Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: Tj3D40dE/tlTWDtn13R6Ay1Sup98dmAaLYQPwijFLng=
Subject key identifier: 7A:4D:06:85:13:6C:16:8B:AC:B2:5B:78:5C:BE:30:36:F2:68:06:AE
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019D329A8D54E9CB09B2056DC69DBD1D012A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1765
Signing time: Sat 28 Mar 2026 04:01:22 +0000
Manifest this update: Sat 28 Mar 2026 04:01:22 +0000
Manifest next update: Sun 29 Mar 2026 04:01:22 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: iqCMyqUNgeHkLa6UtjU2dm6Lmqn70TOd/ZOmD7EEmXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:8d:54:e9:cb:09:b2:05:6d:c6:9d:bd:1d:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Mar 28 04:01:22 2026 GMT
Not After : Mar 29 04:01:22 2026 GMT
Subject: CN=7a4d0685136c168bacb25b785cbe3036f26806ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:fe:78:ed:75:7b:1c:9f:aa:4a:4e:d1:d8:
06:d0:c5:0f:94:60:9a:91:f6:74:bc:44:38:40:e2:
0d:1e:ba:c3:58:d2:60:b0:bc:1f:d2:7f:cf:0d:cc:
82:85:51:b1:3e:fb:c7:5a:a7:28:5d:e5:2b:a1:ef:
eb:71:75:b2:fd:ca:cb:0f:4d:71:9a:73:c0:50:2a:
ba:10:e8:a4:20:ca:e9:72:2a:a6:66:e4:13:6d:76:
b6:1e:7e:c2:1a:cd:f7:d7:1d:52:98:79:03:f7:2e:
cd:01:5d:db:c0:12:23:15:15:20:64:e5:29:69:0c:
af:49:89:2e:9c:40:90:80:a8:22:c0:06:5a:79:50:
17:60:e1:29:dc:1b:b4:18:ce:36:c8:32:af:8e:0d:
fa:c0:3b:d0:b5:7e:4d:b5:0a:ef:96:f6:46:67:24:
ec:b3:8d:c6:44:c8:9f:9c:95:74:cd:63:6e:5a:b2:
56:bf:e1:9f:a3:e9:ca:91:d6:f6:83:b7:b2:f1:e9:
95:f7:a6:d9:1b:e4:61:23:37:46:5f:3d:bf:f4:66:
f3:45:e3:5d:dd:d6:bf:b6:bb:2c:8d:5f:da:11:77:
de:9b:b9:e7:b4:2c:a5:66:d0:f8:1f:7e:95:8e:e0:
50:27:2b:79:a5:e8:6b:93:c4:a7:c1:14:93:d7:4a:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:06:85:13:6C:16:8B:AC:B2:5B:78:5C:BE:30:36:F2:68:06:AE
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c7:b1:46:67:ff:3e:a9:8f:a6:ee:fe:fd:8f:57:9c:04:d2:
a1:17:6f:8b:96:9a:2f:26:67:7f:fd:c0:26:ab:51:0e:93:c3:
0e:99:53:fe:a0:8e:49:84:59:51:9c:49:f8:80:0c:cf:d4:17:
86:25:df:81:f3:a0:52:b7:b7:84:37:2e:f9:52:bf:76:58:fb:
97:19:f1:b8:c7:ad:43:7b:5b:4d:33:96:ef:d9:1f:db:41:03:
b1:1c:9f:05:22:7d:b3:17:7b:41:e1:d0:00:af:da:13:cb:8c:
fe:6f:54:00:dd:cb:08:ac:1a:fb:69:5f:bb:3f:46:da:2b:33:
3c:96:b2:6d:59:96:80:7f:f5:7e:63:4d:f2:49:73:9c:f3:51:
de:bc:1d:d6:80:15:f5:2f:42:64:27:eb:4b:a2:a1:de:05:82:
a9:44:bf:be:27:50:9d:19:34:e7:d0:7b:3d:26:b1:e7:f6:f1:
e7:3a:21:a7:46:b4:32:45:e0:2c:89:85:4e:60:15:9d:1a:a6:
e3:88:ec:91:49:28:4f:0f:fc:7b:1d:42:25:cf:fb:fb:d2:52:
4d:f5:cd:1d:14:ed:83:49:c7:42:73:6b:f2:8e:49:f5:e6:21:
f9:5a:94:78:2a:4e:60:6f:d8:1b:2e:43:31:88:35:d0:9c:70:
07:11:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:27 2026 by rpki-client