Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: lbxbYBOOHpQjNVDAprQoshasJVzJSa5QZI8X2Rd0rAI=
Subject key identifier: 66:EC:96:89:65:AE:DA:7C:2F:92:A7:58:33:51:14:63:0F:9C:1F:9C
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019D98F4E454A03AB18948786805C7D43853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 115E
Signing time: Fri 17 Apr 2026 01:01:19 +0000
Manifest this update: Fri 17 Apr 2026 01:01:19 +0000
Manifest next update: Sat 18 Apr 2026 01:01:19 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: +imcM86vIWo5aE5uaoQ+TkhEvbiVAnf4sVpOOnIBJlQ=)
2: zFPDIQ6oyxHzuUI5QPn3o0ndWIE.roa (hash: kZJWLecWvxb0aVQv+4P+LbA10Ay5ixM4OkGwIDMl4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e4:54:a0:3a:b1:89:48:78:68:05:c7:d4:38:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Apr 17 01:01:19 2026 GMT
Not After : Apr 18 01:01:19 2026 GMT
Subject: CN=66ec968965aeda7c2f92a758335114630f9c1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:1e:c2:b2:4b:aa:cf:df:b6:b3:f3:6d:2b:
b1:d5:9e:38:15:42:45:97:18:5f:db:6b:c2:41:d9:
71:cd:e3:b1:4a:55:6c:39:7a:e7:a4:6a:c4:ac:24:
1f:ce:b7:9b:17:83:b6:51:af:36:70:b3:61:67:00:
06:f1:a6:e8:44:18:8d:a9:8b:7a:1e:a4:42:d5:e0:
6c:a5:02:71:1b:14:60:31:26:8e:ef:01:7d:60:01:
e3:d4:2c:53:33:94:68:18:05:81:f0:83:a3:0e:b6:
73:8b:64:2f:b6:3f:00:f1:cf:af:14:c5:ef:e0:db:
6c:26:64:c6:2a:a8:c3:d1:1a:66:55:6e:69:18:67:
95:71:43:12:51:4a:08:4c:36:12:24:d8:78:50:6c:
0b:23:01:1f:1e:c6:41:65:6e:ae:9e:7e:7f:84:9d:
a1:dc:e6:cc:5b:05:2d:05:91:c0:8f:c9:a3:a6:95:
e7:07:95:ab:98:ec:d6:79:90:41:0a:2d:10:e0:48:
11:e2:cc:19:b2:75:57:83:62:8b:96:1b:aa:bb:14:
82:1d:0d:43:eb:bc:c1:76:f4:85:73:cc:30:60:1c:
f9:97:c4:c1:96:ca:bd:2a:af:15:03:95:88:24:db:
25:ef:67:62:33:a0:ef:a4:13:90:e0:e7:96:1c:94:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:96:89:65:AE:DA:7C:2F:92:A7:58:33:51:14:63:0F:9C:1F:9C
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:19:0d:dd:60:00:bf:44:e4:6f:d1:b2:e5:03:19:a1:9f:
7b:44:30:fd:cc:b9:bc:94:f8:e2:af:2c:52:16:26:3d:72:a2:
2f:25:23:a5:23:1c:37:13:1e:d3:04:7d:7b:5d:13:5f:ae:35:
7c:cd:8b:2b:bd:e2:3c:9a:b9:f3:d7:38:bc:20:ef:18:0c:3f:
e6:74:aa:be:39:03:f3:7e:01:78:f7:f4:c9:92:b0:c7:d9:c7:
ca:60:2e:8e:1f:f3:8a:de:59:43:76:e0:f2:cc:ea:cf:0f:fb:
e4:ae:31:e0:cb:87:bf:f8:65:40:c7:60:8c:df:b5:04:86:af:
10:3b:81:8e:eb:54:8e:5c:f1:42:f6:38:56:25:24:3a:66:81:
e6:83:2d:8c:2f:67:b7:6a:18:94:15:1d:32:a1:f2:e0:06:cc:
be:75:08:9a:a2:46:87:53:b9:44:5a:c4:1d:08:d1:30:26:b9:
2a:40:c9:98:d1:ca:91:03:10:f8:b3:5e:da:e1:21:99:61:7e:
57:92:30:b3:8f:23:4b:81:d2:e8:b2:07:7b:f4:70:de:85:a2:
5f:db:d0:38:5f:0c:a8:ba:23:72:3a:8c:97:f9:0a:25:8c:9d:
34:99:c6:75:f6:b9:e2:4a:4a:81:ff:df:78:2d:b0:83:9a:c8:
fc:16:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:29 2026 by rpki-client