Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: bKQPZ0aQT/2RMQl/mshHY3zpPS097lPUeDKMS9lvTTc=
Subject key identifier: 9B:BE:D0:AE:F3:61:DB:A2:B8:45:63:4D:71:01:91:88:47:18:D9:E8
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 019D9999AA17B35CFD265D56DEE76774B7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:17 +0000
Manifest this update: Fri 17 Apr 2026 04:01:17 +0000
Manifest next update: Sat 18 Apr 2026 04:01:17 +0000
Files and hashes: 1: 1uE9x6kErVCemmvGtU5h92iTdMY.roa (hash: aInWw6Wfhot9N2dvPiHCOhDAZMsuEWsBTYzGqfwz6bI=)
2: gTuD19nmTp2j0NfdVM92eulUz50.roa (hash: m8yAhVyb51tG8BtWITG5vAfuqvzjN7V08miYWQPPSis=)
3: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: PzlNeFhwyOqV8Jd9lNIOk/YTs169d6lBqGdAzXNOf8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:aa:17:b3:5c:fd:26:5d:56:de:e7:67:74:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Apr 17 04:01:17 2026 GMT
Not After : Apr 18 04:01:17 2026 GMT
Subject: CN=9bbed0aef361dba2b845634d710191884718d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:58:2f:69:b2:d0:da:59:cb:ce:48:9f:fc:
f1:41:88:c3:1d:9b:80:52:f0:50:f9:ec:e2:c7:bd:
34:c1:87:19:2a:6c:ba:ae:56:90:c7:8b:bd:c1:fe:
34:95:4b:26:1e:11:e3:0a:fe:04:ce:75:34:39:dd:
da:09:a3:de:49:23:21:6b:c6:e9:b5:ba:2d:1c:42:
dd:53:41:2f:4c:6c:14:01:11:bb:9a:e1:98:67:d5:
68:da:8d:06:23:ed:fc:e9:12:54:73:f1:8b:10:0e:
81:0c:72:0a:1e:9d:22:e6:2e:68:77:c8:9b:f3:4e:
3f:b7:05:c6:47:22:46:40:cd:a8:25:bd:e1:7f:cc:
11:96:1e:f3:76:95:fe:87:72:73:6c:c2:d0:b5:24:
fb:93:f3:7a:11:d7:60:b7:6d:f7:28:51:26:21:d1:
ea:4a:b6:da:35:53:ec:51:73:2f:dc:43:78:b3:77:
48:58:1b:3f:dc:ff:b9:db:e3:0e:f0:fb:ab:c3:a5:
66:f8:ed:ac:86:41:86:d3:e6:80:bc:de:0f:65:45:
85:ca:c5:8f:f6:b5:cd:7d:9f:99:74:cf:3c:05:e4:
b7:61:ac:e5:ab:1f:cb:e7:ea:3d:ed:5c:51:cf:8a:
12:cf:9c:28:58:be:24:39:84:81:5a:fb:53:2b:50:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BE:D0:AE:F3:61:DB:A2:B8:45:63:4D:71:01:91:88:47:18:D9:E8
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:23:12:e3:42:bc:eb:a3:12:af:d5:b6:b7:76:4a:b2:cd:3e:
78:18:f4:6d:75:79:33:8a:42:96:a8:af:c1:b1:ad:41:b2:fb:
54:d7:8c:3c:53:88:3d:c4:7e:2d:7e:ba:de:ef:52:92:cc:3e:
74:12:d7:44:15:0a:20:38:ea:e6:48:eb:45:0f:b5:21:1c:59:
cc:3f:68:ce:b3:72:b2:04:7c:0c:a9:5d:04:39:b4:98:99:d2:
e8:ba:8c:75:ca:ae:70:85:1b:07:d1:04:28:18:45:cc:96:41:
42:58:6d:97:3b:b7:e6:6d:18:81:8b:20:cf:d1:19:da:45:25:
11:88:01:3a:52:0e:07:44:ac:a0:5f:81:04:da:8c:2d:fc:d3:
6f:7b:65:b6:d8:7c:61:48:f8:65:fd:13:c2:d7:94:0f:38:cd:
5b:3a:b6:0b:8f:04:b9:0e:9d:5e:89:a6:f6:0f:54:24:bc:b1:
66:7f:67:a9:0a:99:e3:0e:1e:70:46:9c:38:17:19:3f:80:f4:
f1:b7:33:2b:02:a1:2a:61:d3:61:06:01:37:b0:42:3d:89:2d:
ab:c7:3d:e9:4d:3f:3f:84:4c:4a:1c:14:f9:3a:00:82:19:36:
f4:d2:fa:63:4e:3e:fc:52:91:13:72:f5:68:6d:a9:3f:ef:b9:
9d:70:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:12 2026 by rpki-client