Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: 8Gyxm4z6QAkAdkvOsh5WXK7qZD46wphxDfdqiu1wK70=
Subject key identifier: 49:C1:88:92:3F:19:03:BA:AF:95:39:68:5D:A8:8D:2A:6C:5B:FD:20
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019D265FF557322C9937C016A96373D9DFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 11E3
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: IoRmzU6dJRUSR3WoCH2aqfcmUKW+xDPqS6+ApU++ghk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f5:57:32:2c:99:37:c0:16:a9:63:73:d9:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=49c188923f1903baaf9539685da88d2a6c5bfd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:dc:81:76:c3:89:a3:07:8d:21:ab:17:5b:
f2:1b:ce:e1:f3:50:a9:51:38:f3:78:32:d4:ae:62:
fc:a0:f1:78:cb:7c:c2:b3:d7:75:2b:9c:28:86:55:
74:7d:9e:7a:38:a5:e3:6d:32:d7:0d:b3:a1:06:cb:
dd:cb:5b:ee:33:ac:c5:82:1f:4f:50:e3:14:32:09:
65:71:1f:f7:b1:96:f7:bb:dd:a9:5d:a2:ea:b7:99:
57:26:2d:a6:95:f4:ad:61:92:59:8c:5c:d3:72:52:
89:c0:94:88:06:07:a0:37:a4:6f:8a:9e:2b:c5:ce:
59:15:f8:71:cd:41:68:ac:75:8f:1f:ff:fc:73:5f:
52:43:f7:f8:dc:85:6c:83:a4:64:2a:fd:7c:25:66:
cc:ad:10:73:e4:54:72:6c:8c:c2:54:71:20:d7:62:
75:04:99:71:5e:b9:01:4e:0a:ff:42:a7:bd:ff:58:
92:37:08:b6:d4:3a:68:21:78:43:63:59:3b:7f:89:
f7:25:7b:74:e7:1d:2e:5d:c6:55:00:f5:d4:b9:e6:
ed:19:e9:9e:a2:3f:5e:17:d7:4c:ad:75:5c:af:ff:
86:9f:bd:5b:ec:2d:d8:b8:ad:f5:dc:e2:1d:07:68:
fe:13:52:1b:06:73:fb:c4:ba:da:dd:b6:aa:b0:a2:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:88:92:3F:19:03:BA:AF:95:39:68:5D:A8:8D:2A:6C:5B:FD:20
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:03:78:dd:4f:07:b6:e1:58:8a:58:a4:b4:c4:e3:16:e5:0d:
c8:1b:2a:21:c3:ad:28:34:66:9f:15:14:9c:6d:55:44:a2:cf:
3b:f7:e1:8d:8f:e0:a2:cd:d1:26:85:3b:70:bf:23:c5:26:db:
ff:4b:44:d6:3e:da:a1:22:87:9c:de:c1:6e:e8:27:94:cd:3c:
03:b4:00:1b:cf:db:48:ea:24:a5:6b:58:6c:6f:e5:07:4f:7f:
3d:41:85:95:e9:ef:bf:31:25:b3:80:84:79:43:5e:17:a6:dd:
cc:32:fa:15:0b:f1:16:c8:c3:d2:57:83:90:19:d7:a4:3c:46:
d3:70:30:db:50:eb:e4:63:c7:71:b7:eb:89:e1:41:56:2c:68:
43:d5:90:38:42:63:9b:dd:67:5e:9a:87:cc:51:d1:da:f4:f0:
fa:31:08:4c:cb:f2:62:90:84:4a:57:03:59:f0:92:d5:e0:40:
64:e6:41:a6:24:7b:a2:43:0e:26:d7:82:bf:82:39:9c:55:f6:
40:6e:cf:be:58:e4:3d:83:f1:e8:af:14:a9:3b:9a:19:8d:74:
c2:fe:c4:1e:61:6e:92:83:d4:d9:d9:bc:19:62:80:23:0d:62:
5a:04:d1:4e:03:62:25:c9:12:74:0e:d2:c4:6e:e8:27:18:88:
04:9d:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client