Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: HMNUL/HxqdYTewumgl5yP8NMX0Lfui6CS+EmxnH9jBg=
Subject key identifier: 3A:3B:28:8B:15:22:61:85:7D:7F:AF:8D:43:C9:B2:DE:7A:C8:15:37
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019D97AAD6E8434FC2E367EC8D34BBA71C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 11B0
Signing time: Thu 16 Apr 2026 19:00:48 +0000
Manifest this update: Thu 16 Apr 2026 19:00:48 +0000
Manifest next update: Fri 17 Apr 2026 19:00:48 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: z7DizL4Hb/61OTVWNPmYupdxfH+khSwuw2LR0HdxRw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:d6:e8:43:4f:c2:e3:67:ec:8d:34:bb:a7:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Apr 16 19:00:48 2026 GMT
Not After : Apr 17 19:00:48 2026 GMT
Subject: CN=3a3b288b152261857d7faf8d43c9b2de7ac81537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:8c:49:f6:b5:1b:28:6f:d9:cb:0e:91:36:
60:84:1b:4f:9c:af:ff:47:29:64:46:c5:7f:e2:fe:
e7:a4:4d:60:92:b9:1b:08:ea:59:0d:68:ff:1f:3b:
8b:b2:b7:df:e2:46:f9:79:3e:50:af:65:cd:31:c5:
a7:93:11:ea:80:44:04:d4:9a:39:9d:31:92:e3:33:
62:88:cf:da:e7:24:1d:a4:d4:bf:c4:83:e7:4f:ff:
af:28:ac:fc:3e:6a:d1:2c:39:25:66:3a:4b:59:fb:
73:2d:ce:13:f9:d2:7c:cf:31:9c:94:2e:7c:e0:35:
a5:22:d8:f6:63:a0:13:9e:1e:da:e7:0f:59:6e:3f:
68:07:a1:72:4d:c5:04:96:85:e9:db:8a:fb:d6:12:
43:3e:bf:e9:ba:92:c6:18:0c:da:f3:34:ea:1e:11:
c4:ca:ca:6c:1b:d7:b2:a4:a7:f5:e6:2b:10:1d:c7:
04:91:0d:f5:5a:8a:5b:c9:7f:62:a0:09:d3:93:b9:
6b:a0:7e:94:eb:1d:c8:cc:ad:0c:28:8d:38:3a:a0:
e9:fd:60:26:49:5f:3d:f6:3a:fc:0f:37:b5:61:2c:
3e:ed:46:52:0d:1f:f1:92:45:9b:b5:c8:7b:36:6d:
f0:8c:36:a3:60:39:55:6c:cd:85:d3:53:e2:83:a8:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:28:8B:15:22:61:85:7D:7F:AF:8D:43:C9:B2:DE:7A:C8:15:37
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:50:01:be:7e:36:b0:37:de:bf:90:ab:b1:73:13:08:d4:49:
b0:75:3d:93:7b:2b:92:90:9d:a5:f3:13:6b:6b:9c:47:d4:ac:
27:08:88:b2:5c:74:3d:20:46:a5:21:a6:d3:2d:39:85:f1:a0:
c3:2d:23:c0:95:1a:e5:61:f8:99:88:69:50:95:69:14:50:5e:
8e:20:5b:8b:80:3a:f9:48:b3:c3:8c:e5:26:15:67:4f:9f:27:
25:c1:14:a6:08:26:32:12:11:6c:36:37:ec:aa:29:c7:14:f0:
ae:3b:6b:9e:aa:ca:0f:97:ce:a2:82:b3:01:4b:95:70:97:9d:
07:3f:d4:5a:db:9b:5f:25:3b:d8:71:46:8b:40:ef:da:37:3f:
45:61:9d:54:e6:f7:f8:fe:5a:37:04:cf:03:93:9d:26:0e:e8:
ef:91:0b:a8:38:d4:2a:e8:bb:fc:f5:4b:4d:aa:db:ca:f2:d9:
0a:54:d8:9d:cc:b5:ac:53:89:96:74:f4:d8:0e:5a:d1:67:0b:
c7:48:23:c0:35:2a:11:ee:90:85:9f:a8:75:f7:a8:84:92:34:
67:ca:9f:ec:7f:6c:e8:2b:d3:3d:59:8e:b1:29:1c:fb:b1:0e:
ea:c0:5b:35:a4:41:9f:63:ab:28:45:c0:d3:d2:6c:6d:01:37:
77:7d:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:42 2026 by rpki-client