Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: 7oZJWt8cUb2UvCzgKWDDCW4dgLqFYys6Sb9cfDol9eg=
Subject key identifier: BF:4E:EC:D5:7F:C1:05:A9:A3:2C:5D:33:8C:E1:05:DE:A9:B3:42:4C
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 019D98F44389027445182E34D3DE47F296A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: MkTdarR4VsndjyhKq1Dq00M2hHr6ub06hGw6H1v2i+A=)
2: uNbww_4X227rN9_mg3C05wsDyrM.roa (hash: SaALn4Jzzbpi+nDn2cyiq7RyWC5Gh9LXGatywgfKmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:43:89:02:74:45:18:2e:34:d3:de:47:f2:96:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=bf4eecd57fc105a9a32c5d338ce105dea9b3424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:b5:4e:11:dc:29:a9:59:b7:77:6a:a6:66:
18:11:c2:66:df:5e:9a:da:d8:b5:4b:d1:91:a7:8a:
f3:ce:06:d4:26:77:1f:52:22:de:80:22:e2:3c:3c:
9c:cd:27:12:54:78:f6:47:20:bf:af:13:ad:a9:a1:
9e:36:9b:fe:61:c6:7f:68:ef:71:3f:25:b9:d0:19:
fd:a5:f1:31:dd:c1:fe:57:da:24:19:cc:7b:1f:17:
ff:30:b4:cc:5f:f4:61:71:37:b9:2b:92:fe:72:0e:
22:6b:5a:48:95:8e:4a:37:37:46:84:69:07:5c:39:
aa:6f:03:1d:10:21:13:fa:8b:ed:82:fc:60:10:57:
29:05:89:2f:57:60:f6:fc:20:81:cd:ea:75:5a:0a:
4f:ed:56:11:3e:6b:21:eb:f4:3f:a5:1b:99:53:86:
cb:0e:25:72:3a:63:b0:70:f3:a0:97:86:1b:2f:18:
d4:56:44:4d:2e:92:d5:17:c9:fb:c6:aa:19:b4:99:
f2:cf:d9:90:72:02:18:59:bc:ec:b5:68:b4:91:b3:
93:bd:2b:02:f5:91:a5:44:5a:c2:d9:b9:41:9c:96:
6a:19:e8:cb:82:01:cc:27:56:25:e3:bc:ab:d8:85:
2d:a1:f8:60:b3:c9:cb:51:c1:9e:f2:da:2a:0b:96:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:EC:D5:7F:C1:05:A9:A3:2C:5D:33:8C:E1:05:DE:A9:B3:42:4C
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:94:a6:26:51:c8:c2:b6:ed:38:df:58:d9:68:62:c6:07:9a:
2d:1d:af:9d:16:5e:eb:86:1d:01:52:28:ff:42:35:e6:61:3b:
1b:b5:a3:7c:37:9a:d1:c7:9a:84:71:0c:a4:55:5b:7c:d6:ee:
7b:d2:77:8c:10:d7:28:b9:94:22:3f:d8:e3:fe:3a:ed:ae:cb:
3d:32:e7:cc:00:26:33:2b:22:f5:b2:0a:ea:d0:37:bf:bd:41:
6d:3c:0a:09:08:f1:72:c2:74:08:75:cb:d0:17:99:a5:4a:75:
b3:25:33:65:fc:ea:6e:69:e3:49:dd:ab:a2:c8:e8:3a:89:93:
25:4b:71:5b:96:b0:23:d5:65:58:60:72:6c:b7:1a:b2:b7:ac:
00:b5:18:d3:ea:af:68:f7:07:6e:d3:6d:c7:e6:98:ba:aa:e3:
5b:3a:05:1e:8e:ed:1f:d4:07:27:92:2b:dc:45:81:35:b0:1c:
fd:55:c1:aa:0e:e6:6a:3e:b9:dc:38:60:7d:9c:38:f4:2a:e9:
d1:4e:d6:6f:1b:2c:bf:ab:e8:6d:3d:53:d6:0c:f5:f0:13:c4:
19:88:4b:22:b0:3d:95:48:eb:8d:6a:0e:63:66:cf:41:ea:d1:
84:5b:e4:e6:db:99:cf:95:a0:04:0f:76:fd:c4:54:7a:3c:12:
29:12:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:08 2026 by rpki-client