Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: FNbbDXxi8d2EyNud4+YDFZTkr1TJl7b2PDRTshD/uMY=
Subject key identifier: 43:23:16:75:1F:CB:13:74:91:08:77:D1:3C:98:6F:44:85:A9:94:0F
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019F9323B6C977C807B538D9427DF877871C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 16D1
Signing time: Fri 24 Jul 2026 08:00:18 +0000
Manifest this update: Fri 24 Jul 2026 08:00:18 +0000
Manifest next update: Sat 25 Jul 2026 08:00:18 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: 7WUNEWmW2t45wPspwIQ/c7b3ePCJ4v8INfgVylrP5Cw=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b6:c9:77:c8:07:b5:38:d9:42:7d:f8:77:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jul 24 08:00:18 2026 GMT
Not After : Jul 25 08:00:18 2026 GMT
Subject: CN=432316751fcb1374910877d13c986f4485a9940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:36:ba:12:a8:41:bb:b8:33:a3:7d:22:6e:
2a:18:b3:80:2d:02:0c:33:f3:24:d0:e3:9f:5d:85:
f2:78:83:e8:18:b7:e5:8c:61:ff:92:52:d0:cd:c2:
3d:17:74:1f:e5:fe:a2:f2:65:b2:43:c9:5b:e2:e8:
f5:19:20:b8:e2:fc:40:c8:d7:11:c5:1c:0e:3f:4c:
b7:07:12:bf:70:22:ca:1f:45:b5:ed:34:e0:e3:21:
26:2c:eb:c3:66:69:a5:89:48:f5:55:b4:b8:bd:96:
ee:e4:07:c4:5e:4a:92:aa:6b:1e:0d:cf:a3:56:e0:
a0:c4:71:1a:4e:65:33:70:ff:1b:1c:a4:c9:d1:fa:
ca:6c:fa:11:03:39:ea:6c:29:6e:17:d0:24:14:c6:
4c:3e:cd:e2:5c:b9:e6:ec:9f:e5:88:cd:95:46:8e:
2b:ea:02:c1:c7:db:04:b0:b0:a9:42:a3:bc:93:6f:
22:fe:32:ca:93:b6:42:4b:28:47:be:a5:eb:8b:21:
b6:8f:33:c2:62:10:af:94:69:f6:29:e5:6f:4b:aa:
c5:57:bf:c1:d8:77:d7:7a:ef:d4:8a:c4:cf:55:7c:
4a:c5:e7:1c:2e:17:e5:5c:f2:24:a4:a6:a1:b0:63:
70:62:2f:70:1d:7a:11:72:e5:ef:3c:e7:bd:64:d2:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:16:75:1F:CB:13:74:91:08:77:D1:3C:98:6F:44:85:A9:94:0F
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:5d:5b:90:b2:bc:08:dd:7c:dd:56:c5:06:6d:3a:92:81:
d5:25:37:36:1d:81:f2:74:af:d3:81:52:53:38:1c:ae:25:dd:
e8:b4:ee:51:b0:ae:f0:44:be:f6:3a:ec:57:04:21:33:4b:ac:
8c:61:84:08:ca:f4:21:fd:ce:75:35:22:7c:68:3b:75:5f:01:
f8:02:bb:ea:39:ce:18:c1:ed:2a:4b:04:be:f6:8c:65:8e:10:
3c:3d:d3:71:d1:b2:fb:4f:b3:21:e6:77:4a:31:86:fb:70:bf:
b7:33:ab:e4:34:4d:6a:40:35:2b:46:17:c9:00:88:7f:80:21:
db:10:1a:97:4a:05:c8:86:0e:0f:4f:10:64:b9:9f:d2:76:9f:
8c:b4:6b:cf:d9:c3:78:90:5c:12:ed:d1:f5:82:ed:e0:ac:a7:
69:5c:a2:a0:6c:f0:36:a6:3a:de:53:34:90:eb:96:1d:8b:f4:
63:7b:8b:c1:5f:f0:26:2e:40:7b:55:13:06:27:ab:c7:15:79:
0e:df:1b:bc:1a:0c:53:41:43:bd:2d:a5:ca:04:3e:9b:e6:b0:
fc:8c:dc:d6:db:39:3d:55:99:36:e1:81:d4:4f:4d:11:c0:8a:
ca:eb:88:d5:09:ff:7c:63:23:3e:28:38:ee:28:7a:0b:bc:70:
dd:61:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:28 2026 by rpki-client