Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: j3b8UCcHyakNDCIE/QSoGEdZSINnEXG8ZPldG48+OLg=
Subject key identifier: 2C:9E:09:A9:D0:CE:65:BA:43:82:60:34:94:69:33:E1:DD:F8:72:3B
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019D9A753A50438156DFA152D187C39789FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 08:01:06 +0000
Manifest this update: Fri 17 Apr 2026 08:01:06 +0000
Manifest next update: Sat 18 Apr 2026 08:01:06 +0000
Files and hashes: 1: 0nPKlV2FgZ0LZAZQ71hQLBw38Uo.roa (hash: Fb/Fjfm/zNM0E1C+LzpEdYLGiz1+AVF8bxpn6ETeoj4=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: qyY3rWL4ziE9YnxW9AyD4aj1bYK30kPqjzxfjxgJjUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3a:50:43:81:56:df:a1:52:d1:87:c3:97:89:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Apr 17 08:01:06 2026 GMT
Not After : Apr 18 08:01:06 2026 GMT
Subject: CN=2c9e09a9d0ce65ba43826034946933e1ddf8723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:96:53:cc:8f:b3:02:d5:fa:c4:40:da:b0:
2e:de:81:03:d2:50:17:ef:2c:39:1d:46:47:3c:66:
53:f2:7a:b4:36:2f:a0:36:07:0c:ed:08:9c:0e:8c:
75:5e:8b:d0:fb:9e:56:d4:e7:52:d3:e0:ee:c4:72:
2e:2b:5a:56:fe:06:16:93:28:24:e2:24:c3:ed:7f:
74:50:a4:f3:4e:1d:32:4c:0e:c3:da:86:f6:ec:da:
f5:39:ba:f4:7a:be:93:53:d9:0d:3b:fe:62:08:c3:
d4:ee:28:99:35:43:48:52:52:ab:d0:c0:1e:cc:cc:
71:46:5a:76:fa:f2:13:a6:00:fa:7a:40:3f:3d:45:
1a:1b:1b:54:19:d8:d4:91:f9:86:2e:80:d8:f6:37:
75:14:40:cf:3c:9c:48:5c:e6:a5:9d:6c:2e:ab:42:
b7:1d:86:0f:6d:e8:5d:bc:0d:97:d8:49:0a:d6:06:
47:82:24:38:0c:28:f2:96:7e:e7:2f:70:29:41:4f:
4a:e9:7a:11:03:83:53:1d:b2:6c:d3:4a:ce:57:ae:
86:39:5a:04:1c:71:ec:93:a5:a0:86:d1:52:5c:57:
0e:ee:68:3a:c8:ae:4e:0c:b3:37:2b:bf:9e:b0:8f:
31:b4:52:81:f0:57:8f:92:fb:ec:ca:69:25:36:09:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:09:A9:D0:CE:65:BA:43:82:60:34:94:69:33:E1:DD:F8:72:3B
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:46:18:d4:00:f6:77:ac:1f:85:36:8b:03:91:6b:73:ed:
61:5d:3c:a1:9a:fa:68:d3:ac:ee:b1:03:fa:2c:5b:8a:9c:3e:
89:33:b4:f5:34:d9:23:a7:02:37:f2:ab:6f:b8:17:19:c2:62:
be:3d:2e:d7:f8:7b:8c:69:92:56:b4:4f:7a:f8:dd:42:b2:34:
49:68:48:76:14:1b:af:28:72:55:5b:68:b5:32:d2:b1:bf:ee:
ea:7a:90:24:63:2b:e9:53:1d:7d:a3:19:d6:93:4c:27:9d:fc:
37:04:0e:8f:57:cb:4d:44:5f:b1:54:27:46:07:43:25:4f:1c:
35:8d:c6:76:d8:3f:77:49:97:ff:b0:56:19:b9:48:08:c1:f8:
bc:e0:bd:90:fe:36:1b:e7:82:83:c3:d9:51:0e:52:eb:a8:7a:
04:34:91:27:79:84:0f:86:92:78:9a:6c:84:14:59:b5:d0:66:
5c:e4:5b:a3:be:e2:94:50:2f:a9:c6:99:8d:b0:db:6f:9b:83:
e8:43:a3:64:03:13:a1:bd:82:33:e7:1a:cf:10:91:c5:df:3f:
37:27:b9:8e:b7:99:8f:ac:1d:4b:db:d5:56:a5:19:b0:cc:90:
40:3b:c5:e2:a1:14:25:78:b3:0b:3e:5c:27:9d:e5:38:55:9e:
6f:12:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:20 2026 by rpki-client