Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: ExitcCs5AywGn4Lw8j1b/r5MrVipqrXv+baAUx1599o=
Subject key identifier: F2:7F:08:9D:8B:8E:8F:31:24:5A:DD:D6:33:75:7D:B9:16:0B:28:60
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019D98F413AB322A33036613C58CEEEE218B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: suPODLssmDkVjV1e+XaQ5b67JxjYXRJ2h2f+L4U6F0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:13:ab:32:2a:33:03:66:13:c5:8c:ee:ee:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=f27f089d8b8e8f31245addd633757db9160b2860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:49:60:d0:bd:50:d3:3b:be:75:88:6f:95:
c6:9e:a9:cc:40:b7:b8:d6:8b:10:40:63:ff:e4:f0:
33:b5:71:0a:74:0f:dd:87:b1:e7:7d:21:08:73:6f:
c0:ff:3e:b3:3b:d1:86:29:d2:ad:50:c4:64:77:a4:
6a:d2:1e:c0:c8:b7:ae:7e:c5:15:b8:c5:ac:8b:e4:
8a:ce:99:66:59:da:a5:35:55:b8:af:5d:02:75:f8:
31:7c:e8:33:03:d5:e2:fe:ca:db:04:31:75:9f:48:
df:ab:17:d0:f1:c8:e7:a7:5b:a4:b2:ea:28:b4:0b:
e1:5f:e8:02:51:06:05:a0:63:08:2e:62:db:be:10:
ca:4f:7a:bc:05:04:9b:f0:44:17:72:67:5b:d0:6c:
44:ed:d1:89:3f:96:05:b6:2e:8a:e0:a7:4e:27:f8:
ce:15:79:98:eb:9c:ee:2d:e3:61:02:cd:f8:b4:4b:
fc:fa:5a:18:22:eb:e2:e1:3f:93:c3:06:e6:e3:8c:
22:fa:fe:a3:1a:e1:2e:d7:2b:c9:7a:8c:49:a7:ae:
4e:7e:28:ac:6d:4b:c9:fd:65:63:f5:df:cd:16:01:
d2:ba:9d:32:2c:d2:a7:85:ed:25:70:9b:6d:dd:cb:
40:a2:50:95:d3:b3:32:82:bb:54:91:07:31:a6:e8:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:08:9D:8B:8E:8F:31:24:5A:DD:D6:33:75:7D:B9:16:0B:28:60
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:37:12:be:9b:87:45:d4:44:97:bc:c8:a4:85:83:0b:0c:ad:
c5:13:d0:98:f0:06:0e:96:27:46:5c:f8:02:0c:0c:1d:6a:4f:
16:f5:e9:f9:d1:cf:44:a2:09:ef:80:20:4f:e4:c4:68:c0:d9:
4e:c1:e9:b9:05:d0:7c:25:db:23:b4:0e:da:e4:ac:c1:fd:b2:
61:8b:13:e0:23:68:27:b4:7e:ea:21:da:97:a1:20:ea:7a:23:
14:30:26:2b:45:ab:3e:b6:a3:0c:4f:e0:50:72:4a:b9:37:ac:
4c:cf:56:f3:d0:3e:fb:92:92:2a:b4:4d:ee:b3:65:1c:58:8d:
e3:e7:ea:c9:e6:b3:4a:47:25:3c:a5:9a:82:ba:3c:41:9f:0c:
7f:0b:c4:a9:6f:8a:f3:75:eb:fc:4b:02:c3:a6:a8:27:b6:01:
fe:83:8b:b0:1f:41:f5:6b:ef:e5:04:cf:0e:75:19:eb:75:23:
7d:b8:b7:fd:73:78:83:06:e6:f5:2c:b6:70:90:6f:9d:2e:45:
3d:58:50:33:98:d6:9d:da:10:9a:da:9c:da:26:47:a3:03:2a:
14:a2:d3:fe:40:5e:c5:63:04:d9:e9:54:83:84:a9:7e:04:17:
8a:92:06:27:37:f6:93:90:05:97:8c:31:37:a6:dc:5f:fe:52:
6a:ea:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:39 2026 by rpki-client