Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: WmW5MZXmVcVl0o8oTz16yS4f4+lJjud7B+UcR2rgjG4=
Subject key identifier: 5A:AB:F0:57:3F:E4:4A:01:5C:D8:9A:4D:31:C5:23:4F:90:D3:93:97
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019DCE99729E71FCD5204C71E9DC3B5D8095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0738
Signing time: Mon 27 Apr 2026 11:00:55 +0000
Manifest this update: Mon 27 Apr 2026 11:00:55 +0000
Manifest next update: Tue 28 Apr 2026 11:00:55 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: QD9+3OPCNyAWGjz8WgxUzPAdCEefcpYIPYdm9QrB2YI=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:72:9e:71:fc:d5:20:4c:71:e9:dc:3b:5d:80:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Apr 27 11:00:55 2026 GMT
Not After : Apr 28 11:00:55 2026 GMT
Subject: CN=5aabf0573fe44a015cd89a4d31c5234f90d39397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:ff:f8:b9:80:ee:61:47:42:01:67:d3:4c:
9a:5d:7c:4d:2f:a2:b5:bf:56:91:40:70:c1:dc:25:
af:03:47:13:33:85:9c:e1:34:89:97:53:b7:ed:31:
df:37:24:3c:fb:9e:74:5a:35:1f:b3:f7:36:9d:c0:
22:05:4e:3c:80:cb:97:43:b6:df:2d:24:9c:f8:5d:
75:ef:b1:c0:11:1e:6b:89:fc:b5:b4:f8:91:6e:40:
a6:c2:2d:6b:75:35:6f:07:2a:48:b4:64:bc:09:87:
95:57:9b:58:cb:74:85:fe:73:fc:46:c9:92:bc:03:
5f:45:3c:7f:4c:52:4f:3c:74:25:51:72:e7:8c:da:
1a:70:c1:c0:d7:53:3c:de:a3:ca:85:22:cd:81:f8:
d3:9d:b2:f0:06:d7:b2:2e:6c:52:4c:dd:3a:01:2a:
eb:84:21:54:e0:e2:65:79:22:2f:ef:79:31:3c:32:
dd:19:e4:dd:96:4a:49:d3:91:26:bb:68:b6:13:87:
8c:17:17:03:3a:58:86:f4:7e:54:ff:3f:38:3d:56:
b8:ea:03:fa:87:6c:34:2e:c8:fd:a5:b3:e3:c4:4a:
0a:dc:38:2e:21:1d:c1:37:a0:7a:f0:81:38:a8:df:
34:a6:24:ac:aa:a9:5d:f7:42:4b:05:fb:bf:d0:08:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:F0:57:3F:E4:4A:01:5C:D8:9A:4D:31:C5:23:4F:90:D3:93:97
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:46:45:50:96:38:ba:53:04:b2:fe:66:51:6f:ef:9d:ec:3c:
aa:fd:dc:f0:95:69:1e:69:49:9a:35:14:16:d9:d6:ac:f0:3b:
16:ec:24:69:85:e4:ff:0e:81:5c:49:f4:ea:ba:fa:43:66:e3:
c2:d2:76:d5:db:a9:00:83:d2:e6:5e:3f:a0:80:dc:5c:9d:6b:
ef:4e:9b:c6:63:b7:63:7c:5e:ae:d5:47:ce:ff:35:ce:f9:0c:
2b:e8:11:3e:50:63:1a:16:ff:c9:52:59:fc:e6:5b:44:03:f9:
77:38:a1:8e:97:8b:be:7a:18:80:05:29:32:f0:93:41:55:e9:
ea:42:6e:f9:54:71:9e:42:ce:e0:17:a2:80:12:8c:cd:b0:3e:
ba:b3:12:3e:d4:e8:43:b5:e4:50:fb:d7:13:ae:94:74:65:63:
a5:01:4a:c2:04:d7:c5:f7:22:39:23:8b:7b:22:ad:3e:4c:da:
96:ee:fc:bf:33:b4:02:77:7c:43:11:d2:60:7f:35:e7:29:15:
0a:68:4e:47:a8:24:b6:84:a2:69:12:f9:93:87:59:54:0d:3a:
9e:4c:ba:7e:5a:c6:b4:63:de:ab:a3:e4:ca:00:07:c6:27:42:
8c:db:07:e3:d1:37:8a:a0:e4:76:01:1b:37:00:f1:5b:08:0c:
09:ba:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:10:35 2026 by rpki-client