Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: RVfmJvEWXJSOAPx5aDd0jcG0ztpyViPpatnjR/prKzY=
Subject key identifier: C9:34:76:AF:A3:06:F6:51:A3:C1:B0:CB:5D:24:04:65:6D:5A:E7:2C
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019E205AA1AF5EB2DD7A680739E6F49F073D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1611
Signing time: Wed 13 May 2026 08:01:10 +0000
Manifest this update: Wed 13 May 2026 08:01:10 +0000
Manifest next update: Thu 14 May 2026 08:01:10 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: eIH4X3jFiL6aeaEOD1vC/KHDX1f/Xa8c71ZORVDFBtE=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:a1:af:5e:b2:dd:7a:68:07:39:e6:f4:9f:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: May 13 08:01:10 2026 GMT
Not After : May 14 08:01:10 2026 GMT
Subject: CN=c93476afa306f651a3c1b0cb5d2404656d5ae72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:88:d8:b0:9b:7a:be:3c:a6:db:0a:bf:8d:
e4:88:23:d0:39:84:41:c2:e3:aa:85:21:e5:0b:45:
8e:d7:ab:a8:61:1f:63:76:fa:7a:c9:ca:2c:ad:3a:
5d:29:0f:26:4d:7d:0a:1e:8f:df:c7:76:68:2a:e0:
b8:b2:94:52:b9:2e:16:a6:06:d9:c2:97:59:62:74:
46:e6:e5:8d:26:1e:9b:af:73:42:d6:a7:6b:7f:31:
39:6d:5f:b6:57:06:23:8e:9d:7f:16:d2:b6:d1:94:
63:da:35:af:51:d0:48:84:47:f2:83:39:67:52:ca:
73:c0:75:28:5f:d7:57:88:d3:56:e8:39:38:36:d9:
07:03:ec:78:6c:06:b9:61:68:de:6d:00:eb:3b:d6:
cd:ef:e1:c5:a9:04:7a:e2:01:d6:93:c2:76:45:ed:
6e:6e:1d:ec:d2:97:47:cb:ca:d5:80:14:ed:dd:00:
c1:82:b1:3c:af:33:17:05:30:bc:33:cd:2b:39:6d:
54:a8:20:f5:7d:1e:8a:74:f7:62:d4:af:87:98:5f:
8d:86:50:f4:fd:d7:ac:a7:45:76:ae:70:5e:9b:bd:
3f:be:42:26:d0:de:69:97:3f:2b:a5:90:5a:f1:e1:
21:e9:ac:22:24:91:53:b5:4b:a7:12:63:c0:4d:a5:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:76:AF:A3:06:F6:51:A3:C1:B0:CB:5D:24:04:65:6D:5A:E7:2C
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:f1:89:54:03:37:14:d8:f5:ae:a7:0c:00:13:3d:5b:9c:
bb:2f:d5:7b:48:17:36:8e:e6:e7:ea:68:9c:90:1d:3c:9e:6a:
78:68:b1:85:b1:52:ec:6e:95:8c:a4:97:eb:de:bc:62:32:a2:
89:4f:eb:ce:51:6a:2f:17:9f:e3:30:9e:c5:dc:b9:fd:ee:5e:
88:4a:2f:a3:6c:c5:46:6a:92:64:85:84:e5:53:b3:4d:2e:86:
e1:97:39:42:8c:29:4c:8e:04:4d:e4:b7:c2:79:8a:b4:2b:7f:
13:f3:57:cc:dc:af:44:bf:94:48:63:3a:ae:05:71:c6:cf:0d:
17:67:8f:f8:c3:6c:19:35:ab:87:9c:7c:07:24:16:b7:d5:1f:
c6:37:50:89:11:16:61:0b:5f:0f:29:b9:13:4a:4d:96:fb:fd:
36:83:bd:a4:02:9f:04:83:53:2e:ab:d4:fc:87:fb:66:0f:72:
93:3b:79:d5:a9:b1:f3:95:36:aa:23:2a:99:3e:de:b6:0e:fe:
45:67:db:ff:34:5c:a7:59:fa:5c:02:5d:2e:70:26:71:3d:7f:
fa:2f:df:3e:08:5a:f6:7b:25:5b:fb:f5:c0:f2:d4:2d:11:ac:
9f:9b:8e:2f:4f:3a:24:83:36:ae:69:25:ba:58:9b:f5:70:95:
22:1e:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:53 2026 by rpki-client