Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: mqzYi+SeIQ8vhVVcPd74R6x7jU1GNqGldJoNPFv9BXM=
Subject key identifier: F3:82:34:0C:EE:B5:DC:B2:01:D2:BB:A6:04:BB:46:52:9D:2B:B8:52
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019D273AE849F957B806DE3EBF53FE5D940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1590
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: kNAjvgU0JqG3wwp7ln5kanNw7mtjhNjaZPO+9+nkB7A=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e8:49:f9:57:b8:06:de:3e:bf:53:fe:5d:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=f382340ceeb5dcb201d2bba604bb46529d2bb852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:4b:e3:6a:e1:1c:89:d0:d6:71:df:8f:29:
75:9d:47:ef:e8:cf:fb:4c:6a:4c:7b:97:92:c7:8f:
8b:97:7e:6a:e7:1c:0b:a7:40:07:f8:19:ed:57:f5:
39:2b:a0:fc:a7:30:ac:7b:55:11:0a:84:28:f6:20:
f9:77:09:73:49:21:44:2e:3f:14:dc:15:e6:f2:1a:
ef:eb:90:22:1f:04:e1:fd:70:1b:a8:2c:85:c4:7a:
d7:cb:03:b3:d3:97:50:1e:9c:e7:d5:3c:59:0d:3e:
2a:e0:41:6d:b3:4b:98:08:22:9e:5a:46:c8:14:77:
4d:e4:bb:a0:16:c1:eb:e6:8f:89:76:39:73:43:c9:
bc:af:f0:48:67:bf:8c:a4:d2:62:45:1a:d9:35:ab:
a5:b9:6e:6a:41:7c:3b:d4:63:b0:c5:31:a0:ee:e9:
a7:72:cd:66:31:3f:37:3d:f7:94:d3:ae:77:fd:f3:
ad:c0:b8:c4:ca:f0:27:4a:d8:10:31:07:a1:aa:ba:
b0:30:b6:4f:b7:78:2f:e2:a5:a0:d8:6f:ef:4d:36:
1a:0a:4b:2d:31:e9:88:a4:02:d9:ff:1e:44:2a:3c:
7e:fc:a2:7f:93:76:84:96:0f:b4:33:6a:c9:d2:b7:
ff:2c:02:2b:07:69:e0:35:32:88:b4:18:ad:4e:32:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:34:0C:EE:B5:DC:B2:01:D2:BB:A6:04:BB:46:52:9D:2B:B8:52
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:c4:eb:5a:09:b3:d0:f7:c2:99:53:b5:e2:b0:48:5b:f5:
ff:5d:b4:e0:22:2f:bb:09:f4:44:70:98:af:c4:78:fb:fe:21:
71:bd:aa:68:9d:71:89:23:45:25:13:4f:18:88:27:34:ee:6f:
1c:e2:73:60:7a:8d:a0:bf:14:0e:41:e9:e2:26:ee:ac:88:7b:
94:92:c0:9f:65:33:c7:3f:ff:35:a4:22:ce:59:cf:32:f2:08:
49:4a:24:d8:23:a5:26:c1:1e:91:2a:6a:25:82:69:f1:43:94:
9d:b3:14:12:59:9e:28:cc:d8:10:06:c0:3a:67:0e:30:6b:7c:
ec:bd:26:8d:7e:58:65:1a:8f:a2:f5:1c:62:fe:de:c5:1d:5b:
40:13:76:87:cf:d8:13:40:eb:5a:da:2a:53:36:99:af:35:92:
30:98:9e:fb:bb:14:95:6d:6a:ce:a9:fc:65:45:cd:7e:96:a3:
d9:1f:12:74:f4:1e:17:e4:4f:e7:de:80:ce:8e:d8:ed:2b:f4:
45:ac:5e:3f:c9:e0:97:29:ed:45:e6:5f:ce:07:c8:09:84:7a:
fd:f5:24:79:c4:70:9b:06:cc:c1:20:56:1a:06:bb:d0:34:81:
a7:f8:c2:08:ad:9f:54:2a:c8:e7:73:81:65:0b:ed:fb:e1:37:
58:8a:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:20 2026 by rpki-client