Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: XrmCK/WXTDYYtXoXOjr9o1pWydj5JXYIcLpAxDSPsmQ=
Subject key identifier: 2B:9B:5E:74:E6:6E:5C:11:12:E8:3A:83:84:A6:DC:25:01:9B:08:70
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019D819160BC59BEEEDCCBED49E697B82E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: D4
Signing time: Sun 12 Apr 2026 12:01:21 +0000
Manifest this update: Sun 12 Apr 2026 12:01:21 +0000
Manifest next update: Mon 13 Apr 2026 12:01:21 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: k/O3YvLK68sHIc8dMYUPsH5qP83JwZkNWPhRm056dVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:91:60:bc:59:be:ee:dc:cb:ed:49:e6:97:b8:2e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Apr 12 12:01:21 2026 GMT
Not After : Apr 13 12:01:21 2026 GMT
Subject: CN=2b9b5e74e66e5c1112e83a8384a6dc25019b0870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:1d:a0:a1:8a:cc:63:de:52:54:64:d4:85:
00:5b:f4:8b:67:70:a5:fe:ac:2a:65:18:22:0e:70:
45:17:b4:8a:c0:f9:89:48:60:0b:f0:3c:6f:e9:36:
0c:07:eb:64:8f:46:07:fc:4c:18:4d:87:bf:a5:01:
55:ff:ba:19:51:b8:6b:fd:cf:e2:62:14:83:18:6e:
3b:65:11:ed:83:62:a3:db:68:a6:e5:27:f1:da:d8:
ce:11:85:07:8f:c4:0d:2a:50:7e:5c:f8:af:0f:6d:
42:d8:ed:29:f1:0b:b2:d0:5a:cf:4c:46:7d:1d:f9:
56:aa:37:4b:b9:dc:54:cc:5a:fa:a0:e2:59:28:58:
39:fc:08:89:73:aa:56:a0:98:17:81:b7:7a:50:fc:
c4:2c:65:7d:98:4f:dd:23:ab:6a:b8:83:b9:ec:79:
44:03:45:10:89:3f:ce:3a:a3:59:00:38:4f:10:12:
68:0a:b3:22:5f:43:68:a6:ae:33:cf:31:47:e8:eb:
db:af:d8:72:8d:c6:4f:18:13:94:c6:5b:8e:60:3a:
3e:cd:9a:8a:cf:bf:20:06:06:93:00:6d:27:e0:bb:
7a:cc:8c:68:90:a0:51:e2:cb:55:62:d0:c2:77:5c:
79:6a:80:9a:9b:a3:f8:d5:50:b7:57:4a:ec:43:4f:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:5E:74:E6:6E:5C:11:12:E8:3A:83:84:A6:DC:25:01:9B:08:70
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:85:9d:5e:bf:0d:75:bd:15:ad:e3:61:fc:1a:b2:30:a6:
aa:f3:96:00:c4:28:ad:0d:24:1d:8e:2e:f9:8a:b8:71:72:79:
dc:c5:ec:70:14:d3:37:e5:18:40:50:c2:93:67:ca:92:1a:cf:
6f:5d:3c:9b:bb:ce:9f:30:bf:ea:92:b5:45:60:ea:31:8b:0a:
14:29:1f:04:3e:0c:cd:bf:1d:42:08:81:11:3a:2e:11:d4:ad:
af:42:0b:11:f9:89:f9:eb:c9:c7:98:2a:a3:23:f7:32:5f:b2:
3d:77:cd:b1:e8:eb:7c:40:e5:78:a2:79:17:16:42:20:2d:24:
16:9a:42:77:64:1c:9e:18:41:f9:29:33:5b:b7:9b:33:59:36:
78:52:df:77:9f:36:8f:36:08:e3:65:2a:b9:c9:97:9e:7a:bb:
06:1b:f6:e9:54:1c:84:49:fc:be:bd:32:b9:41:a2:a2:90:2d:
e7:ba:65:9a:3c:ee:3c:94:10:61:69:27:1b:4f:75:7a:be:11:
b0:9b:2a:40:53:90:4e:e9:0d:38:55:f4:ad:ae:23:1f:36:a7:
06:ef:b7:32:9c:c7:f1:ac:b1:53:2f:25:c0:57:7e:39:d8:04:
46:49:f3:96:e9:a8:65:41:6a:4c:b3:5b:06:6e:75:91:ce:48:
4b:c4:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 13:56:39 2026 by rpki-client