Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: /i7vnEUseXvZBY4+mQoAh82IiBPdKIbpnYGwN+k5yVc=
Subject key identifier: 72:68:4E:BA:1F:83:B4:B5:EC:82:80:3C:6F:13:D2:A4:AB:3B:14:8E
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019DCFE31C4C68BAA64B9196710A798A9220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 17:01:00 +0000
Manifest this update: Mon 27 Apr 2026 17:01:00 +0000
Manifest next update: Tue 28 Apr 2026 17:01:00 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 6xXuqFQlb1RKlm0eLXZKrtZI36hrJltPA50AVJkXFyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:1c:4c:68:ba:a6:4b:91:96:71:0a:79:8a:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Apr 27 17:01:00 2026 GMT
Not After : Apr 28 17:01:00 2026 GMT
Subject: CN=72684eba1f83b4b5ec82803c6f13d2a4ab3b148e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:b5:ff:d0:ca:b2:7c:99:f2:8f:99:01:d0:
02:c4:67:04:df:91:03:15:78:9c:92:df:27:e3:d4:
3c:bc:6a:6d:6f:92:ab:b3:0d:7f:e0:e3:3f:27:62:
4a:2a:74:a6:7b:0d:47:37:46:b8:26:bc:5d:04:d0:
d8:96:f9:1e:c9:10:33:12:d7:57:ff:6d:c4:e1:36:
2c:cc:c6:bc:01:96:53:df:0b:c4:10:98:4e:4b:12:
77:a1:1d:34:54:d5:8d:77:35:d9:4d:79:da:f2:a7:
4a:51:30:7b:8f:3b:03:dc:45:29:3a:47:da:71:8a:
79:1b:fb:ef:a3:9e:cb:43:5c:d5:a6:d2:24:6a:2e:
3c:7c:1f:43:e4:5c:ed:d8:b0:5b:ed:bc:12:89:44:
95:b6:c7:2d:a7:55:2a:86:9b:3c:e7:87:66:38:67:
bd:eb:f2:15:b7:12:86:40:3a:34:7a:73:9e:f6:a9:
8f:41:65:94:7b:fd:3a:db:63:18:48:5e:80:7b:82:
7f:a0:2b:2a:d1:9f:24:1d:13:24:ee:23:d7:9c:84:
cd:00:29:bb:9d:d2:2d:0b:f1:41:37:76:a6:a7:c5:
a2:50:bc:bd:96:ce:15:42:e1:51:98:88:aa:1e:b5:
85:ed:e9:c5:05:29:50:98:1e:50:ce:e5:12:52:35:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:4E:BA:1F:83:B4:B5:EC:82:80:3C:6F:13:D2:A4:AB:3B:14:8E
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:64:a3:a1:91:d0:4f:7f:a9:05:26:24:83:60:d2:42:67:02:
ad:c1:2e:71:f7:52:3f:e6:7a:b0:25:5e:43:be:14:b2:87:d1:
37:25:d9:68:6e:01:7e:6d:4d:45:42:31:5b:21:d1:58:0b:dc:
34:fb:dc:83:8c:67:e7:c3:76:1c:ab:37:e1:12:7d:95:71:1a:
e2:d4:d3:33:51:3a:57:22:f3:2f:17:a7:93:c3:06:cb:94:d7:
ab:21:d1:c4:19:f2:ac:5e:49:5c:50:21:a8:23:87:1e:a8:63:
6b:82:ba:24:d7:dd:15:6b:d1:37:db:a5:df:be:ea:86:31:1f:
ca:57:9b:63:cc:92:61:a0:e7:f9:c0:1b:13:ce:aa:7a:e7:1f:
07:c0:45:18:73:bd:a7:ab:34:9f:94:34:5c:c1:6c:0e:4c:d5:
78:86:93:6e:61:3c:38:a2:05:60:84:91:72:3e:ab:3f:7f:f8:
35:0d:03:2d:35:cb:ba:f3:4a:5f:e0:4a:dd:ce:ef:a9:8b:bb:
0e:84:fd:58:33:42:f9:79:3b:71:41:64:53:88:60:b9:3d:36:
0b:22:c9:cd:f5:33:75:42:af:af:67:3c:20:e5:09:84:e0:02:
f2:f4:a1:bc:6d:07:04:1a:a5:f9:12:fe:65:5c:e2:96:ef:ee:
2b:fb:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:42 2026 by rpki-client