Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: yfdfrBLW2Ouh0KpzV/gQYnwDftjBw8BPT9h5npx37v4=
Subject key identifier: 92:1A:29:B4:CE:39:43:68:68:53:CA:14:D7:7D:0E:9F:A2:4D:4B:58
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019D27E010913E9F8EE71D4CF91B750CC0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0C7B
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=)
2: H180kdffd3luCWDv6OkwCGcrOfc.roa (hash: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ=)
3: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: Dwhg5g63Qg8Rn5A96iwuj7TCR7wR9Et5JHyN4Y3QGsk=)
5: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (hash: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s=)
6: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:10:91:3e:9f:8e:e7:1d:4c:f9:1b:75:0c:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=921a29b4ce3943686853ca14d77d0e9fa24d4b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:76:1f:06:23:5d:b0:eb:a6:ed:1c:9a:68:
73:8e:10:26:47:6c:21:18:62:e0:6b:74:a7:5a:23:
08:ad:30:ec:a9:28:64:9d:52:28:4c:20:1f:cc:29:
70:4e:3f:62:13:1c:8e:00:e5:e0:ad:f8:84:09:85:
bc:7a:8e:01:8c:f8:a6:c0:d3:e1:da:1c:6a:70:de:
7c:f1:e1:d0:98:0a:e0:45:14:ba:00:3d:b3:6c:09:
2b:aa:aa:d1:ae:63:67:d6:18:50:ca:8e:22:7c:a2:
e8:10:ec:e8:6a:3e:2f:d1:23:13:99:cc:8c:ab:ee:
32:9e:f4:95:35:a4:c7:4d:3c:26:3d:41:45:3c:59:
51:e1:4e:38:94:03:ef:37:01:80:0a:16:37:49:ca:
fb:89:8b:f2:5f:a4:b4:0c:29:27:77:3f:4d:34:c6:
5a:b4:53:2b:f5:72:d5:e6:bf:0e:19:27:1a:e4:2b:
1b:a9:91:5e:dc:c8:e2:6e:f0:db:8d:79:38:da:c3:
25:f0:c8:f6:b4:f3:6b:15:f9:90:01:e2:7a:f1:11:
ad:06:da:62:13:34:71:40:61:c4:e6:89:79:e5:a0:
dc:47:38:68:b3:47:bc:ae:75:91:c5:ea:2a:d7:5f:
f6:a4:7a:44:6c:75:6d:86:65:28:b8:55:16:0a:e5:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:29:B4:CE:39:43:68:68:53:CA:14:D7:7D:0E:9F:A2:4D:4B:58
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:45:59:1d:33:02:65:8f:3f:c2:02:28:25:46:84:63:57:
ed:ae:02:a5:73:81:3f:e3:7f:dd:45:38:f5:8c:a6:92:89:7a:
4c:3a:e1:6b:80:9b:ee:62:4c:08:58:68:b2:90:01:ec:bd:4e:
85:7b:8d:fc:9d:35:61:7f:5a:fc:e2:e5:e8:c9:ac:2b:22:1c:
df:da:8d:ae:19:37:45:d7:79:90:42:f1:7e:cd:a8:09:53:07:
d9:5f:9c:25:07:2f:25:0e:a9:40:74:a1:71:e5:92:60:85:04:
a1:db:0c:4b:18:7c:ad:d0:fc:e0:56:75:32:47:44:18:b5:5f:
f6:c8:79:1d:0b:64:28:4a:74:04:68:40:84:08:cd:ed:6c:c1:
49:7c:9b:40:00:ef:4c:28:47:8d:7a:6d:d7:c2:cc:d3:82:cd:
82:c1:1f:43:3f:a6:10:25:1a:a7:ee:bf:cb:f3:fd:87:51:a2:
b1:3d:a5:30:86:03:fe:34:04:95:0a:6c:93:37:ad:84:7b:97:
c7:83:b5:3e:58:df:10:bd:4b:4a:89:6b:d3:22:22:2d:70:30:
90:0f:4b:d3:1a:23:f0:08:6a:b0:13:f5:27:f2:67:65:da:7a:
69:67:dc:2c:81:54:ca:31:1a:92:62:9d:3c:ce:f0:9b:01:c4:
1f:9d:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:12 2026 by rpki-client