Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: bFro+43LJfxn/CXwrcamPxKztnsIEjN/HB5TAOQwqbU=
Subject key identifier: 41:AF:92:FD:29:9B:83:50:11:4C:28:95:22:88:EC:0B:F7:EA:7C:0B
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019D99CFF031B83CB36E309EF78B15FD1DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1585
Signing time: Fri 17 Apr 2026 05:00:34 +0000
Manifest this update: Fri 17 Apr 2026 05:00:34 +0000
Manifest next update: Sat 18 Apr 2026 05:00:34 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: ZPhCRlSXBHXD6x8CqY7v487Jkaen51lr3pI25ZN/mPE=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f0:31:b8:3c:b3:6e:30:9e:f7:8b:15:fd:1d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Apr 17 05:00:34 2026 GMT
Not After : Apr 18 05:00:34 2026 GMT
Subject: CN=41af92fd299b8350114c28952288ec0bf7ea7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:e7:6d:9e:21:64:02:b8:78:0f:ef:f1:7e:
33:02:7e:4e:69:d7:05:9e:b1:d1:e7:b1:7c:63:83:
72:80:d6:dd:b0:f1:df:93:16:8a:43:d7:d0:cd:b3:
fc:68:7f:a2:9d:e4:27:57:ad:f2:c3:ba:d2:5f:94:
9b:fe:dd:14:61:47:64:f2:b5:23:b6:28:28:ba:4c:
3a:e8:f4:53:5d:07:7b:ef:a2:8e:d7:cc:68:eb:e1:
52:12:e1:e5:7d:41:70:33:e4:51:ab:82:7a:e0:29:
fa:c2:9a:3e:db:f2:c7:57:fd:f9:0b:54:09:e9:f0:
97:73:97:b2:41:2f:cb:a2:22:42:fa:4f:a5:ff:6b:
5d:3a:6b:a7:29:8e:cf:41:da:dd:62:80:b4:cd:70:
2e:96:f1:ba:61:ba:61:2e:63:a6:d4:74:72:96:c7:
fe:94:d9:f8:e4:68:9e:60:c9:e4:60:21:fd:7f:f0:
c0:21:fd:42:0d:30:7c:91:a2:67:59:28:e4:e0:d9:
f1:66:e6:17:a6:f2:16:f0:d7:2e:10:a8:cb:7e:2c:
bf:da:a0:d0:26:9e:2e:70:ea:88:88:20:07:3e:a5:
c5:6c:83:89:a6:8a:ca:21:ab:0b:58:be:17:58:71:
3f:9f:b8:1d:45:f0:ce:b4:8d:83:b2:4f:6f:07:0f:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:92:FD:29:9B:83:50:11:4C:28:95:22:88:EC:0B:F7:EA:7C:0B
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:58:2a:d2:37:b3:78:f0:eb:f4:8c:65:f0:95:45:22:2c:
38:de:6b:1e:19:29:78:27:14:d3:7b:3d:4f:5f:d0:f2:1d:07:
23:1f:ea:7a:68:2e:0c:37:51:31:4e:d4:e8:98:20:0b:51:96:
dd:a7:f0:b9:a2:5a:b5:63:a0:41:1d:6c:f7:e0:ad:25:c5:0b:
4b:b1:c8:de:56:c9:01:f3:f1:96:fd:39:1f:81:17:34:c9:fc:
ef:e2:90:38:9e:7b:ff:9f:a5:ca:72:06:b1:34:d8:57:96:15:
dd:ad:4e:c5:26:9d:e3:bf:cf:bd:6f:d2:2d:9f:f8:6c:04:20:
1d:98:12:9c:02:99:4d:cf:4d:40:97:0c:68:30:33:06:c1:0e:
6f:1f:49:2b:c5:95:2b:89:72:87:58:35:fe:24:0b:97:d6:c1:
9c:63:2c:37:82:c5:5e:a1:28:d3:e3:99:39:8d:a9:c0:61:77:
f8:68:fa:c7:c2:ff:1b:03:d8:00:55:19:ad:40:c7:81:47:0f:
e2:75:c1:71:65:19:c3:72:76:2e:0b:0d:f7:b5:3e:6c:a4:6a:
b9:b5:c7:3c:47:9d:40:f6:d3:f8:69:54:a4:fb:7b:6a:b3:33:
e6:3b:8c:cc:32:fc:aa:f3:83:43:29:3e:c1:ff:c7:a7:d6:57:
46:59:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:45 2026 by rpki-client