Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: bEGdDbefi2MziRMTZ8laR8Hu+s4dIqKEj9gfLqhDYHg=
Subject key identifier: 5A:62:91:C9:1D:8E:7A:4A:A4:43:54:04:FB:F6:17:F6:2D:9B:7F:FB
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019D9886671AC027DF1024768046D34EE7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 12BB
Signing time: Thu 16 Apr 2026 23:00:38 +0000
Manifest this update: Thu 16 Apr 2026 23:00:38 +0000
Manifest next update: Fri 17 Apr 2026 23:00:38 +0000
Files and hashes: 1: 0nPKlV2FgZ0LZAZQ71hQLBw38Uo.roa (hash: Fb/Fjfm/zNM0E1C+LzpEdYLGiz1+AVF8bxpn6ETeoj4=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: v+fJI55fyEIWknLTraxPL5kFgMMYR21bHKbMQ4G6qi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:67:1a:c0:27:df:10:24:76:80:46:d3:4e:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Apr 16 23:00:38 2026 GMT
Not After : Apr 17 23:00:38 2026 GMT
Subject: CN=5a6291c91d8e7a4aa4435404fbf617f62d9b7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:1e:a3:9b:01:28:69:c7:df:b8:15:4c:4a:
68:a0:e0:a8:b5:6d:89:8e:0d:ab:c7:25:51:c7:60:
b5:3e:70:3b:30:60:05:52:a8:10:c6:1b:ab:84:64:
e6:60:3c:8d:b0:36:01:f9:1f:05:d0:58:f9:0a:b0:
d7:84:63:73:15:38:5f:64:03:0b:33:0c:41:68:47:
2e:39:e6:49:13:a6:85:35:d8:6b:4d:77:f3:8d:28:
56:46:35:11:2f:05:c0:97:5b:ee:cf:b3:ee:94:60:
9c:be:45:82:24:f3:be:54:de:73:6b:7f:48:87:04:
53:cf:a7:d5:fa:b9:5c:83:d1:af:fa:f9:43:48:a1:
5b:8b:67:fe:85:98:36:87:e8:f7:22:88:66:25:52:
0f:e8:63:7a:73:d8:2e:1b:77:dc:dc:29:d8:79:e2:
21:54:3f:3c:77:3a:37:a1:0b:13:4f:46:53:b6:46:
3c:4f:ac:95:f8:62:d1:f2:b9:7a:cd:e6:d4:e5:d3:
42:3e:5a:b7:67:ea:03:8c:97:79:d1:91:25:0a:7f:
af:12:bf:5b:a2:40:c8:ba:32:a2:aa:c4:58:cc:1a:
3c:2f:33:f2:80:8f:22:c1:b8:29:a0:12:6c:da:11:
80:bf:ae:4e:98:ee:76:8e:92:8e:69:3f:72:2c:b8:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:91:C9:1D:8E:7A:4A:A4:43:54:04:FB:F6:17:F6:2D:9B:7F:FB
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:42:47:13:e1:09:6e:55:8b:b4:00:20:05:c9:2c:d8:b1:
d5:7f:a8:ab:15:9b:3d:f5:90:a0:4c:c1:40:46:66:98:6b:ec:
c9:a6:17:13:41:f2:36:4f:c6:80:48:b2:60:8a:71:90:e3:31:
89:c4:eb:aa:44:2e:85:e7:c5:f9:63:ab:d9:9f:7c:49:19:bb:
e4:67:ee:ed:db:8b:6c:f1:12:ec:14:d7:85:e0:bc:3d:0f:23:
1f:8a:55:47:d9:0c:a1:1c:ec:83:6d:2a:f4:0c:38:ec:9f:74:
3f:37:d2:dd:d1:64:83:9f:1b:9c:70:3c:62:f8:46:03:c6:f8:
74:39:30:53:7c:0a:ec:dd:b3:67:c4:63:4d:f5:78:c9:ce:6c:
02:64:22:c8:02:6d:44:ac:03:89:6b:0d:b2:13:09:50:c3:b9:
56:4b:f8:6f:15:5c:9b:15:cc:95:53:60:a3:b0:ec:be:20:1d:
eb:b0:5f:18:b8:ed:13:87:75:5c:8e:76:de:50:59:0b:f7:eb:
1d:31:a8:e9:3e:bf:d8:6b:68:6a:c1:a8:cb:70:f4:38:11:ed:
9e:f5:2a:f9:b2:65:14:5a:a1:ad:1c:61:49:01:bb:f2:06:90:
1e:5f:63:74:00:87:1d:33:2b:27:4d:1a:2f:40:8c:af:7a:f5:
9f:c8:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:11 2026 by rpki-client