Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: evmB70ZHFgzjeUphLrB4QmR1ORBYVlijP5SNniYGMG8=
Subject key identifier: 82:9A:C3:48:A6:4F:8F:91:5D:B1:72:EE:2B:4A:68:6D:A5:AC:3C:C6
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019E1E35E3CB7F17826519433A328941012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 17DF
Signing time: Tue 12 May 2026 22:01:48 +0000
Manifest this update: Tue 12 May 2026 22:01:48 +0000
Manifest next update: Wed 13 May 2026 22:01:48 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: Occ0JARW6AcTnafZUMPaPBTMEYdufPb0GVUeFaphcaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:e3:cb:7f:17:82:65:19:43:3a:32:89:41:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: May 12 22:01:48 2026 GMT
Not After : May 13 22:01:48 2026 GMT
Subject: CN=829ac348a64f8f915db172ee2b4a686da5ac3cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:07:72:63:0f:0b:9e:83:10:0b:33:d1:50:
c9:c7:b4:68:93:f0:f2:5e:63:b4:94:a4:12:c8:c4:
34:27:46:ed:e3:4f:e6:e1:2a:85:b2:bf:97:4e:e5:
20:1f:9d:e9:96:e5:ab:73:f8:a7:ae:8c:52:05:49:
57:e5:5c:af:21:53:4f:55:e1:32:bd:11:db:cb:bf:
94:8e:07:c4:e1:03:c8:dd:07:09:d9:43:03:4b:21:
13:1f:79:68:2e:73:8b:bb:18:17:f3:52:b0:ee:68:
b5:37:ee:a7:ab:46:1f:f5:f9:e9:c2:8f:e9:63:98:
19:6f:f6:0b:54:df:3c:57:0e:76:31:ae:8d:09:1d:
7f:e8:34:aa:e4:07:07:62:6b:bc:d2:b9:e1:44:fc:
d0:da:31:d3:c9:18:12:65:97:9c:fe:28:21:ad:23:
1a:e0:eb:fa:cb:2f:6b:ad:3c:cd:e3:8f:20:43:ed:
d7:57:b5:f9:59:8e:30:68:20:f0:a8:f2:4d:fe:9d:
5e:79:d5:22:13:40:d8:ce:e0:c9:8d:37:e2:02:a9:
2b:78:82:8c:63:2c:e7:7f:82:cb:ce:b2:91:6e:9b:
69:26:44:00:cb:0c:36:f7:33:e2:09:0d:f8:52:ab:
9d:10:fd:fb:2d:8d:b7:41:01:63:9b:31:e7:bd:15:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:C3:48:A6:4F:8F:91:5D:B1:72:EE:2B:4A:68:6D:A5:AC:3C:C6
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e8:9b:bc:9a:a4:3c:52:18:6c:ce:52:c8:22:e0:f9:9f:21:
20:4a:93:87:2f:76:9c:06:ae:57:97:a6:b1:e0:85:14:f3:8f:
1a:93:97:9f:c2:d0:4e:c6:43:18:40:c8:36:8f:1e:e2:73:ff:
41:9d:aa:9f:b2:6b:9a:2e:fd:bc:ab:50:a2:65:fd:22:c8:c3:
4b:69:24:73:f1:91:0e:4a:88:a6:b0:58:c1:f0:92:c3:7f:95:
9d:20:e0:fe:59:a4:16:c5:b9:81:b2:27:24:b6:ad:ca:16:e3:
cf:04:99:77:71:bc:1d:86:38:e6:96:34:f3:db:b2:c1:35:7f:
7e:67:9e:e2:2a:2e:53:81:83:1c:12:91:e5:3e:b4:e8:5b:58:
ef:52:56:5b:5a:08:8a:91:0e:63:8a:d0:70:8a:45:7f:53:1e:
84:99:51:81:60:13:55:68:2f:51:e2:47:68:ff:6c:d1:c8:10:
b9:e5:19:ef:6b:2c:01:9e:42:dd:da:6d:27:c0:ab:ef:6d:67:
10:91:cc:7c:6f:32:66:43:84:9f:03:18:e4:10:70:84:b8:98:
9a:32:96:9e:35:67:7a:65:22:e8:d9:92:b1:4e:4d:cf:19:ab:
a7:a6:0f:6c:58:7c:25:62:fa:e6:0f:ab:af:2b:0e:e8:b9:d2:
9c:1a:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:54 2026 by rpki-client