Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: mEIu2W8uXomc0wygaHDVDA952vr/EVN5jrO8XhD6FmI=
Subject key identifier: 02:4C:C8:0A:28:60:8D:F1:13:A9:E3:82:B2:EB:27:4D:78:A2:79:3F
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019E2023CAB458400C6E1369198E2615779C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0BBD
Signing time: Wed 13 May 2026 07:01:17 +0000
Manifest this update: Wed 13 May 2026 07:01:17 +0000
Manifest next update: Thu 14 May 2026 07:01:17 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: XyQgYAO15lKCNsx5j0YxjzvtCcGeDpvR2vTyFUIjQU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:ca:b4:58:40:0c:6e:13:69:19:8e:26:15:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: May 13 07:01:17 2026 GMT
Not After : May 14 07:01:17 2026 GMT
Subject: CN=024cc80a28608df113a9e382b2eb274d78a2793f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:f6:fd:ae:a0:ab:a9:47:2a:8f:2d:f9:d8:
0b:42:03:ad:e1:07:be:f5:15:41:14:57:b9:77:7d:
89:50:3f:4a:44:d3:e7:70:55:4b:e3:be:41:0c:e6:
7a:3f:58:e0:b6:d3:6b:4b:3c:38:61:89:04:de:af:
54:b5:64:5c:d8:70:6d:ff:ca:40:73:bc:0f:06:a7:
0f:96:1c:df:1d:c6:12:66:5a:18:3f:4b:01:71:45:
72:60:ca:79:f3:4c:ca:dd:fc:68:2d:49:0a:13:8c:
5e:4a:8e:8b:d8:74:d2:0a:17:83:20:a9:76:45:3c:
11:81:a1:cb:35:51:75:1b:91:6a:89:bb:44:3f:ce:
ea:a4:ea:1d:ef:a0:31:a9:eb:f2:df:5e:57:35:79:
64:06:da:81:82:59:99:aa:e4:71:4d:81:69:c3:95:
05:dc:34:ae:e0:c8:f3:39:4d:7e:25:2d:85:5e:c6:
54:10:64:ef:a4:31:d6:6c:cb:f7:ba:e4:b2:b1:c3:
48:b8:2a:d0:2b:3d:7b:65:06:20:3f:11:be:b9:f2:
7c:66:8b:b9:80:0c:a5:cd:ae:a0:cb:b2:0a:a8:bb:
8d:d7:e2:b7:41:a7:b2:0d:52:be:5f:ce:1e:be:76:
8c:ce:b4:d8:e4:41:2b:cd:59:2b:1f:51:27:a7:a3:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:C8:0A:28:60:8D:F1:13:A9:E3:82:B2:EB:27:4D:78:A2:79:3F
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:54:ac:48:dc:ba:10:f7:13:24:ba:ef:9f:12:59:71:94:
ac:4d:e9:41:98:b8:26:b8:50:30:14:59:8c:32:9b:21:57:50:
71:8c:7d:cd:49:8e:b7:30:34:69:5c:c2:7a:88:08:e8:36:5f:
a0:b8:9d:53:f8:da:6e:30:59:d0:20:d6:30:7c:5b:23:bf:fe:
b8:b8:9a:ea:0b:51:01:34:fe:45:e6:46:47:aa:99:26:e4:44:
43:42:02:2a:a2:a7:fa:f7:a7:5d:ac:35:05:7c:1d:50:1f:c0:
83:bd:3f:74:56:44:6a:7f:05:8f:95:15:5e:ce:23:52:c0:3c:
5f:fb:9d:b7:50:6b:e0:55:60:f0:7d:69:5b:fa:8f:a7:47:e4:
51:a0:76:d2:ac:24:7a:cd:ee:55:92:2c:ba:e4:9a:bb:86:9c:
ee:9f:aa:fb:67:ab:c2:d3:f1:1f:c5:8b:6c:85:50:39:2e:ba:
48:8c:cf:8d:58:2e:c9:0e:dd:49:85:b8:54:9f:c9:30:dd:86:
c1:dc:8a:18:3a:cd:88:02:8b:05:1b:af:9e:cd:51:9a:16:8d:
cc:01:23:90:92:d1:fe:94:5b:58:1b:10:8a:b4:95:65:ac:d5:
15:3f:4e:e3:2b:fd:41:6c:50:b2:fa:8f:3c:51:43:23:2d:58:
d7:9b:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:08 2026 by rpki-client