Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: qGjVyz9qiTjK0jXwS5AzPIlXXKG1S3BE++uW6WkXh3o=
Subject key identifier: BF:33:B7:95:D8:17:4E:46:0C:33:79:A5:65:6B:81:BC:7C:6C:48:19
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019DD019EDAE34667C48F82B592C1A9FA4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 01E4
Signing time: Mon 27 Apr 2026 18:00:53 +0000
Manifest this update: Mon 27 Apr 2026 18:00:53 +0000
Manifest next update: Tue 28 Apr 2026 18:00:53 +0000
Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: BAqBhRpyEG8CCqDhloYuWtcqpQTSyRoE421c9FYb+x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:ed:ae:34:66:7c:48:f8:2b:59:2c:1a:9f:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: Apr 27 18:00:53 2026 GMT
Not After : Apr 28 18:00:53 2026 GMT
Subject: CN=bf33b795d8174e460c3379a5656b81bc7c6c4819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:95:6b:ed:31:c3:f6:6b:09:21:6f:8e:24:
64:5b:af:9a:ec:57:2a:80:a2:44:85:46:d8:2e:a5:
fd:ca:df:b7:bd:04:20:2f:19:63:50:ca:23:89:a4:
3c:b0:20:8f:d0:e0:2a:27:8a:6e:5b:02:08:a0:33:
ab:e9:2d:ad:5b:97:0c:9f:2e:ef:49:71:f7:33:4e:
4c:de:9b:01:22:34:73:eb:bc:31:15:2c:4c:28:e3:
7e:9d:b5:db:d2:46:5c:c3:82:d0:40:a4:d4:fa:49:
09:67:c4:e3:6b:5a:fc:19:5a:ea:01:58:0c:e9:ad:
fa:48:c6:b3:58:81:c0:04:50:e3:36:80:bd:58:99:
9f:35:7d:a3:8f:1c:f5:93:d0:70:2f:b3:ae:06:5c:
5f:27:2f:65:3e:77:ff:01:f1:43:4c:c7:fd:88:9c:
b8:7d:03:44:80:fb:53:90:01:3d:7e:35:40:07:e3:
05:7b:ed:66:5c:c7:16:cc:f6:14:a2:ec:1f:a1:fe:
cd:64:ce:a2:76:7f:1a:9a:2b:ca:46:e2:90:f4:65:
1d:45:ce:a2:99:2d:b5:c7:df:f6:57:fb:29:67:7d:
97:c9:5c:6b:96:dc:c2:99:98:fd:66:cd:55:2c:82:
d0:79:55:87:87:ac:bd:38:a6:9c:58:fa:e9:88:0b:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:B7:95:D8:17:4E:46:0C:33:79:A5:65:6B:81:BC:7C:6C:48:19
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:71:e6:9c:f1:74:a9:5e:96:54:46:16:6c:1b:24:10:81:
79:c4:df:26:45:3a:18:e8:c6:da:7d:ea:8c:ce:b1:f2:45:ca:
62:5a:88:05:e3:99:30:ba:6e:59:98:fa:30:3d:65:ec:8b:7f:
d4:2e:6d:ac:32:a6:21:bb:9d:53:e1:8e:7c:8c:e7:63:13:dd:
05:10:72:25:5b:fb:14:35:e7:46:f9:4f:ba:fe:6d:85:24:95:
1b:ed:a4:67:92:0b:ef:41:d5:6b:59:6a:04:9b:36:0c:79:69:
4b:eb:68:62:93:90:68:2d:1f:29:a4:54:3b:b1:ff:0b:da:98:
3b:ed:db:54:1c:0a:61:f6:ef:45:29:2c:fa:26:82:f8:3c:e8:
01:dd:8a:b4:30:2c:e2:86:3e:aa:5b:bd:3d:ee:ef:6d:33:c1:
4e:bc:d7:7b:c2:bb:d8:d7:d7:38:c9:ad:3f:3b:e9:59:34:f9:
13:cd:07:b6:cb:c8:3b:f8:d2:38:f7:ef:2d:c6:84:00:1b:40:
36:b0:e6:6a:49:9f:91:e8:d8:76:98:c3:c2:a9:5e:3d:8a:84:
4c:1f:4b:91:21:34:e9:88:57:76:e6:f2:5d:ff:5f:74:38:5f:
48:c0:c6:05:4b:0e:e6:b2:bc:dc:f1:b7:91:d8:92:eb:db:c7:
71:46:f7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:54 2026 by rpki-client