Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: HTaOVquzmK0UA36p6rUhcmbDHp9p5jGFv/9QFx5cnPs=
Subject key identifier: 49:1B:68:F8:D5:49:A9:1C:9F:4D:6B:24:2A:8D:06:FB:C6:CE:90:CC
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 019D9818C8090FFD46D8C0F30ED96BD3BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0DFE
Signing time: Thu 16 Apr 2026 21:00:54 +0000
Manifest this update: Thu 16 Apr 2026 21:00:54 +0000
Manifest next update: Fri 17 Apr 2026 21:00:54 +0000
Files and hashes: 1: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: eN+RWi0yYVuDORR++1RPR1o03Pt9BSXfe4hhuB5yHG0=)
2: Uwq4fgrazLwEGWvCfkhNBfYlPZA.roa (hash: vwAFLTe2SVcS4DhCcFTz3AjD8TipO0c+U4k+Iwqqzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c8:09:0f:fd:46:d8:c0:f3:0e:d9:6b:d3:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Apr 16 21:00:54 2026 GMT
Not After : Apr 17 21:00:54 2026 GMT
Subject: CN=491b68f8d549a91c9f4d6b242a8d06fbc6ce90cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:35:41:2e:6c:85:82:8d:27:2d:e5:f2:03:
8a:2b:e8:af:a4:da:a4:61:13:9b:28:66:48:18:26:
7b:1d:7b:2d:08:d6:6b:a0:46:8d:e0:fe:f2:42:9c:
28:31:57:c7:95:1a:69:19:c6:08:85:32:d2:6d:5b:
63:43:4f:ca:1d:73:5a:16:e8:0a:6c:5a:ae:66:79:
e9:53:4d:65:72:0a:49:44:47:1d:d9:79:ce:88:72:
7a:83:42:a5:28:98:3e:d5:48:df:81:b8:9c:e1:a1:
d1:ee:90:04:8c:a6:f7:a9:1e:60:74:80:de:c5:e2:
d7:0c:61:d5:32:4c:a8:57:86:37:fa:81:af:a1:ed:
db:5b:68:a9:43:ad:37:df:fc:95:a8:d7:88:fc:28:
dd:e3:53:01:42:51:11:a3:bd:25:7c:ab:fa:72:8a:
b9:af:02:af:18:8e:a8:10:47:9d:90:b4:e0:59:3c:
23:ba:03:6a:8f:f4:30:38:28:b0:89:99:bd:1d:10:
eb:ee:a4:ad:30:ea:e8:35:5c:eb:87:10:5d:42:ce:
e7:32:ec:38:d7:b5:da:6e:db:07:5e:24:4a:8e:e2:
f5:aa:93:ca:26:69:fe:8c:13:93:25:1b:9f:eb:be:
83:3d:e2:1a:c8:ff:93:81:60:a8:5d:1f:7a:69:57:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:68:F8:D5:49:A9:1C:9F:4D:6B:24:2A:8D:06:FB:C6:CE:90:CC
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:1a:f8:d6:ff:41:85:a3:1b:ae:2a:d2:08:2d:11:2b:68:
aa:01:9e:8d:6a:5a:7c:c9:5d:20:10:64:88:1f:84:dc:86:97:
4f:82:e6:23:96:03:4b:6e:de:cf:3d:3d:d2:54:aa:ac:8b:38:
7b:6b:78:ab:1e:79:74:4b:79:4c:21:08:4a:bf:45:4f:dc:bb:
94:65:6c:9c:19:6a:6a:18:08:a0:d0:72:b6:07:29:74:e2:d8:
11:18:0f:f3:82:42:2d:e3:c9:87:9f:97:23:ce:3a:fe:31:a3:
1e:d8:90:f7:92:cf:bf:ee:32:0e:19:61:35:e4:84:7c:37:8e:
2c:6d:c4:12:97:10:07:4b:3d:0b:12:fb:80:44:5f:c7:2f:70:
48:50:67:77:e3:66:5f:2b:ad:60:82:f0:83:8d:b5:15:43:7b:
3c:93:45:7e:cb:e9:ce:29:39:f2:d6:c8:4e:6e:1f:e8:81:ba:
80:2b:cc:3d:07:21:ff:85:07:bf:ec:6f:8d:b0:c7:04:56:17:
54:7a:a1:01:88:79:8e:ec:e7:e1:1b:05:aa:42:dd:69:e5:2d:
75:50:83:2d:04:70:50:37:29:60:62:46:0a:c4:2e:f5:26:d7:
69:45:ba:0d:14:63:1f:ec:d9:26:d5:96:ed:51:f2:ad:04:9e:
b5:b7:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:39:08 2026 by rpki-client