Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: PkV0PyWvMdyTaBpEe7xI/49rw/TJL6eNXDBBgLMYC3Y=
Subject key identifier: 27:84:07:23:BA:48:B9:1C:FD:0D:9D:53:9D:2F:88:F0:EE:A8:C8:19
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019D996219CB3521B911F2330B48A3E9629A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 0921
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa (hash: lqA/RuUKuPMddo9q5IetsxxRlSYvHTaYbQoeU6IOKZM=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: J6SMfAR9OoG/xj1zDhNQeicjlcJ8gshX3S6X0A41RpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:19:cb:35:21:b9:11:f2:33:0b:48:a3:e9:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=27840723ba48b91cfd0d9d539d2f88f0eea8c819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:0f:9c:f8:31:20:b7:37:48:f2:4d:cd:ca:
2d:c7:32:71:f0:e2:15:06:c1:dc:d6:e3:9f:14:f2:
d3:91:23:a0:c3:db:d8:47:1a:89:24:30:14:25:9e:
da:9f:43:e0:f8:c3:fc:15:c0:dd:ca:02:4b:cc:9b:
3e:94:be:83:62:3a:cb:9d:99:c3:dd:37:70:4f:37:
1a:c8:74:ae:36:be:76:3a:3e:0c:ac:26:3b:d2:48:
6f:8d:2c:e0:b8:82:47:80:f6:cb:36:fd:47:c0:ed:
ef:65:7a:95:3e:84:f3:88:65:9f:1d:97:2b:bf:56:
58:78:79:4c:33:bc:48:45:db:9a:29:84:2c:86:6a:
93:e8:32:67:8e:cc:03:ac:77:1f:3f:4d:d6:5d:d8:
02:73:b9:02:25:9a:8d:27:8e:bc:7c:dd:04:45:87:
09:06:b9:b2:34:92:c4:a0:66:7a:f3:69:e5:12:58:
4a:81:76:04:5c:48:6e:df:67:17:57:fc:96:80:71:
da:00:a8:22:dc:f5:3e:bc:3f:42:2e:76:5f:23:03:
8f:ab:01:5e:dd:42:f8:15:54:1b:23:74:12:1d:02:
76:49:dc:86:cd:f0:09:fb:ab:90:cd:e9:a1:fb:6e:
fc:60:2e:df:8f:0c:42:55:05:8d:b6:9a:65:b4:6d:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:84:07:23:BA:48:B9:1C:FD:0D:9D:53:9D:2F:88:F0:EE:A8:C8:19
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:38:e6:f5:c4:a0:60:aa:a4:6c:48:89:1d:90:77:b7:b8:5f:
47:34:9f:57:fe:d8:e3:6c:fc:bb:f7:3a:d2:15:0c:1c:da:a5:
6f:24:6d:da:ca:b1:26:4e:b9:95:27:99:68:79:01:8c:c8:b5:
90:d5:23:46:6d:e9:23:d7:bc:a7:c6:da:fb:7e:46:6b:ab:a2:
e2:dd:d4:9b:f5:87:5b:7e:61:e3:fd:7e:25:84:fa:f4:35:78:
63:06:07:52:01:c4:f8:08:19:1d:e7:29:ad:a1:42:9e:d4:00:
c1:1a:4b:11:60:ce:ef:ef:c8:cd:ec:b2:b5:8d:54:b5:fb:72:
69:9f:cd:1e:df:10:19:74:19:76:d6:83:c3:8a:8a:53:33:ab:
76:9e:77:fa:2d:1c:0d:41:fb:64:b6:ae:85:e2:4b:57:74:92:
4d:34:d4:cd:cb:66:0f:5f:ec:54:1b:b1:91:18:7e:17:5e:8e:
2e:1f:fe:7a:28:38:b6:6c:c7:65:4d:48:67:9a:6e:18:34:68:
d2:79:b5:20:d5:d7:e6:78:2d:d3:ee:e7:fa:12:32:39:c7:05:
95:b0:30:3d:6a:b2:79:5a:99:32:7a:b7:29:81:1e:d6:e8:ca:
4b:f1:8f:50:03:61:9d:01:b2:0c:f6:26:df:4b:44:e2:d0:3b:
90:09:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:05 2026 by rpki-client