Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: uTJGIjzf8sRo8oBcwF/yaGjTHQniL4nh9wodzNfMM44=
Subject key identifier: BD:05:8D:AA:C7:07:91:D1:94:B0:D4:DD:9F:05:41:06:96:C3:FE:0B
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 019D29CE812172CB8EB8AD30149494E8571A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 08DA
Signing time: Thu 26 Mar 2026 11:01:32 +0000
Manifest this update: Thu 26 Mar 2026 11:01:32 +0000
Manifest next update: Fri 27 Mar 2026 11:01:32 +0000
Files and hashes: 1: MOaflZrDMd7wGNURntzbZLdXUmA.roa (hash: jhSZsx+nbyUc0xlTzJSRe1x2K+X/3793enEacjp2ebc=)
2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: VHmabVcWLhr12pgLq/9Ty/i7o1YPbrH+df9L2mXWnG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:81:21:72:cb:8e:b8:ad:30:14:94:94:e8:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Mar 26 11:01:32 2026 GMT
Not After : Mar 27 11:01:32 2026 GMT
Subject: CN=bd058daac70791d194b0d4dd9f05410696c3fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:40:7f:32:d9:88:c8:81:a1:89:9e:37:f3:
50:5f:95:14:0f:7b:88:6d:c5:e0:8d:f0:28:10:80:
4e:66:2e:a8:ad:7c:43:9a:42:0f:b6:cb:07:b5:41:
47:c7:da:c0:6f:e3:b6:90:a5:d3:48:d8:4e:6d:45:
4c:a8:45:10:18:3d:f3:b4:2f:fe:4f:ce:dc:17:78:
4c:32:3b:0e:52:03:26:7e:bf:f5:dd:c1:eb:55:42:
05:9e:ca:8c:43:75:74:84:8c:4b:70:49:47:d5:c4:
7c:74:73:74:15:fe:33:44:08:5c:66:38:99:57:97:
b2:c6:cd:2c:89:9e:0e:54:43:8b:8a:18:f7:1a:fa:
6a:db:16:a1:75:e1:9c:8f:d0:07:a2:d9:bd:fc:ec:
b4:d4:ad:3f:a5:2d:0b:8c:bc:e1:7f:99:47:a7:e5:
1c:71:93:e3:d0:ee:fe:9f:a7:be:ca:80:70:d6:22:
33:90:cd:21:c2:c3:58:58:36:69:bf:88:24:b7:4c:
42:93:0b:77:65:5e:ba:5e:95:eb:b3:d8:7d:c0:d1:
b6:9c:68:60:18:04:b9:25:0d:10:8e:3b:9b:90:c1:
5c:4f:71:09:d6:cd:8e:be:f1:6a:7c:23:a7:a9:9e:
05:6c:20:d4:2b:52:52:d8:22:4b:96:f8:25:f2:61:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:8D:AA:C7:07:91:D1:94:B0:D4:DD:9F:05:41:06:96:C3:FE:0B
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:15:96:f1:3a:ee:a6:85:85:41:f6:9b:ad:09:55:cf:05:
fc:99:ac:cb:a8:4b:ce:7a:77:52:a2:31:63:96:50:63:40:17:
5b:a7:8e:8b:29:a1:66:c3:6e:99:24:63:22:39:df:f0:4e:64:
f5:a7:23:6d:ff:6e:c4:ec:0e:af:1a:1b:09:a3:36:ad:28:11:
ea:cd:84:18:45:23:29:97:19:06:fe:4d:f5:07:8d:84:d7:d1:
4a:b5:77:32:34:eb:87:cb:0b:44:d6:4b:9d:6a:71:51:cd:87:
7e:4f:9e:a4:b6:54:44:9c:b8:ce:8d:e7:a3:fe:2c:38:de:00:
7f:25:3c:e8:eb:74:4a:0b:0c:03:6e:9a:dd:46:f2:aa:df:7a:
93:e3:8a:de:08:40:10:7b:49:b3:2d:e2:6f:18:31:6f:08:e3:
66:57:26:ee:90:08:bb:96:74:34:67:85:9f:99:77:e4:21:64:
ec:46:ad:f9:38:40:ca:51:df:5f:b5:f2:a6:8e:20:f3:18:89:
53:ed:31:30:1e:35:27:7b:de:d8:89:fd:e0:90:3b:5c:4b:69:
8c:d4:a1:1f:93:3a:5f:5a:d1:b2:9e:7e:dc:66:c8:c4:d3:c9:
90:6f:32:af:f1:5a:ea:95:36:4f:89:0c:f1:00:b6:aa:3e:66:
b1:24:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:29 2026 by rpki-client