Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: 148Zs1lOfeRTua2/UfBYl4EIyd/0nqo6JiWEyFs7pi4=
Subject key identifier: 86:0D:D8:8E:2B:65:32:7F:81:14:5A:04:5D:5B:75:6A:97:43:C5:94
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019DCC7473374B3F77987BBBB2F6141074C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 14D2
Signing time: Mon 27 Apr 2026 01:01:16 +0000
Manifest this update: Mon 27 Apr 2026 01:01:16 +0000
Manifest next update: Tue 28 Apr 2026 01:01:16 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 3VSUo+3dpT+3nOW0ZzOF0Dm7SXSgnz/E1jAJjy6wL/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:73:37:4b:3f:77:98:7b:bb:b2:f6:14:10:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Apr 27 01:01:16 2026 GMT
Not After : Apr 28 01:01:16 2026 GMT
Subject: CN=860dd88e2b65327f81145a045d5b756a9743c594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:dd:87:d9:98:44:4b:61:9c:ee:f6:8a:0f:
02:1c:7f:f4:7e:28:f4:0a:dc:48:e1:37:95:98:a4:
e9:88:7d:d2:25:84:bd:96:b5:93:87:dd:b6:66:18:
e7:24:6f:6a:83:5e:cd:8f:20:30:3a:5e:31:0c:a1:
49:78:ef:ed:71:cb:c5:1e:bf:38:12:ab:3e:3e:35:
23:0c:07:27:b6:66:1e:36:de:bd:8b:fe:f7:d3:21:
ad:9a:aa:f9:57:3f:e5:ed:39:5e:54:55:5d:09:9f:
f3:18:91:ca:d3:56:5d:98:b5:69:98:31:51:8c:f0:
5b:cd:1a:3a:50:d7:8f:b0:0c:b9:c4:1a:6e:87:b4:
53:69:0e:1e:6c:71:ff:8c:09:f5:fd:c3:7c:f5:e4:
8e:86:32:22:45:9f:10:1e:b7:a6:c6:c1:4c:0a:67:
85:6a:92:3a:32:30:75:ab:15:b1:bc:07:c5:05:35:
be:c3:48:4d:53:67:b4:79:f7:ac:63:79:88:02:43:
7c:54:76:02:e2:e7:00:e0:c5:49:c2:17:e0:ae:3b:
66:88:ef:23:6c:b2:a7:c0:09:aa:2a:e9:1a:86:ce:
a3:b8:ab:35:e6:4d:27:d8:e8:2f:22:76:68:21:96:
22:1e:46:83:c5:a2:d0:c0:56:b3:bd:0e:ae:b1:f7:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:D8:8E:2B:65:32:7F:81:14:5A:04:5D:5B:75:6A:97:43:C5:94
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:5d:bd:65:17:f6:6c:41:ea:c9:5c:eb:ff:4b:d8:b8:32:
32:c9:98:9b:19:1b:a1:0f:de:7d:a6:9c:48:1c:4f:62:28:15:
9d:59:11:58:59:f8:80:82:9d:f4:0f:91:65:79:93:96:a8:5a:
74:65:09:a3:ad:8d:d4:b8:fb:d7:f4:d2:62:0a:80:b9:2b:cf:
78:24:86:a4:58:5a:02:26:72:36:86:52:34:db:71:2b:7c:10:
68:da:99:50:77:31:97:6f:00:c7:6c:51:77:64:a5:64:85:ff:
da:d0:12:9f:56:dd:99:ac:93:8d:40:83:38:1b:f0:b4:9c:3f:
a7:ce:50:72:7b:ca:9a:ad:06:3e:ff:7f:36:f5:0a:cd:01:08:
3e:cf:ba:c1:0a:b5:48:04:a3:dc:8f:d5:a0:5f:82:7a:97:5f:
9f:1a:42:da:fd:9c:f6:b3:bc:04:b7:6f:38:73:2f:72:00:ee:
66:62:07:da:dd:b8:ec:73:ac:ab:66:10:d9:da:6c:98:33:c4:
c9:0f:97:44:42:03:e8:a9:dc:5b:f4:c2:92:0b:d9:22:b8:00:
f1:e8:0d:3c:da:1b:3f:28:70:28:ef:b2:3b:17:89:ba:11:1b:
f1:67:66:db:d2:5e:1f:ac:9d:ff:cb:80:57:46:9d:ba:91:4c:
b7:b7:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:11:37 2026 by rpki-client