Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: BPa5b2/dR+j6R2QIzkCKKDr4pcfhJIAXbz8t3tzVbG8=
Subject key identifier: 91:FB:24:1A:49:F2:2F:F5:9D:E9:2E:BE:0F:B8:A8:CC:4F:76:FC:0E
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019D9B19536A6C42EA4B663E578FE066A7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0F1A
Signing time: Fri 17 Apr 2026 11:00:21 +0000
Manifest this update: Fri 17 Apr 2026 11:00:21 +0000
Manifest next update: Sat 18 Apr 2026 11:00:21 +0000
Files and hashes: 1: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (hash: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: s6Z74/EBmQFJkY0k+UXCHElH4iuX8mDJO6j7VDprVmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:53:6a:6c:42:ea:4b:66:3e:57:8f:e0:66:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Apr 17 11:00:21 2026 GMT
Not After : Apr 18 11:00:21 2026 GMT
Subject: CN=91fb241a49f22ff59de92ebe0fb8a8cc4f76fc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:ac:38:14:0c:c1:b7:e0:bf:53:7d:ad:15:
cc:29:4d:dd:53:c4:9e:fa:84:fa:2e:16:c9:38:c7:
4a:0e:9c:07:ec:55:7f:24:f0:ec:f7:1e:81:c8:6d:
44:d1:bf:d8:03:7e:af:54:fe:fd:35:2b:9d:cc:9a:
f0:27:6d:cd:49:48:54:24:81:3b:53:99:a7:85:de:
c4:98:93:6e:89:92:b9:8a:dd:96:31:3c:65:9b:da:
4f:9c:01:c6:b0:e8:bf:49:1f:55:9e:9b:41:0b:8c:
da:b0:0e:f0:12:d0:4b:10:31:62:e0:c1:d1:28:5a:
44:da:e5:83:df:ad:dd:39:be:12:da:d6:1a:b2:1b:
15:ff:55:99:54:a6:19:5e:bb:42:98:9d:28:45:11:
0c:d0:3d:50:80:b1:43:c2:8f:d8:c2:d0:46:9c:03:
58:cf:cc:45:12:6f:d3:9c:a0:e3:a2:e6:a9:c5:c6:
f9:22:aa:4a:47:dd:87:db:36:1e:9a:af:18:c8:f9:
d0:ca:0a:cc:8a:f5:9a:d8:8d:f8:c5:5c:b6:b7:97:
a8:b3:b3:c7:82:c5:8e:7f:7e:b0:63:2d:0c:b9:6e:
36:a2:35:86:2a:2d:d4:5c:40:0b:4c:27:d3:65:77:
95:f0:bb:ab:5d:29:72:94:88:6f:7d:53:0c:71:2c:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FB:24:1A:49:F2:2F:F5:9D:E9:2E:BE:0F:B8:A8:CC:4F:76:FC:0E
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:99:7a:20:53:17:20:03:77:64:c9:6c:69:1f:d6:3b:89:
b0:19:8b:d1:e7:1a:79:0e:3b:49:3c:20:fc:6d:2e:2b:e3:c7:
91:e0:4d:c0:e4:1d:2a:59:1d:d9:d2:79:83:aa:a9:78:07:cf:
be:fe:cf:1a:0f:68:6b:f2:90:e7:06:a1:ec:86:a0:b0:4c:3c:
fc:0b:47:79:ff:a4:73:9f:ef:71:e9:9d:59:e4:4c:b7:7d:89:
37:57:31:a1:16:c6:64:fb:cf:83:30:ed:a8:2b:1d:a1:00:9b:
32:af:bc:fc:78:d5:a2:06:e1:bb:95:1b:11:d7:54:6e:35:97:
16:e1:10:41:44:26:b7:3e:ce:43:cd:05:6e:97:75:b9:ad:47:
9d:c8:28:c9:a2:10:94:0c:91:5a:d7:2c:c4:6b:60:22:55:e9:
b7:cd:ae:64:7a:bc:a6:01:34:36:db:77:6c:53:11:c9:fc:f2:
76:46:c1:e7:50:bf:66:20:22:7f:05:6e:0e:1b:91:63:cc:3b:
a4:d4:b6:40:c3:63:18:c8:0b:c4:55:9e:46:02:a2:8b:d4:67:
12:96:bc:4d:ee:81:d5:5b:6f:b5:c2:90:3e:28:ae:93:5d:79:
9b:70:f3:5e:16:cf:e7:90:8c:14:a0:dd:24:3f:29:7d:f8:f3:
fc:a1:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:25 2026 by rpki-client