Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: cvQ+FyCOFGcFgmIbyXtxYXUOChiKqq2cWh4Dze9NYb4=
Subject key identifier: 69:B0:FC:F4:6E:C2:66:D4:26:D4:CD:E1:88:65:96:83:E6:F5:9C:A8
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 019DA4539DFB3E400366CC46813B55D2C9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 0860
Signing time: Sun 19 Apr 2026 06:00:36 +0000
Manifest this update: Sun 19 Apr 2026 06:00:36 +0000
Manifest next update: Mon 20 Apr 2026 06:00:36 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 947XS+kT7JvtkwdmFJLC+kdbv+NBqQqrzBwApP5DNKg=)
2: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (hash: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:9d:fb:3e:40:03:66:cc:46:81:3b:55:d2:c9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Apr 19 06:00:36 2026 GMT
Not After : Apr 20 06:00:36 2026 GMT
Subject: CN=69b0fcf46ec266d426d4cde188659683e6f59ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:93:16:a9:92:26:75:95:a1:33:cd:1f:2d:
03:99:a0:86:8c:29:72:a5:fb:48:f6:cd:48:ae:96:
33:9d:4a:1a:3f:2c:07:2b:b3:8b:e1:a9:07:aa:48:
af:8e:3e:2a:4c:b9:0c:52:98:d2:4c:96:bf:76:53:
20:2c:f3:a6:6e:ee:fc:76:ec:eb:e5:1b:cc:bc:75:
4c:88:4b:7b:32:ee:83:c8:8f:5f:29:ba:55:2f:fd:
bb:10:19:99:2a:aa:23:35:b1:1c:98:4d:09:a0:c9:
0f:05:a0:8f:cd:e8:80:91:8b:6b:a0:ee:64:26:61:
e1:d9:ef:93:78:d5:14:d1:37:fa:52:37:98:43:f4:
bf:bd:b8:db:8f:a8:48:97:fa:d5:f3:21:bf:06:e2:
af:72:5a:b0:56:52:52:cf:8d:40:94:7d:3a:25:57:
25:9c:af:aa:d4:6c:a4:aa:a0:25:08:3e:c2:27:38:
df:65:d8:10:f1:5c:5e:f7:07:01:f3:0f:d0:51:8a:
bc:7a:e0:ff:e4:a7:34:66:94:9d:ac:b2:b5:83:98:
81:13:07:1c:ac:dc:b8:aa:57:17:ee:88:8a:cb:8a:
b1:87:75:5d:db:dd:78:aa:47:c6:7c:50:02:69:60:
5c:78:c3:5b:0c:26:d2:88:a4:14:01:47:74:aa:4d:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:FC:F4:6E:C2:66:D4:26:D4:CD:E1:88:65:96:83:E6:F5:9C:A8
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:5c:88:05:30:1d:b4:2a:3e:a9:31:b8:e1:cc:a7:fb:a8:
55:2b:b6:27:0c:5e:f0:53:76:f7:48:4c:8f:0d:19:24:49:b8:
30:a9:89:77:54:3a:9a:8b:88:80:48:bc:66:6f:50:86:f0:c4:
97:e1:1c:82:0c:e4:97:e1:6f:28:73:75:73:39:1e:7b:b5:8f:
bf:a7:7e:0c:e2:cf:9f:3d:45:80:25:01:32:9f:19:51:22:34:
f2:98:d4:aa:85:6e:63:6b:a4:42:1e:44:db:47:fc:4b:87:25:
d3:02:ff:e1:5c:61:93:b6:8d:e9:21:97:ca:06:2c:65:b7:3c:
14:9b:7d:71:c9:76:54:04:29:3c:6f:58:ae:31:d5:09:ab:92:
ef:f5:98:fe:79:6b:fa:29:4c:94:e8:28:c6:d0:49:3e:b1:77:
fd:09:ed:a3:46:15:f3:c6:53:27:4b:89:ed:4b:7a:0b:80:ab:
6e:a2:d4:e6:01:b6:a4:34:af:85:e1:70:56:df:3e:e7:aa:e5:
48:39:f2:42:9c:56:ec:3c:65:d0:8b:4b:13:47:ef:bb:8c:56:
b9:9f:de:f3:4a:fe:88:12:b4:66:73:6e:72:bf:56:65:70:11:
4f:13:4b:4c:91:3c:0a:b0:ee:05:35:87:61:0a:36:b6:96:b6:
ec:83:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:37 2026 by rpki-client