Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: Mi1SDAGmsV910rgqP8W54hdFnA0AjvTBdaZFtiS6veo=
Subject key identifier: 73:4C:A1:A4:DB:89:48:4B:80:30:31:F2:85:4C:7D:6C:A5:A6:E9:C7
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019D9A74DD9E60E6E74119868AE577D38ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 09A7
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: gPunFHoROyCM2PThr609J3NHPxH3ost2B+Chi294sgg=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:dd:9e:60:e6:e7:41:19:86:8a:e5:77:d3:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=734ca1a4db89484b803031f2854c7d6ca5a6e9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:c0:63:a5:5f:89:2f:e9:d5:fa:2d:77:bd:
f4:d1:d9:6b:0b:a8:04:30:25:bd:8c:d4:74:02:41:
5b:98:d5:fd:85:dd:57:72:ba:50:7c:66:aa:82:da:
29:0d:f5:2a:d5:3a:32:cb:fa:55:02:70:96:57:e9:
a4:8e:00:62:0a:8e:b9:f4:95:f8:a6:25:44:57:3c:
ec:0d:1e:0d:ac:a9:a8:ce:95:5b:43:1f:47:7e:22:
66:5e:5a:b3:df:6c:5f:41:f8:88:65:bd:89:46:70:
50:53:7e:56:06:00:ed:64:c5:36:d7:7a:d2:ee:dd:
b4:7a:84:5c:a0:4f:b3:71:91:e0:ff:46:f7:25:83:
eb:91:b9:46:e6:e0:42:ee:c4:6e:14:f4:91:7e:83:
99:38:81:1b:74:4d:2a:c8:b1:03:90:c3:06:56:1e:
ef:59:29:4d:03:ab:5c:13:6c:22:02:39:5a:2f:a9:
f1:c0:b2:53:72:9f:76:01:d3:8d:a4:1a:6f:93:40:
04:1f:31:58:cd:c8:cb:33:23:b3:69:98:98:01:b8:
78:97:ed:4d:55:b8:48:9b:61:37:85:ce:5b:c1:81:
b1:1f:aa:94:6d:b1:b8:8d:9b:30:54:91:7c:95:00:
cb:ae:18:13:4d:d7:71:ee:b8:14:3c:c3:bd:7e:8f:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:A1:A4:DB:89:48:4B:80:30:31:F2:85:4C:7D:6C:A5:A6:E9:C7
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:70:8c:f7:6c:b9:60:7f:98:ad:d1:f9:32:11:f4:e6:90:67:
d0:46:d7:d6:00:e4:e8:37:ca:4d:f3:7d:cb:e4:26:d7:e8:86:
b6:c2:4d:de:67:7c:8e:a7:35:e8:ff:68:e0:23:70:0f:21:4b:
db:31:47:d2:48:22:44:c9:41:dc:6d:d6:6d:a2:14:68:4e:4d:
55:ad:c6:e5:38:35:84:20:95:79:67:b5:71:99:49:52:5c:fc:
c7:1e:c7:44:b9:c9:d3:b3:d2:55:0b:42:ab:12:d5:f7:68:d4:
05:53:41:3f:7e:5b:4e:5e:81:90:25:02:23:e8:6a:8e:bc:90:
6b:6c:5c:b4:4c:f2:ed:6b:b2:6f:29:13:32:db:05:c2:c7:f4:
3e:93:07:96:35:42:92:78:42:fb:f6:02:d4:96:c3:43:89:1e:
a1:7b:7c:74:af:f9:4c:b7:bc:9c:d5:8a:fe:72:c6:fa:fa:c8:
31:38:e9:56:42:69:52:36:de:fb:f3:91:fd:f3:92:fa:10:50:
0b:2c:93:92:74:fc:b6:e9:b3:cc:71:ea:34:8c:08:9d:e1:75:
22:5b:b0:05:e4:23:a7:cd:61:ff:cd:a4:96:66:69:11:22:c0:
a9:b7:8d:f8:ad:dd:73:4c:f6:88:64:5f:ab:5f:e1:3d:53:4f:
0a:f8:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:14 2026 by rpki-client