Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: RWQFAcQW9taywd58guxafgRTwz1elCUdyWEyH2xkifc=
Subject key identifier: C6:53:9F:02:C1:14:4F:D2:02:C5:52:CD:69:2F:90:E2:2B:82:0B:33
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019DCCAAE3B0BD6F57CAAC0DE148D3DBE026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 02:00:44 +0000
Manifest this update: Mon 27 Apr 2026 02:00:44 +0000
Manifest next update: Tue 28 Apr 2026 02:00:44 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: zpig201P5JqC/95sdTgWVXUpw28uiwuHGvKsSK65fLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:e3:b0:bd:6f:57:ca:ac:0d:e1:48:d3:db:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Apr 27 02:00:44 2026 GMT
Not After : Apr 28 02:00:44 2026 GMT
Subject: CN=c6539f02c1144fd202c552cd692f90e22b820b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:af:18:ba:39:35:3f:44:7b:84:82:7c:4f:
7f:6c:7c:6f:10:dd:36:03:0b:15:a1:c1:3c:d8:10:
2b:26:cc:fc:8e:cb:91:cd:5f:da:d0:22:a6:23:20:
39:cd:a0:4a:ec:d4:44:72:ef:29:b3:fc:36:4c:a2:
d0:7c:94:c2:9b:dc:3a:6c:43:b4:26:1a:c7:b5:83:
ef:54:13:d0:ff:d9:5e:58:30:53:17:e3:38:d4:8b:
b0:6b:a8:0e:80:c7:ce:49:63:de:8c:41:97:09:0b:
d0:83:90:00:66:11:74:1c:29:dd:52:c7:1c:4c:4b:
fd:f2:c8:ce:cd:c5:7c:77:6a:2b:f9:a7:47:65:73:
e8:37:ee:75:85:38:c4:d9:0d:2b:cc:c2:18:99:cc:
9f:d0:dc:98:92:3e:be:24:69:c2:13:f7:d1:d5:36:
cc:93:de:29:be:a1:37:fa:68:3a:0c:31:5b:78:a8:
de:16:4d:f0:ec:d2:d1:13:75:e4:06:38:46:42:c0:
fc:76:c7:10:c3:6f:03:5c:4a:25:b4:22:fd:72:90:
4c:3a:25:f0:7d:5e:6a:1f:49:40:ac:e5:5c:f2:75:
34:21:df:62:af:77:88:a5:63:1a:61:11:23:2a:0e:
ad:d8:e4:29:60:ff:e7:4c:bb:f0:17:ce:aa:d2:06:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:9F:02:C1:14:4F:D2:02:C5:52:CD:69:2F:90:E2:2B:82:0B:33
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b1:d6:06:d4:99:46:0d:50:93:14:61:8e:0e:63:16:ef:5b:
1d:78:89:6f:13:0f:2f:c5:09:dc:9e:08:f0:ad:3f:3d:e1:3a:
54:5b:f3:6f:06:b3:53:b2:27:47:99:9d:f3:e3:2f:72:53:91:
b6:ea:09:9d:66:e6:b3:d3:f3:38:b7:ea:9a:98:56:2c:28:a5:
cb:07:79:b2:03:34:60:d8:41:7b:ae:d0:a7:b9:50:15:3a:6d:
00:7f:56:bf:94:92:ad:0d:09:7a:09:20:44:70:3d:05:12:37:
38:cb:c7:29:f0:7f:23:c0:75:39:1a:8b:d1:23:92:27:d2:6f:
06:55:b3:1c:07:9f:dc:3a:be:11:93:0b:a6:88:8d:c5:97:12:
cd:18:b1:a5:bb:ad:90:54:58:d1:18:26:f9:19:cf:97:a5:ef:
2a:ac:86:fc:bc:b6:9a:01:05:b8:2d:6b:a3:92:bd:48:fe:a2:
27:5c:cd:5a:6c:0f:b0:45:39:30:4c:dc:b3:f4:ba:c4:c1:f6:
69:65:4b:34:77:27:68:87:ff:98:8c:76:35:a6:97:f5:c4:0b:
14:48:1d:2c:93:fb:3f:bd:d7:93:af:8f:d5:14:0c:43:90:1b:
05:2c:df:e3:b8:d7:cf:9b:dd:80:ef:ce:8c:14:22:36:28:cd:
ee:81:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:21:34 2026 by rpki-client