Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: oQJUp4wkpZmFSeRUi4m1xEhx/ivS9BDMIVXAnLaWRaY=
Subject key identifier: 54:9E:B4:67:F3:50:65:07:9E:AE:D6:23:2C:92:98:C0:82:2B:EA:99
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 019D2929A07BEA67C975BB07F36363059189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 17EF
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: QkiwDdoqGneFxhueC1tYh17gEHY.roa (hash: S+EvCH9iwtFs/o9t8OSVI9PK9t1NWkiQ5QvCjj3oEWA=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: E1uP0sdKah/PCRADRksqc1FzC/isXIbUiNDQecA+0mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a0:7b:ea:67:c9:75:bb:07:f3:63:63:05:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=549eb467f35065079eaed6232c9298c0822bea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:c9:13:5b:1e:86:6e:8d:7d:cb:02:5b:ea:
af:f6:f3:5e:20:d7:c6:6f:34:f7:4b:37:06:4b:51:
51:c7:a0:87:ac:52:ca:17:39:24:74:14:ab:e3:32:
00:da:bc:48:e8:38:93:f6:b4:18:bb:35:bb:58:73:
f5:82:ec:3e:98:01:32:81:19:d4:fd:ea:17:eb:18:
39:98:d5:38:27:d6:0b:dc:77:03:fe:64:56:9e:99:
7e:23:9e:b9:6b:e6:11:d6:e0:ef:2e:c7:01:42:bd:
57:2d:59:a2:19:de:8e:c0:a8:00:cb:d3:81:f9:4d:
35:9f:4f:02:ce:cc:d0:de:29:40:8f:36:69:04:fe:
74:c1:9c:f7:0d:35:3e:af:4b:ed:0a:de:bf:83:45:
06:04:5d:4f:1a:af:da:33:ae:c6:af:df:b6:52:df:
65:7c:6b:04:ca:6a:e2:77:36:e7:da:83:fc:0d:9c:
2f:f2:17:85:76:e4:d6:fb:19:7f:a2:25:68:76:58:
cc:40:04:ab:0b:0f:9f:ea:08:c0:5c:85:86:93:5c:
ee:6f:03:79:c8:d8:b2:dd:f1:35:51:bd:99:e5:ae:
1e:1c:94:e9:8b:77:da:92:45:7e:72:d1:fd:c5:8b:
ba:af:96:ac:f6:aa:c9:e7:ad:68:75:f5:c5:33:66:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:B4:67:F3:50:65:07:9E:AE:D6:23:2C:92:98:C0:82:2B:EA:99
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:eb:83:38:44:70:9f:ee:81:e5:2e:a4:76:ec:bb:a9:e8:
0d:59:3f:eb:ec:c9:c7:9a:5c:e1:05:51:b6:35:06:6c:ca:bd:
6c:a4:5f:56:0d:8a:d4:17:51:10:b2:36:0a:a5:02:37:0b:d1:
4a:e9:c3:2e:03:40:07:a5:d4:4d:b5:dd:f3:81:43:92:a7:f8:
80:00:e6:36:9c:b4:82:76:cc:d0:dd:41:61:83:33:e8:2a:17:
81:43:80:98:1c:62:cb:a6:c4:9b:64:58:99:6b:49:29:23:78:
ea:9e:ba:05:29:53:f4:15:78:9c:8c:67:2b:66:38:ee:11:30:
06:98:96:e9:f2:71:fd:67:5a:27:96:ba:e8:b4:21:42:22:c8:
c2:45:23:39:ed:d0:49:0f:22:fe:9e:a7:23:9e:a8:a5:5c:90:
d1:b1:5f:65:01:d7:55:b5:f3:ea:75:e1:6d:44:38:a6:32:8e:
90:f5:5b:62:e7:d0:38:bd:01:49:89:ed:e8:e4:5a:7e:88:7c:
50:e8:b7:78:71:e5:91:bb:19:3d:0c:b5:72:5f:e8:c4:6c:ad:
e7:18:19:28:a2:f3:de:1c:1f:be:7f:d7:6e:ef:da:ea:81:73:
92:68:c0:d1:28:58:91:a9:34:e3:5f:51:c3:85:51:74:02:e6:
72:f3:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:37 2026 by rpki-client