Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: hoTsr+5PxlHAe6P2fR0fEwJkWd9fK6geKfEM2xyS078=
Subject key identifier: E5:76:DD:A4:ED:FE:74:2A:4C:DA:9F:6E:F0:CF:76:35:D4:80:3E:4A
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019DCF3E201CB3BBEBA55A0C4BEFEF2F8F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 10A4
Signing time: Mon 27 Apr 2026 14:00:48 +0000
Manifest this update: Mon 27 Apr 2026 14:00:48 +0000
Manifest next update: Tue 28 Apr 2026 14:00:48 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: XKDhU2/nMwLB/B7i8wmtXrdFLmGxYWSXW8X8cpthKj0=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:20:1c:b3:bb:eb:a5:5a:0c:4b:ef:ef:2f:8f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Apr 27 14:00:48 2026 GMT
Not After : Apr 28 14:00:48 2026 GMT
Subject: CN=e576dda4edfe742a4cda9f6ef0cf7635d4803e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:32:cd:6e:a7:e6:49:53:e6:97:72:d0:b0:
5d:ae:d2:00:aa:4f:86:e6:fd:79:10:a8:21:0d:4f:
c2:0e:53:e4:59:be:3a:d7:8c:b2:58:31:f1:1f:71:
4f:b3:9a:f2:e0:1a:96:dc:c7:09:66:42:d8:55:1a:
79:64:e0:45:c4:11:c5:db:00:df:6f:bc:99:b6:14:
19:53:26:f5:e2:66:b7:f5:cc:e1:05:56:22:cd:90:
64:ad:a0:7a:a0:ca:e8:49:17:94:b1:bd:3a:57:d3:
8a:a1:21:f7:fa:9b:b6:d5:b4:d6:d9:cf:fc:57:76:
65:b5:9b:55:25:c7:e2:ca:46:a8:73:10:9d:61:96:
fd:1b:e9:1b:d0:fc:e0:ef:e2:de:8c:4f:a1:03:4a:
9e:8a:3b:ab:0e:66:ee:5b:1c:24:5d:31:7a:7c:6b:
2c:06:30:35:ca:36:5f:81:4b:65:e2:5a:a1:e3:ba:
29:7f:44:b8:a6:68:14:b4:2b:31:2a:fd:18:c1:e4:
c6:68:61:54:93:9d:02:b3:8f:fc:a4:64:5d:66:37:
4f:76:fb:9a:db:ee:e7:46:67:14:22:98:1e:78:9c:
90:ca:b2:2b:ae:68:8f:55:61:06:fa:fd:78:da:82:
9c:48:c4:6e:16:71:96:9a:11:c7:0e:dc:6d:8e:20:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:DD:A4:ED:FE:74:2A:4C:DA:9F:6E:F0:CF:76:35:D4:80:3E:4A
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:4a:1f:06:89:65:db:8c:10:4f:bf:25:a8:e7:77:55:72:
39:4e:08:ad:d0:ca:8a:0d:9f:48:d1:03:ec:9f:dd:75:07:af:
e3:80:51:06:1f:66:f2:eb:d9:7b:1c:6b:e1:a8:16:f8:45:36:
bc:32:47:79:ad:bc:05:bb:78:5f:9e:6e:33:b6:c5:dc:24:61:
7d:d4:56:70:56:0c:a6:02:cf:6d:40:d4:15:8e:60:12:2c:93:
72:fe:ee:66:19:ba:33:d8:b4:87:6d:13:4b:e1:ff:7d:90:45:
0b:8d:eb:0a:40:d0:b0:3a:c1:51:26:8b:92:75:d8:57:22:54:
65:41:7d:5f:60:a7:36:62:13:72:93:b3:59:19:c0:78:69:41:
ea:71:c6:f5:b5:ff:47:8e:58:85:c5:7e:aa:65:44:f8:37:3a:
b2:20:6e:81:1a:11:2c:ea:f1:73:a9:40:07:20:c2:ba:c4:de:
ad:c8:b3:d4:bc:82:37:ad:ff:05:d9:66:74:f3:c1:fd:42:19:
40:c5:e2:5d:c7:7d:53:27:82:47:9f:59:88:46:11:01:08:90:
1a:04:ac:ef:f8:e5:0b:6c:55:53:9b:02:e6:54:e3:7e:e0:e5:
75:ff:46:a5:ae:91:e7:e8:66:dc:90:e1:33:f5:a4:d0:6a:cb:
da:c8:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:54:42 2026 by rpki-client