Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: kj1D+EVBJ/yA3xl71WkSet6fuyBfcff0UAQsPWHOORs=
Subject key identifier: 43:69:B2:BF:AF:B4:6C:F2:96:56:07:56:90:13:C8:DF:F9:14:53:82
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019DA979CCD5DD80EF5CD1A204F7CBAC7F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 18CB
Signing time: Mon 20 Apr 2026 06:00:24 +0000
Manifest this update: Mon 20 Apr 2026 06:00:24 +0000
Manifest next update: Tue 21 Apr 2026 06:00:24 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: +5ZnWcguVfGZHX2g8nI3fqPGxUzq05CNnsDJfKC8o14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:79:cc:d5:dd:80:ef:5c:d1:a2:04:f7:cb:ac:7f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Apr 20 06:00:24 2026 GMT
Not After : Apr 21 06:00:24 2026 GMT
Subject: CN=4369b2bfafb46cf2965607569013c8dff9145382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:4c:91:e7:b6:9f:ae:db:74:68:42:52:42:
ce:fd:09:28:35:ac:58:dc:fc:55:4c:f4:d7:3e:be:
c7:af:7a:c6:a5:12:12:c5:20:f1:d6:ed:fe:41:ec:
51:ee:dc:db:7a:e6:90:fc:6e:b0:c1:ba:a1:ac:0a:
90:e9:19:96:7f:cb:a3:bc:d8:3e:97:1d:e3:e8:f2:
cb:46:9f:f9:dd:f9:6e:2e:f3:14:54:c8:d8:d5:02:
3f:23:9e:b8:83:42:ca:26:0c:a3:36:aa:d3:17:42:
36:4c:0b:bc:e2:9b:bd:0f:2c:4b:be:77:cb:6f:dc:
cd:3d:d0:15:cc:36:b7:17:92:0a:69:3b:0f:94:29:
42:bf:45:40:03:d3:8b:b8:95:27:67:44:3d:c9:ce:
cc:5f:0e:f1:22:58:47:79:b8:50:f8:fa:ba:df:c0:
66:61:33:43:cb:b0:1f:58:f9:d0:d3:b8:71:68:c2:
d4:b0:ac:81:d1:8a:bc:60:89:0b:56:e6:84:e8:24:
d6:fc:a4:9e:fd:35:98:88:dd:42:00:b5:4a:9f:96:
a3:7b:78:ad:30:d2:08:cd:3d:b5:26:d1:67:8b:9c:
63:08:a9:6c:7a:ff:23:a6:70:be:d3:ee:8c:73:32:
67:d5:48:37:0b:83:31:f3:3d:68:41:d5:e3:ca:63:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:B2:BF:AF:B4:6C:F2:96:56:07:56:90:13:C8:DF:F9:14:53:82
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:44:de:18:08:a8:b7:34:4c:f8:91:a7:b0:e4:35:4d:c0:
7b:89:ce:1f:22:86:37:f0:3c:c7:9d:7d:76:08:07:6f:0c:d1:
00:cd:65:fb:01:be:6c:cc:34:b4:bb:de:fd:e1:7c:06:7d:dd:
af:fb:1e:1a:8e:9b:8c:bc:d2:ec:a8:32:5f:df:98:b8:90:35:
36:39:ec:81:59:96:85:f0:85:d7:57:82:6e:df:98:4c:24:44:
2b:dc:3f:9c:5c:07:bd:68:2f:e0:de:1e:dd:98:db:0f:34:2a:
77:7c:9a:e4:a3:0a:b2:91:89:44:3b:95:00:e8:04:ae:b2:59:
49:15:c9:e2:2c:23:49:a8:4f:43:ad:f1:e7:3f:1d:99:a8:ca:
b0:64:e7:3f:e3:fd:1b:05:1b:e0:b2:a0:57:a7:66:b2:23:1f:
90:72:54:70:7e:62:82:d8:66:d2:d4:49:77:ab:53:13:c2:11:
71:ea:32:8f:3c:36:01:d7:04:83:c5:5e:5a:8a:fc:fc:1b:d4:
23:aa:b6:b7:54:eb:a5:ee:95:da:ec:23:3f:f7:5b:9e:e5:6e:
23:64:9a:55:3b:e8:16:d2:85:56:a0:e0:ec:cb:3b:ca:f5:84:
b6:8f:76:1f:b9:fa:1f:1f:4e:4a:97:91:01:27:12:95:c7:14:
82:4c:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:40:05 2026 by rpki-client