Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: eLwdw9+sujpNWv1tZ35lh5YZ+YdvdgrSCHH3+A6wa4s=
Subject key identifier: 1E:B6:D9:97:05:11:63:29:2E:D4:97:B4:9A:7B:2B:AC:1D:39:5A:0D
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019D2704CBC15CEA77FD317A47688791FC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0B3C
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: S4SWpKw+1s+W3xNqSm1tNGBhU37PpktCEk7dk1SJips=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cb:c1:5c:ea:77:fd:31:7a:47:68:87:91:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=1eb6d997051163292ed497b49a7b2bac1d395a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:1f:9f:28:ac:96:74:5d:16:1a:04:fd:ff:
bb:8b:b8:b8:1c:1a:d5:f0:9e:54:57:6d:6f:e9:7f:
10:5f:b1:f8:c6:b3:0e:98:b3:1a:91:a1:70:48:f8:
df:e8:dc:21:f8:af:e3:33:84:73:2d:8a:3f:b9:30:
94:ec:28:80:c6:81:34:9f:51:07:60:d8:2c:11:ad:
4e:fd:73:35:e5:65:63:75:d9:3e:a6:bc:24:6b:76:
d9:28:4c:f2:b1:1d:61:e2:eb:6d:61:21:a0:86:21:
b7:1b:ee:52:ff:24:fb:85:90:6a:20:43:ca:86:47:
a9:36:13:32:7c:65:0f:91:af:7c:f7:a2:f0:49:5d:
34:de:ca:ac:e8:74:f8:48:53:5c:d7:a9:d3:32:3b:
cc:47:ae:07:e9:4c:f6:a7:e4:7b:e4:72:f6:88:e3:
ce:a9:47:d4:89:a9:88:4e:4d:ae:1f:f4:d9:3e:21:
4b:a1:9f:1b:05:ea:70:99:35:ee:fc:83:44:45:bd:
7c:60:a5:1d:83:f2:58:ce:e1:d3:2a:24:44:6a:c6:
25:64:dd:1b:3f:2e:f7:e7:cb:b8:64:b0:70:31:f2:
2b:d2:b9:c6:9f:3e:c9:fe:62:6f:68:6a:97:48:6d:
23:7c:8f:e2:49:78:99:d1:83:0a:9b:ca:13:04:37:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:D9:97:05:11:63:29:2E:D4:97:B4:9A:7B:2B:AC:1D:39:5A:0D
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4c:58:6e:2a:68:d1:f3:70:84:6a:dc:61:f1:ed:82:66:c5:
47:51:da:38:b4:ee:26:06:ea:1c:42:2b:46:9f:3a:46:53:15:
f7:07:45:c9:21:c7:5c:1d:8f:79:1b:d6:3d:ab:3b:9d:4a:01:
8e:80:68:78:ff:45:9b:d6:94:7b:0a:58:a2:32:e1:af:33:98:
b9:0d:69:6a:91:66:ef:c0:13:86:8e:06:3d:6f:a2:0c:00:0e:
73:61:6e:35:38:1c:d1:39:5a:0d:16:5f:78:17:1e:5b:39:89:
77:88:cd:c2:53:58:cb:41:05:20:4b:6d:05:13:d7:25:ca:00:
d1:2e:7e:98:71:01:0c:3d:f9:8f:1a:c8:10:33:36:cb:5f:c2:
48:a4:29:1a:be:95:97:5e:9b:99:31:c7:dd:a6:69:47:0e:db:
9a:1d:e1:ee:ac:10:cf:aa:dd:fe:c9:e9:2e:8f:4d:ff:ba:0a:
1e:ea:94:31:39:9c:88:4e:48:f8:08:c6:3a:14:0a:da:11:11:
7a:32:15:b1:a0:57:e9:43:2f:5b:e5:5f:c5:62:2d:da:8c:14:
b6:60:83:35:64:86:89:c5:bc:1e:15:e6:b2:5c:bd:e1:db:1a:
48:74:2e:2e:3e:50:4b:78:f0:46:12:d9:bc:77:5b:58:b4:85:
ac:48:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:01 2026 by rpki-client