Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: lSBkVVIf5QDx7HaebGUWwAJ4vh4XA/uPW5ys52pLFXA=
Subject key identifier: 13:86:BA:9D:10:3B:EE:8E:B1:9B:66:97:E1:5C:E5:F0:3B:27:E8:49
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 019D98F509FE68C8A36E7AF96E4EAE35E51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 05F0
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: UYrlb4QcV31WDjyBwunwkjiCeDIQgaQS0Ni4L57ZTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:09:fe:68:c8:a3:6e:7a:f9:6e:4e:ae:35:e5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=1386ba9d103bee8eb19b6697e15ce5f03b27e849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:fd:b2:4b:d2:28:03:47:b0:c5:fc:7a:7f:
32:e2:6e:c4:5a:d0:50:7d:9a:fa:c5:47:71:af:5a:
1e:11:03:f4:6f:18:31:8f:2e:72:ff:e2:82:d9:cb:
4e:22:81:d8:e1:e9:0a:06:ee:03:46:73:6e:fb:89:
1f:8c:99:b9:f3:69:ea:03:b3:95:73:e6:4f:12:93:
95:9c:c8:d4:29:dc:98:46:0a:dc:29:83:7d:ec:7e:
ea:c8:37:d9:51:1e:2e:2b:36:e2:06:17:56:41:62:
f6:38:48:39:99:6b:b6:4b:95:fd:99:de:ba:94:73:
3a:bd:71:b8:3c:d5:e1:4e:08:aa:0b:94:f4:b7:ed:
09:e2:0a:86:31:53:f2:b1:eb:e5:5e:c4:54:e0:a9:
6f:00:ef:59:7a:7d:dc:ea:97:c1:7e:ce:a6:ae:7c:
d8:78:19:9c:df:ec:c9:a6:aa:9e:38:91:f8:6e:79:
01:ba:80:dd:a9:0d:0b:ed:38:f3:ff:f6:3f:53:92:
b1:44:95:61:a8:7b:df:36:cf:37:d9:39:4c:06:34:
7d:6a:23:fb:8f:ec:e4:20:7d:40:c8:a0:81:96:6c:
41:03:65:e7:b7:c3:75:91:8e:cf:92:97:82:97:9c:
48:b6:2f:4f:9c:55:a4:bb:d4:0b:54:8c:4f:7d:cc:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:BA:9D:10:3B:EE:8E:B1:9B:66:97:E1:5C:E5:F0:3B:27:E8:49
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:9e:c4:11:ef:66:59:bc:b6:69:ef:ff:de:90:02:e5:89:
ac:ca:76:8d:3f:88:48:9e:af:cf:63:f5:f7:e7:2a:0c:e5:11:
06:6b:b8:fc:75:b6:3d:7d:00:1c:a6:59:d5:86:65:a8:6d:ba:
88:4d:6b:f6:f6:90:a4:14:51:13:29:bb:5a:ad:6a:28:64:97:
d5:14:04:cf:94:5f:09:6d:bd:8c:13:94:73:fc:7d:de:1b:26:
e4:65:b6:1b:56:a5:7f:10:1e:db:13:53:96:56:6a:cb:d4:50:
6b:d7:38:f7:94:d5:c4:ec:5d:cb:7d:36:57:80:74:55:e0:92:
b4:5b:9c:11:c7:db:2c:c2:8c:02:68:63:2b:c1:5e:37:4d:4d:
e6:9f:a2:18:52:5d:aa:87:8c:a1:0b:a4:20:39:5b:ea:88:67:
6c:c7:8a:7f:15:84:d4:e0:2c:10:7a:02:37:f9:1f:fb:2d:72:
94:ff:8c:26:e0:39:cb:e2:03:a6:24:87:39:c5:64:5e:8e:91:
db:b5:9e:90:2d:bd:b4:f0:f0:d3:c4:54:ca:07:be:6a:8e:80:
76:bb:6f:6f:b4:04:82:6a:6e:77:ed:52:8b:fa:88:3c:2e:c5:
8b:9d:6e:24:49:2c:1c:0b:bb:ff:e0:14:f3:76:0b:72:a7:43:
7a:b3:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:41 2026 by rpki-client