Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: pa3ysdfnBEbDNivnzRy5Jmv+tFD27z4aztaTS46SL9Y=
Subject key identifier: C1:81:AB:62:38:67:6B:13:B1:1B:D1:06:18:58:86:61:16:A2:74:21
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 019D98BDDF16E3EB45FAC240308799BAEC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 14DE
Signing time: Fri 17 Apr 2026 00:01:13 +0000
Manifest this update: Fri 17 Apr 2026 00:01:13 +0000
Manifest next update: Sat 18 Apr 2026 00:01:13 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: KHDTHGTmPMh7SI7NEcQoQVeoQ3VC/zspIluiM3jiM2E=)
2: VYFRuXlvwBdryFQTt5OTENfApaY.roa (hash: rnOyzeUtaX8vu4gXdx5Hk1vLfU4MWIMFx4e4U3jLOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:df:16:e3:eb:45:fa:c2:40:30:87:99:ba:ec:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Apr 17 00:01:13 2026 GMT
Not After : Apr 18 00:01:13 2026 GMT
Subject: CN=c181ab6238676b13b11bd1061858866116a27421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:fd:7f:ed:7b:50:51:d1:28:c8:3b:84:44:
57:dd:10:ba:d5:22:62:06:04:0e:e3:46:63:46:a0:
68:ca:38:7b:c6:7f:15:72:60:63:1f:45:a7:dc:1b:
eb:e5:5f:36:4f:be:c1:86:90:5f:74:93:2d:a7:e9:
d5:54:fd:01:57:6d:50:31:02:f4:7e:48:09:c0:ce:
c6:aa:19:28:15:c4:d8:e3:16:30:c0:66:99:01:5f:
3c:08:a8:2d:5e:8b:ed:03:cc:2c:d5:a8:da:1c:d1:
68:b6:7e:8c:a4:f5:92:88:02:cd:31:0d:d5:89:ed:
13:53:d5:94:bd:ea:f6:79:94:cb:05:28:81:30:3c:
0b:31:32:9a:e8:e7:0f:49:18:6c:df:72:db:8c:0b:
2a:dc:45:75:74:6c:9b:11:73:38:b3:40:e1:8b:6e:
38:ae:82:42:8f:e2:15:a7:a1:36:0d:d0:0a:4b:13:
95:29:b3:8b:24:3b:9c:c6:b4:d6:d7:da:22:a4:75:
73:7b:2a:c6:8c:78:33:09:f2:46:ac:92:07:43:72:
21:bb:ca:c7:24:d7:b0:8a:09:01:52:97:a1:18:36:
c6:3d:60:4e:c9:5b:24:49:de:eb:82:da:27:3e:ce:
55:7a:1d:0a:01:5d:fb:e1:7e:f4:4f:26:91:11:fb:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:AB:62:38:67:6B:13:B1:1B:D1:06:18:58:86:61:16:A2:74:21
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bf:44:e8:fa:18:1a:7c:b3:29:5a:01:14:a3:03:2f:02:49:
a8:89:78:b6:e5:06:e8:b5:e0:1f:9a:66:19:68:41:14:ce:87:
73:01:c8:9c:b5:9f:e2:35:7f:5e:8b:a1:d3:6b:f7:ad:c0:9a:
ee:9d:31:3d:ea:e6:aa:90:f5:c4:9c:0e:c2:3a:25:91:02:95:
22:48:c0:c9:5b:a4:73:ab:df:bc:46:f4:22:b9:96:d3:33:36:
53:69:6e:11:4c:34:6a:8a:8a:f9:b9:eb:70:dd:c2:ea:e8:5d:
bc:dd:94:67:48:5f:0f:d4:1f:66:30:ec:46:a1:9f:ba:79:f4:
e3:84:5d:c5:14:bb:43:75:4f:a5:d3:58:a2:44:ed:09:1c:f0:
31:10:50:2a:c8:9a:7e:70:a7:69:f8:4f:fa:d7:3f:8f:6a:85:
a7:a4:67:bb:1a:57:e4:b1:c4:5a:f5:c4:f9:97:83:4e:2b:7c:
d8:f6:eb:8f:f7:32:b5:75:d5:f8:9b:a3:2c:39:f5:96:3a:17:
c2:af:3c:75:9b:e1:9a:09:72:b5:0d:c0:4e:67:fb:65:e7:2e:
22:3c:f8:d7:ee:c2:08:83:03:c8:18:d6:36:a3:40:a6:c0:f1:
d3:dd:90:85:4c:16:03:7b:6b:f8:51:e7:6c:24:7e:8e:a7:52:
87:fc:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:04 2026 by rpki-client