Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: dcu+9wKU07MSnJ1BycOPliCh2iAwdGxuXbk759eXSdU=
Subject key identifier: FB:35:5E:7B:8F:55:3B:68:63:62:F4:DF:CA:50:AA:2C:D2:CF:79:B8
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019D99993AE4C12D75F2FAA40D4122C647DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 11B1
Signing time: Fri 17 Apr 2026 04:00:49 +0000
Manifest this update: Fri 17 Apr 2026 04:00:49 +0000
Manifest next update: Sat 18 Apr 2026 04:00:49 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: HX8A96PojzSI1Vl0vkzSRbw6WIsYd7InMHEhyFYrPFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3a:e4:c1:2d:75:f2:fa:a4:0d:41:22:c6:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Apr 17 04:00:49 2026 GMT
Not After : Apr 18 04:00:49 2026 GMT
Subject: CN=fb355e7b8f553b686362f4dfca50aa2cd2cf79b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:11:45:d7:38:3f:18:87:f8:b6:e4:b4:f5:
b5:02:e8:60:fc:8d:60:12:52:1d:d1:88:5c:d1:d0:
33:37:d4:46:31:a6:26:77:4b:ce:d3:22:db:01:57:
6b:67:4d:45:74:09:38:53:ff:57:91:0f:6b:7e:c2:
9b:8e:34:da:2f:c9:cf:9c:c5:38:cb:66:c9:2f:f3:
72:4d:f4:1f:1f:eb:21:5d:7a:c5:27:22:29:4d:85:
2f:34:ea:74:e1:bd:24:fd:e8:82:16:0b:f5:2f:01:
c5:47:23:e3:28:40:1f:b0:df:8e:a0:81:8a:ad:9c:
3c:4a:54:01:2e:ba:01:ad:7b:68:7a:92:f0:a5:bf:
1b:2c:ea:e7:42:2e:a2:ba:da:ac:88:9c:17:4d:57:
96:f6:2d:bf:c2:56:9c:31:db:e7:ac:3d:32:a5:43:
3e:72:9f:7a:8e:fd:9f:68:16:a9:61:9b:6e:ea:58:
44:34:87:5d:96:e1:82:d1:a1:ee:b8:31:42:7c:f7:
4a:b3:15:be:f7:01:d3:5c:bd:d7:49:55:ee:9a:f1:
7c:70:2b:60:fe:02:be:99:e6:1c:12:c5:aa:21:c8:
c2:32:0f:56:35:bd:c4:ff:ca:c8:48:00:97:90:11:
39:11:11:73:05:7c:b1:4d:db:35:76:88:96:d2:91:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:5E:7B:8F:55:3B:68:63:62:F4:DF:CA:50:AA:2C:D2:CF:79:B8
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:18:a8:e5:0c:6f:67:09:3c:03:e1:1a:0f:db:90:55:ac:
83:36:a9:77:61:47:6d:fa:7c:eb:32:ce:6d:10:17:f5:66:ba:
68:62:b6:75:10:5c:e4:ec:f7:63:34:79:a9:a9:bf:5a:65:80:
db:71:9f:ee:95:48:44:4c:30:0c:27:74:f3:fa:c3:11:ed:66:
05:1e:33:5c:2a:22:6e:2f:d8:6e:16:6b:3e:19:c4:d0:16:8f:
81:03:ea:75:68:af:10:85:3c:25:77:7e:b0:98:cf:c2:ba:3e:
24:1a:43:2e:57:d9:25:ba:ec:8b:e2:24:48:52:dc:05:d7:69:
bf:55:ff:dd:1e:0e:60:d7:b1:22:f9:10:43:23:1b:a2:0b:a1:
ab:c2:88:00:09:02:37:88:ee:bc:dd:de:f8:96:27:d1:de:12:
6a:ab:ae:68:b2:27:a8:78:80:61:96:6a:07:0d:4a:32:64:dc:
61:5c:04:86:ed:78:18:a6:7c:d4:6f:ea:e4:87:b6:ee:f5:5d:
37:42:2d:6f:4b:4c:74:c1:0d:81:43:37:8b:5f:dc:cf:01:38:
e4:df:d9:07:15:40:18:97:ef:2f:75:eb:6d:06:fd:18:4b:bc:
1e:07:14:06:31:51:08:e6:fa:cb:28:97:ea:13:5e:cb:db:53:
61:4e:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:18 2026 by rpki-client