Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: i55GQALF7pK4/HUpCOhur8N5LXm0zC0TXO2XHDAIcac=
Subject key identifier: 64:6E:DF:C4:43:15:57:F1:E2:18:12:47:08:54:A7:C7:B8:C3:DC:FB
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019F951278C74F6497FE0B52512317119FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 16D2
Signing time: Fri 24 Jul 2026 17:00:43 +0000
Manifest this update: Fri 24 Jul 2026 17:00:43 +0000
Manifest next update: Sat 25 Jul 2026 17:00:43 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: CCAttHsRH5lOVVntRfAMca8CV9tRRwY5QS2SjCy2kYo=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:78:c7:4f:64:97:fe:0b:52:51:23:17:11:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jul 24 17:00:43 2026 GMT
Not After : Jul 25 17:00:43 2026 GMT
Subject: CN=646edfc4431557f1e21812470854a7c7b8c3dcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:ed:5d:3c:42:93:33:a1:2e:74:d8:2d:58:
e9:40:49:cc:05:ae:a2:6b:3a:de:59:ca:d7:8d:f7:
9e:43:68:21:f4:dd:8c:73:96:dd:4d:40:16:a7:c3:
e6:2e:f9:77:1f:83:e4:3d:e4:5d:fa:2d:9f:2d:98:
55:64:cd:68:5a:18:cd:58:98:da:06:8f:64:22:5b:
1f:39:29:0c:25:72:64:35:3e:c4:01:53:e9:aa:83:
50:13:24:75:be:e4:42:b3:5f:49:80:cb:d0:b3:0a:
51:3e:ad:27:bc:79:c9:78:10:12:3c:cf:98:3e:e1:
62:f5:b0:e4:e4:fb:01:f3:24:b4:71:72:e8:b3:b2:
49:ba:7d:f7:5c:cd:56:9d:4e:90:48:a0:fd:0e:9b:
54:9f:61:65:41:3b:ae:f6:f9:fa:3c:43:ce:11:38:
24:78:86:4a:fa:55:64:40:7c:f5:43:26:c8:ad:3a:
34:87:8d:d6:8b:0e:de:1e:4b:06:32:29:18:65:4a:
ad:33:ae:0c:15:78:79:cb:5e:31:40:fa:ca:95:de:
52:bb:00:d6:c3:ed:db:83:5a:30:79:86:c2:48:9e:
8e:45:1a:d3:94:ae:62:e3:6e:63:fa:76:cf:db:f5:
b5:59:25:07:33:6a:3a:6d:11:5e:3c:80:9e:5d:72:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:DF:C4:43:15:57:F1:E2:18:12:47:08:54:A7:C7:B8:C3:DC:FB
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f7:87:17:42:ab:30:ce:bd:2e:3d:1c:f1:9f:8f:8b:3a:39:
14:71:7c:32:fc:fe:b5:12:0f:af:f2:04:0e:be:94:38:f8:03:
6f:5f:76:48:ed:b4:c1:92:1c:0b:ac:17:d9:76:eb:95:b3:1f:
fb:d1:be:08:6a:2f:8d:f2:25:38:8a:a9:5d:df:6d:e6:9e:f5:
5c:bb:66:c5:03:42:f9:fc:00:0a:e3:12:ec:eb:f0:37:95:c0:
aa:1b:1a:7c:43:f0:c7:1a:e2:57:c0:54:a9:96:24:fa:d7:b5:
76:d3:1b:9c:fe:b5:56:25:67:64:50:6a:0f:bf:ab:3b:a5:4d:
3a:ce:ab:c0:c3:13:56:92:f7:a6:96:34:e0:26:d4:7e:47:f7:
04:6a:4e:df:49:62:d5:90:ec:6f:7c:a9:a7:99:fc:06:a4:3f:
bc:f1:41:2f:8a:c7:2c:0d:04:e8:d6:29:48:6e:07:5a:67:fe:
cb:31:3e:71:19:49:96:3a:7a:9d:7d:a3:d7:51:b8:ea:ec:52:
ee:26:4d:30:a3:55:cc:9f:6a:d0:b6:60:db:8d:7a:c5:66:da:
e6:d4:02:50:ae:37:5a:00:6c:21:8a:44:8a:03:01:cb:cd:ea:
76:87:fc:85:dd:ce:93:ff:11:dc:34:88:a3:1e:ee:27:43:2c:
9a:e1:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:14 2026 by rpki-client