89:b7:f9:
f0:84:bd:64:71:95:d5:13:f7:df:ee:2c:05:81:b5:
e2:0b:d5:1f:d9:73:ef:ae:16:b3:82:b7:0f:0f:7e:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:85:DC:22:1A:EB:FA:7D:E1:83:9D:A3:F2:65:C8:95:90:5E:CB
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:86:dd:c3:99:de:44:99:0f:57:63:e9:97:59:f8:a7:c9:
fc:57:5b:04:34:25:2b:2d:60:e6:22:1e:b4:7e:75:85:15:80:
9c:33:40:e4:28:74:9f:e9:bf:a7:79:1d:ac:6b:ab:82:cd:f5:
83:d3:65:15:05:9c:1b:3a:0e:d6:20:78:6b:e9:47:2a:63:42:
5e:28:e3:ed:16:cd:21:6c:18:6f:f3:68:80:20:17:d8:ed:05:
20:30:2f:c0:30:c7:ca:ac:57:55:ab:42:fc:59:8f:78:76:3d:
9d:5e:97:6a:c6:16:f9:15:ba:d4:ee:fe:70:6f:57:f1:47:2d:
96:b8:59:3d:02:7c:8a:e1:25:52:9b:b1:b5:7b:3f:82:bb:5a:
03:79:0b:ba:74:a9:44:b5:fd:0e:ab:a5:e9:bd:f0:5d:87:f8:
01:4d:b0:57:eb:1f:08:a8:9d:3e:1c:95:04:e0:40:35:1d:53:
6d:00:03:02:56:79:e4:d7:c0:31:f8:4c:f1:fd:bd:03:5d:7c:
c5:18:1b:1b:75:cf:4c:5b:8f:9c:7a:cf:7d:08:22:82:41:a9:
29:da:a4:0a:7a:04:46:13:39:ed:8c:1c:60:3c:ba:f6:fd:e4:
68:50:f4:58:13:1e:5b:8f:4e:d9:5c:36:9a:43:16:98:04:7f:
5c:57:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:28 2026 by rpki-client