Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: ymUs8Zvm7Icfw6y0fcn5ldfuXKDiQo2yoBylNUF/i5w=
Subject key identifier: DA:92:8A:00:9E:8F:9C:34:11:1B:A4:DF:98:32:CF:B1:59:34:D2:CC
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019D9B5106EAA8C851A44341326019AFF294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 12:01:11 +0000
Manifest this update: Fri 17 Apr 2026 12:01:11 +0000
Manifest next update: Sat 18 Apr 2026 12:01:11 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: uC9Sz9qbtdK7JzXKFCY4W9D3gHEHekJ72y5ujPEqo9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:06:ea:a8:c8:51:a4:43:41:32:60:19:af:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Apr 17 12:01:11 2026 GMT
Not After : Apr 18 12:01:11 2026 GMT
Subject: CN=da928a009e8f9c34111ba4df9832cfb15934d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:6a:a2:f9:b7:0d:41:e4:f0:43:e4:8b:68:
1b:34:bf:26:46:58:a3:9c:29:0b:34:ef:4f:26:31:
4e:1f:78:27:02:64:20:2b:24:0f:ac:25:5e:88:5d:
80:7c:dd:a3:95:c3:60:c2:e6:af:05:b4:4d:af:78:
a2:17:cd:c0:f7:12:11:2c:16:5f:df:94:a7:3f:51:
6e:cd:a7:4c:ba:ec:82:67:ec:f7:38:2b:de:92:2f:
bb:36:1f:af:73:30:17:0b:19:8d:49:cb:f2:e9:4d:
f5:7a:e6:a0:fc:88:31:18:6c:af:88:9e:69:9b:dc:
b8:71:52:0f:85:3d:1b:5c:4e:6a:f0:a9:e7:cf:d4:
4a:3d:97:cb:d9:5c:16:76:99:f5:a3:ab:a1:5a:6c:
b5:b3:12:63:e7:9f:51:c5:cc:93:0a:03:f3:75:81:
0a:88:fc:f9:54:3f:88:5b:11:01:98:a1:0e:c2:c6:
f4:4f:79:ea:21:cb:23:88:4e:e8:65:72:5b:15:73:
b3:35:9e:e1:fa:02:4f:e6:02:4c:c9:d3:4a:c3:63:
88:58:df:cf:8d:b9:77:5a:1b:e9:de:15:e1:a8:81:
d8:e9:61:d3:85:1a:80:26:6c:9e:79:f8:bd:6d:09:
df:29:43:04:91:ef:c1:0c:a1:90:33:45:19:a2:eb:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:8A:00:9E:8F:9C:34:11:1B:A4:DF:98:32:CF:B1:59:34:D2:CC
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:f0:01:8e:fd:2a:23:ee:6d:46:0f:4c:d2:e4:16:a2:0e:
9c:99:c8:d2:8f:13:d5:3b:62:09:7f:5d:33:98:18:ab:ab:67:
e8:38:45:35:b7:09:64:3e:2b:8b:fe:93:2a:68:41:c4:b7:e6:
7a:ab:0a:80:82:5e:59:52:02:a7:4d:2b:70:07:6e:22:c8:45:
a4:af:8b:26:5a:d9:1f:25:c1:53:1d:67:17:be:22:a3:b9:69:
d7:b9:da:b3:8e:26:a8:33:e6:3a:a1:d3:fc:3d:8b:4b:6c:02:
29:4d:95:9b:a3:5a:b5:d0:b1:fe:35:06:9c:87:0f:b9:26:09:
dc:33:a7:6c:9a:19:58:71:84:29:bd:30:db:75:a6:8d:93:2a:
b1:31:d6:25:1d:c1:e5:52:5d:ce:92:32:1e:d6:52:87:2d:2d:
2c:03:1d:28:b5:95:59:35:ee:45:5e:13:0e:b0:15:89:02:fc:
76:c5:b7:a0:15:5b:94:14:85:bf:17:49:9b:83:9e:19:3a:1e:
3e:33:5c:47:27:75:9f:cc:66:b1:75:8b:7c:89:1d:d4:b3:ce:
d1:9f:67:55:bf:82:dc:b6:fb:f0:31:f5:e8:d0:dc:c5:5b:b3:
54:c0:67:95:ec:cb:12:76:9a:bf:8d:e4:f7:be:bc:e0:1b:43:
0b:d9:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:03 2026 by rpki-client