Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: Y4VB9y6/HQ1A3R30vsBr9hUvol10VVGaBzx3ky/Tovw=
Subject key identifier: 4E:E8:01:5B:F2:4E:B2:25:1C:18:00:9B:FF:61:C2:D9:15:C3:AA:A9
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 019DCED091CD232017CF0028467E995A6401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 12:01:08 +0000
Manifest this update: Mon 27 Apr 2026 12:01:08 +0000
Manifest next update: Tue 28 Apr 2026 12:01:08 +0000
Files and hashes: 1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: w8Nz1VAa4mg8/b18w+a5NxURuKJVeqNIb4BscPpkdgs=)
2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:91:cd:23:20:17:cf:00:28:46:7e:99:5a:64:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Apr 27 12:01:08 2026 GMT
Not After : Apr 28 12:01:08 2026 GMT
Subject: CN=4ee8015bf24eb2251c18009bff61c2d915c3aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:75:39:bd:5b:ff:93:0e:00:3b:4b:b9:3d:
7b:ca:8a:82:fb:cd:61:aa:f5:ef:7f:0a:a4:fb:73:
69:6a:7f:a2:99:a0:2c:93:78:5d:dd:57:a1:b6:f1:
54:7e:bb:d6:50:2b:43:17:47:50:e6:28:ab:1e:42:
84:25:62:e6:bb:14:30:0f:44:bb:ff:90:00:25:b7:
d8:45:3d:ac:1a:67:83:0b:e6:ab:c6:20:ac:7e:95:
88:73:24:e5:00:e8:f0:7c:b9:56:88:f2:49:40:04:
c5:85:b0:7a:d6:95:65:72:53:ef:42:32:84:a5:fb:
4d:68:0a:1e:56:71:20:ea:c3:cb:6f:51:55:83:e1:
d7:f3:df:0a:55:b0:4f:9d:9a:4a:c9:86:b0:44:3d:
9d:19:85:dc:1d:23:6c:4d:7c:33:33:9c:d8:3b:7d:
31:c5:df:3d:10:40:af:48:6c:e9:fd:db:8f:62:55:
f6:2f:5a:24:42:41:f7:db:80:49:67:e6:fe:96:4d:
f2:1c:8d:69:d7:e7:82:8a:f5:44:94:89:d2:0d:ba:
9f:0d:13:c5:48:4a:96:2d:0f:09:4c:ed:c6:cd:18:
50:8d:b0:73:16:a4:00:45:59:e6:14:13:b2:bb:ea:
8f:a3:f2:ae:5c:f3:f3:fc:34:b2:8a:bb:74:2a:59:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:01:5B:F2:4E:B2:25:1C:18:00:9B:FF:61:C2:D9:15:C3:AA:A9
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:1b:a2:94:e5:d5:d4:6b:ae:c2:fa:9d:1c:38:26:7d:00:
88:08:18:7a:8b:cc:10:56:29:e1:da:01:dc:b6:96:1e:9e:51:
31:6b:90:5a:75:e4:99:4a:05:58:d2:02:10:c9:dd:c1:6c:ed:
9a:27:d5:6a:df:91:ed:56:4f:2e:76:1d:72:00:c6:f1:4c:6b:
21:0b:51:4f:1f:db:51:01:ff:8e:cb:f9:79:37:5f:51:ee:09:
2e:7e:9d:fe:f2:29:fa:0b:62:6d:a3:df:1d:91:4a:66:ef:2d:
57:7a:57:66:5d:b1:08:5b:2b:ec:d2:30:54:b5:51:fa:c8:cd:
63:9a:05:03:d9:63:f1:1d:67:64:81:88:5a:29:ee:7c:06:c7:
a3:bf:51:2d:c5:77:6a:42:28:d1:7e:39:63:ca:f7:d1:e7:83:
d9:4a:05:23:32:01:1f:07:ee:3b:3e:60:ee:be:04:c4:2e:0a:
b6:d8:1f:3a:27:2a:33:f8:65:e6:ec:11:b4:72:22:0b:a7:98:
3b:17:f7:7b:06:4b:50:59:c6:b8:3d:87:13:13:e3:c4:7a:fe:
8d:1c:ad:8b:09:ca:6b:28:91:de:ad:98:77:a2:45:e7:68:c3:
0d:30:97:73:fd:1b:aa:e3:9d:3d:40:26:dc:c7:32:39:cb:33:
ef:65:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:29:18 2026 by rpki-client