Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: f8AzuQ7HOCEGHkGo1mKumaK4fvkZ2GU/QpVknOBkBFU=
Subject key identifier: 63:36:48:AD:9C:82:97:C6:C3:A6:64:93:FD:EB:9E:53:54:33:D6:57
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019D99D06FCDE35694214F3DAD0D4C7A2762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: Pr1XY3d/VA9u079OGn+lCMRA/rbc2RXEgI5zhFVVAAM=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6f:cd:e3:56:94:21:4f:3d:ad:0d:4c:7a:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=633648ad9c8297c6c3a66493fdeb9e535433d657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:ab:fc:cc:23:7c:b3:bf:19:dc:c4:95:46:
83:ee:6f:2e:f6:f3:67:9d:c9:78:3d:64:10:a4:3b:
a3:68:11:f2:76:40:ba:1d:4d:fb:8d:5a:8b:31:36:
a9:4b:e8:4f:8d:06:29:bb:98:42:21:05:ad:63:7b:
9d:70:cc:38:4b:45:64:c5:fd:d9:86:1e:6f:b2:b4:
ae:3e:6a:75:40:58:1f:dd:73:c1:35:55:f2:f1:3c:
7c:90:fd:2b:06:6b:ea:d5:fa:5f:db:80:b8:7e:bb:
fd:04:1c:a3:6c:6d:12:6e:57:1b:4e:ee:e8:50:58:
77:e9:9d:7f:80:8b:74:db:c5:95:4f:35:8d:c0:b8:
5a:ce:95:e1:e8:ec:59:67:3e:07:e5:46:08:54:19:
a8:07:7f:5d:ae:3b:fe:81:f8:f2:9a:5a:6d:a3:49:
df:64:49:ef:82:88:77:68:3d:b0:79:75:0c:6c:57:
54:3c:9d:f7:48:3d:56:31:8a:5a:0a:f5:89:e0:8d:
72:64:f2:e5:e9:84:51:37:50:46:39:a5:dc:71:fd:
1b:12:e8:43:c7:b5:51:6a:fe:0c:a8:fd:ea:40:a2:
2f:ca:1a:94:7c:08:7c:b8:36:8c:39:2f:de:8c:ef:
df:7b:8f:14:a9:ca:bf:91:2d:17:17:53:04:af:51:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:48:AD:9C:82:97:C6:C3:A6:64:93:FD:EB:9E:53:54:33:D6:57
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:73:27:54:c0:e6:2d:49:dc:d4:18:05:83:c6:94:94:24:
87:a4:12:a9:cb:12:f3:09:ef:c8:ba:cb:d5:9f:d9:38:6e:df:
7e:12:bf:b6:50:cc:73:d3:b6:4a:29:bf:d6:86:3f:1b:c8:50:
33:b6:73:4a:f0:7f:19:af:8a:30:a3:24:4e:dd:d7:4b:f9:a8:
db:22:e8:23:c8:ed:4c:6d:a1:b3:c8:7c:ba:c6:d0:22:56:8b:
2a:6c:49:e0:fb:79:ac:86:61:e4:d9:86:9a:e4:d7:8d:1e:a4:
9d:59:47:7d:db:6a:2c:87:79:33:70:d6:92:da:27:e2:da:b2:
01:62:3b:bd:f2:c6:a6:92:b7:34:e9:60:94:50:40:ed:02:ff:
9c:a7:21:ae:77:87:d2:2e:f4:54:74:c5:25:ed:fe:3e:46:17:
9a:3b:6c:d8:7f:82:62:cf:69:90:60:b3:e7:46:8f:b4:17:ab:
40:51:e5:8f:42:fe:23:94:78:2d:b7:cc:b0:d0:50:2e:fa:70:
1a:c5:b6:ca:d5:85:e4:d5:0b:75:17:e0:a1:d8:29:a9:3a:b1:
e1:88:41:11:5d:76:95:de:0d:aa:3c:6e:a2:17:8b:59:97:b7:
26:70:7e:d7:65:5f:1e:f4:da:46:a8:7a:71:72:aa:93:90:e5:
fd:6c:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:47 2026 by rpki-client