Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: qZLkHMFoPvPnfKnWRCvO9q2bKbRitd0dbMwVBhQocj0=
Subject key identifier: AB:69:AD:D2:EE:D6:AF:C6:78:C3:D2:F4:02:45:35:B3:E5:35:2E:10
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019D98BD23D20EFDC0960A4A17067570DC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:00:25 +0000
Manifest this update: Fri 17 Apr 2026 00:00:25 +0000
Manifest next update: Sat 18 Apr 2026 00:00:25 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: DJSm8h43WF3ktVpzlNJG3CQZX2p7oMQGNwwQQRUEEV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:23:d2:0e:fd:c0:96:0a:4a:17:06:75:70:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Apr 17 00:00:25 2026 GMT
Not After : Apr 18 00:00:25 2026 GMT
Subject: CN=ab69add2eed6afc678c3d2f4024535b3e5352e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:99:ff:e8:83:90:be:b4:4f:17:9f:31:8e:
dd:30:99:b2:23:58:8e:9a:65:0c:14:ce:b3:d5:8a:
11:81:bc:a1:92:8b:4d:b0:e0:3b:9a:9a:89:d5:ed:
9a:a7:eb:d8:79:d3:d1:60:5c:2f:8a:85:5d:49:09:
15:e2:76:b9:41:d9:40:6d:7d:36:e0:fa:0c:10:63:
a8:12:6a:01:28:e8:70:7d:b8:42:8c:a1:38:d2:4d:
47:b3:55:70:3b:59:8b:31:ff:9e:e5:95:41:81:9b:
06:64:6f:ae:a5:7e:26:87:c4:3a:be:0d:48:b7:29:
5b:ad:f6:26:74:2d:b1:9f:0f:76:f5:6e:16:2e:2e:
b6:96:43:7f:04:de:df:e1:f7:82:6e:3d:59:5a:5d:
a8:75:15:e8:49:52:9a:b8:8a:42:99:33:3a:0e:5e:
31:e3:46:72:2b:97:7e:14:fa:ac:9b:da:4d:39:56:
06:77:8b:72:fd:03:21:3e:9b:ca:08:02:83:f0:33:
0b:14:50:fd:0f:b4:6b:60:2d:fd:ed:31:42:48:71:
e6:98:f8:92:cd:35:5f:5e:d4:6f:e7:8a:49:ad:e8:
29:2c:cd:e6:9d:af:a9:99:c1:5d:94:4e:ba:87:74:
d4:86:20:87:79:4f:e0:be:06:48:84:d4:67:d8:86:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:AD:D2:EE:D6:AF:C6:78:C3:D2:F4:02:45:35:B3:E5:35:2E:10
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:0c:13:54:12:84:f0:50:b7:47:bb:f5:4e:22:9a:85:da:
10:64:70:a2:3e:4c:e7:46:75:0f:b7:8b:3d:8d:18:a8:41:fc:
65:e4:3a:28:a5:96:29:c8:0f:f5:65:56:ff:95:ce:ff:75:d1:
8a:70:7a:40:b3:7e:64:83:60:d7:1e:eb:8f:ff:a2:17:eb:38:
5b:2f:77:99:25:83:6f:34:5c:81:85:3a:07:80:ec:7d:74:0a:
95:eb:9d:27:11:ab:77:47:63:07:54:a3:c6:0d:df:ec:ed:73:
2c:4d:8d:aa:6c:e1:19:94:9c:b0:48:a4:64:2b:8f:a5:c0:14:
28:38:8f:bf:d2:1d:89:75:c8:b4:b2:f2:ca:63:c3:97:11:ec:
12:13:9c:21:87:e0:4c:36:11:00:52:79:23:57:18:2a:80:d6:
ba:31:db:19:d2:c9:1d:6b:a4:f6:f1:bc:97:2d:78:9d:8c:c7:
0a:ea:74:ea:83:ca:aa:61:25:7a:33:8b:aa:f2:36:55:3c:46:
87:3e:3d:a1:2c:15:89:c1:11:03:64:32:90:69:c1:28:77:93:
03:1b:ce:71:dc:c3:1b:da:0c:0a:9f:48:10:9d:2e:e2:f2:ca:
75:5f:b9:4c:3e:f2:ed:34:e6:1a:b4:ed:1d:1b:ca:af:53:04:
6d:ef:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:57 2026 by rpki-client