Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: z9hn+2NWqF/DyTvesgppC/ZiJ5Mfm7BWpU2IfsiSU9Q=
Subject key identifier: 11:2F:69:AD:CD:83:FA:5E:C9:BD:DF:F1:AB:C9:48:44:25:B1:77:61
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 019D2A047F42C5FD1190A5F655D26C41884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 1739
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: Ego0nl6qnumbw-BU5_acGm_TtM8.roa (hash: 7c/b4633erpOytsAafi0TuyOCeY/FHIybW7GxJJgywE=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: ewXyEZOEDM7nfip8pCZtK0mwbI5UNC1KOlBKR1WDhGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7f:42:c5:fd:11:90:a5:f6:55:d2:6c:41:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=112f69adcd83fa5ec9bddff1abc9484425b17761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:ee:88:b1:23:2e:4d:d4:30:33:69:26:05:
21:f5:f1:44:d4:38:71:be:b9:86:fa:dd:bc:92:2a:
3d:ae:6c:48:8d:2a:6a:77:4e:1e:40:6d:72:a2:1e:
89:1f:da:e3:8d:6e:7f:54:c2:fd:ed:57:83:1c:3d:
51:89:5d:88:21:ac:4e:ee:18:8b:64:95:a6:64:4a:
c6:6b:f4:bf:3a:7a:08:23:7b:af:0d:14:51:a4:2e:
f4:cd:5c:49:b2:63:57:ef:6d:5a:dc:2f:61:d0:ac:
64:3a:50:8e:5e:54:b4:d0:17:75:51:c8:b6:fc:87:
56:40:05:9d:c6:d8:c4:17:61:f0:54:75:c2:7c:af:
06:cb:5a:5b:ad:46:c3:74:32:32:02:4e:36:d9:62:
c5:6c:bd:2b:cf:01:6b:b5:ad:df:aa:d0:e7:28:95:
cf:09:2c:a2:f7:50:69:34:6c:f5:b4:ec:b5:fd:e3:
71:8d:73:a0:ec:a6:a6:84:c8:33:80:b9:7f:1c:df:
7d:89:d3:17:cd:53:30:69:c2:ba:e8:73:89:4e:b5:
ca:26:51:08:b2:4f:35:e7:43:89:af:94:e6:ed:7d:
8e:8a:53:50:20:6f:a0:98:61:e7:56:ca:9d:ff:0c:
40:56:d5:64:e0:49:01:07:59:21:c5:f8:d6:1c:20:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:69:AD:CD:83:FA:5E:C9:BD:DF:F1:AB:C9:48:44:25:B1:77:61
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:99:d0:b5:44:28:1a:67:1b:79:d5:bb:fa:af:88:be:93:dd:
35:0f:fe:3d:cf:9a:4d:6e:81:60:56:2d:30:6a:e7:dc:87:76:
7b:78:e3:64:25:8e:56:5e:20:c3:47:ed:84:2f:c8:70:e9:46:
42:1b:a8:07:24:da:b6:f2:80:98:43:d5:fd:79:d5:90:de:38:
73:35:fb:c3:8a:dd:9d:7f:8c:77:bd:c7:18:31:ac:4c:5e:ba:
5a:42:c8:c1:5d:ad:06:21:41:24:de:09:dc:d6:ee:a2:14:93:
0b:f1:1e:9b:bc:6d:95:14:8f:1c:25:41:39:47:cb:9a:b4:6f:
3b:38:5d:39:87:2f:e7:a8:08:0e:59:6a:49:02:c4:cb:d2:3a:
12:b7:0c:03:82:f9:21:ca:82:8d:2c:d3:d1:aa:04:ad:0d:8e:
7a:ef:74:64:32:68:12:9e:16:d6:08:78:50:12:02:7b:87:74:
e0:46:43:65:ab:83:55:a1:62:6c:d1:d2:c1:0a:f8:bd:8a:e4:
2f:74:54:28:bb:11:7f:c5:4a:0d:f5:26:e5:64:cb:dc:8b:b7:
3b:ca:5e:5a:7f:1e:a3:c4:39:68:02:e0:aa:27:35:70:2a:2b:
69:90:08:10:27:eb:da:48:dd:b2:01:7f:67:0c:28:da:98:4a:
a3:39:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:34 2026 by rpki-client