Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: Uq3zkhzmpJmHtfnNBa/1LbnaE3CATO76ral0aUDLihQ=
Subject key identifier: 17:CF:57:9E:65:78:2A:2B:0F:75:AE:2A:3D:97:FB:C9:04:82:0B:C5
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019D9850398BD7F73CE578DFE699C6F3FB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 14B7
Signing time: Thu 16 Apr 2026 22:01:27 +0000
Manifest this update: Thu 16 Apr 2026 22:01:27 +0000
Manifest next update: Fri 17 Apr 2026 22:01:27 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: opwwBIQvfVoVwCzVLrwtxArXBiKck/3hQaKOW56ENYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:39:8b:d7:f7:3c:e5:78:df:e6:99:c6:f3:fb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Apr 16 22:01:27 2026 GMT
Not After : Apr 17 22:01:27 2026 GMT
Subject: CN=17cf579e65782a2b0f75ae2a3d97fbc904820bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:47:fd:9f:a2:cb:be:9e:69:73:c6:f5:5e:
d7:c4:86:3f:01:d9:71:cf:6f:be:c3:4e:ad:f6:28:
d0:7a:cc:05:9b:1b:d2:44:9d:44:36:e1:3a:a0:7c:
f8:52:6e:a5:6b:c3:2e:4d:3f:c7:8f:8f:1a:2b:ee:
37:50:54:e2:61:ea:97:f4:09:71:bd:d9:c6:35:87:
86:08:d7:d4:5f:ab:4e:32:6a:8b:32:67:7d:08:97:
29:89:df:e9:16:4c:8f:97:3f:d0:fa:7f:91:9d:9c:
f8:04:75:8a:e5:b8:c5:d3:3b:a4:14:29:9a:b3:39:
e4:26:72:8d:ee:59:1a:91:ce:d6:46:e3:f9:ea:7a:
74:4e:93:04:d3:1b:a4:92:61:20:76:cc:09:2d:6d:
f1:6f:e3:0a:7b:52:0d:04:e0:78:18:6d:29:f2:7e:
1f:ff:72:b0:07:69:d7:16:6a:bd:30:7d:f7:72:a3:
43:8b:20:09:f8:46:b3:51:d7:0c:9b:d4:13:27:5b:
3a:ee:b7:04:65:85:1f:55:ec:e6:4c:6d:14:fa:56:
c5:8a:ae:40:78:d1:c6:75:c2:44:71:9a:b9:05:8c:
c9:53:9f:9c:b0:45:db:e2:ad:63:13:7c:e3:b5:83:
c4:53:52:8d:93:97:82:07:af:39:ac:40:18:2c:7b:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:57:9E:65:78:2A:2B:0F:75:AE:2A:3D:97:FB:C9:04:82:0B:C5
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:6d:9e:3f:fe:81:e3:ba:c4:f9:4f:ad:ef:52:90:5e:47:
29:79:30:c6:58:83:e1:eb:74:88:24:6d:79:d7:3c:35:26:d3:
76:7a:ec:07:03:c7:da:86:0a:c8:98:3e:47:fc:f1:fb:73:90:
ea:10:32:3a:85:dd:54:ea:4c:1f:f8:f0:3b:35:b4:d7:2e:d9:
92:43:15:d2:71:0e:dd:85:78:9e:ea:54:81:44:ab:c7:1a:75:
22:92:0d:26:32:c0:d3:2f:36:77:25:02:2f:d8:17:6b:4b:e4:
96:81:22:a5:f9:fe:9a:c5:e6:f4:45:fd:96:48:cc:97:91:83:
a0:8d:3e:31:8e:13:be:c6:9f:d3:18:d8:70:c0:09:21:10:c5:
5e:07:52:05:11:86:ac:cd:76:1b:8a:7e:41:0e:da:2b:df:91:
25:dd:5e:a5:8f:bc:d4:4d:e0:62:d9:2e:52:0e:1b:7c:e1:de:
d1:ed:09:ed:fb:32:28:0c:a5:2f:60:a4:7b:a3:c7:fe:de:6f:
bd:3e:80:5c:45:d6:ed:21:32:08:c7:4c:5d:ee:70:4f:89:e4:
8e:b9:ed:71:9f:96:90:01:2b:c8:fb:6e:9f:6f:81:d7:da:95:
09:14:12:99:17:83:a1:9d:b5:0d:76:8c:53:65:7e:b9:61:22:
4f:0d:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:19 2026 by rpki-client