Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: 5LUXdTD1i2jl3tn2c6LaUDnPowN9j6rUxAAd8wwjQuU=
Subject key identifier: DD:52:EE:2E:E1:38:CB:60:FD:F7:17:44:91:A3:7A:CB:63:8E:88:4B
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019DD208199213018D0B7B595859A2B14E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 18E0
Signing time: Tue 28 Apr 2026 03:00:39 +0000
Manifest this update: Tue 28 Apr 2026 03:00:39 +0000
Manifest next update: Wed 29 Apr 2026 03:00:39 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: ufd6MS1bLGsY+a2+kWUNiE5YijFsMsKixZU32kIX4CA=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:19:92:13:01:8d:0b:7b:59:58:59:a2:b1:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Apr 28 03:00:39 2026 GMT
Not After : Apr 29 03:00:39 2026 GMT
Subject: CN=dd52ee2ee138cb60fdf7174491a37acb638e884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:e7:73:c4:c9:e6:77:17:8c:eb:d6:2a:b3:
b2:87:27:53:ff:86:49:bc:68:67:da:85:14:cf:2e:
4c:45:c6:63:69:c2:98:a2:06:a4:42:17:69:39:bd:
af:06:09:90:64:65:d0:d9:e6:02:42:cc:2a:4a:0e:
23:53:f4:8e:f0:b4:a1:db:ea:51:e8:5b:49:ed:90:
5b:d6:0b:1e:47:5b:a2:da:39:55:b9:49:6f:18:9b:
20:70:19:ab:ef:e1:2b:06:26:78:1e:4e:aa:f6:0b:
05:bb:c1:ac:ad:6b:6f:1c:f5:49:fa:e3:df:89:d0:
aa:3a:1a:f9:b2:f4:ea:97:17:e8:de:ba:4d:7e:37:
31:5c:0d:2e:b9:b4:bb:c5:db:66:83:dd:6c:66:bd:
ea:ca:24:b0:a4:35:e5:5f:0d:6e:21:16:43:fe:a1:
27:58:6c:81:a6:01:9c:a3:60:06:f7:46:54:b2:11:
a1:55:71:41:6f:cb:65:65:f8:5c:64:e2:f1:46:cd:
16:b0:66:a0:4e:f0:d9:6f:94:29:0b:ee:c7:cd:71:
e0:b9:ab:2f:d4:19:73:6c:8d:de:c0:75:60:98:0f:
05:0b:db:9a:dc:32:25:df:3f:27:6b:ee:2b:7d:d2:
d1:49:59:b5:8a:69:8b:bf:a5:33:d8:6c:e4:ac:04:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:EE:2E:E1:38:CB:60:FD:F7:17:44:91:A3:7A:CB:63:8E:88:4B
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:69:5a:2b:a1:8e:14:14:15:2a:cd:1d:7e:36:76:26:58:f4:
99:ad:84:7b:92:c5:a5:49:7c:b9:b2:99:5a:62:4e:d3:06:31:
e4:5c:56:89:6e:bc:67:e5:66:66:12:f1:6b:87:d7:00:28:1b:
0a:58:b8:53:c3:3e:7b:89:45:c5:8e:dc:b2:7a:ee:1d:2e:ac:
9a:a7:68:4b:de:a8:d9:c1:7c:ee:f8:14:d6:b0:b2:1e:a6:39:
19:ea:a5:2d:bc:83:7f:d0:6e:40:85:d0:91:f6:2e:50:a3:fd:
61:e9:b2:5c:ca:b1:0d:d2:06:f8:c4:51:d4:a1:4b:8d:96:24:
82:da:0c:1b:e8:08:3a:1a:6c:6b:89:8d:0c:24:83:34:0c:64:
68:44:74:4a:09:6f:21:33:6c:2d:af:ea:37:fb:4e:48:0a:51:
73:12:a0:97:cf:03:51:1d:ea:b5:22:04:91:1a:e4:36:aa:4d:
9a:81:99:3a:7c:a1:71:74:d6:96:3d:08:e5:9c:ff:b0:60:a9:
3b:b1:db:2e:4f:d3:6a:e9:7b:59:b4:91:ab:df:df:aa:f4:5a:
69:db:aa:af:38:86:62:8e:0c:c5:09:83:56:f3:3a:57:13:98:
38:31:85:8d:44:6d:6b:d8:26:5f:6d:6a:4b:52:57:85:75:46:
57:b7:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:24:04 2026 by rpki-client