Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: 4tEoj1C6+OgFX/Welafk+t+smam7AY467QX0ZzV0ah4=
Subject key identifier: 26:47:94:53:E9:E4:78:0F:13:19:55:B0:51:3F:09:21:CA:8E:4B:E4
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019F927F4BB539EBF0C7E8B1F41ECA330860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0AC5
Signing time: Fri 24 Jul 2026 05:00:43 +0000
Manifest this update: Fri 24 Jul 2026 05:00:43 +0000
Manifest next update: Sat 25 Jul 2026 05:00:43 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: UocFX8MbDy6Voy8xayEHjOJh//c1IkKwVnvK6JDmMvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:4b:b5:39:eb:f0:c7:e8:b1:f4:1e:ca:33:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jul 24 05:00:43 2026 GMT
Not After : Jul 25 05:00:43 2026 GMT
Subject: CN=26479453e9e4780f131955b0513f0921ca8e4be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:61:ac:87:ae:ea:60:8c:66:46:4d:f0:f3:
0c:85:e8:25:99:55:5f:b9:59:46:62:b6:59:c5:f7:
36:f5:86:2d:de:c2:4e:79:ad:b0:02:a5:c9:1b:2e:
2d:86:45:70:21:23:bb:a4:3f:18:3b:32:ac:39:78:
14:e0:b4:1f:b0:6b:64:f4:65:70:6d:d5:f8:97:1e:
35:e4:fb:a1:26:a6:18:06:a0:e6:05:5e:d8:6f:a0:
cc:b3:a0:c5:91:90:78:52:7d:d1:08:3c:da:71:e4:
84:1d:d5:7c:11:19:5a:e2:c2:89:2b:63:ec:29:bb:
24:49:1b:64:f0:40:79:e8:00:5d:a3:da:50:a2:a3:
7c:b6:51:0f:98:44:11:62:47:14:4a:8d:66:85:ac:
9c:2c:60:f6:85:9c:aa:8d:8a:f0:a9:6c:7e:77:34:
e0:4e:9a:ff:b2:a3:d3:2e:51:02:9a:7c:83:59:6c:
81:7a:b0:22:13:1f:dc:02:70:b8:7a:7c:7d:48:fb:
d4:ee:45:62:f2:9d:aa:60:45:80:96:18:18:8e:25:
25:fe:87:41:99:76:32:2e:2a:b7:48:1b:8d:ad:0d:
07:b5:a3:86:2a:2e:c8:73:75:69:2a:de:fa:db:21:
ae:d6:db:24:8d:17:74:06:be:71:6e:d2:fd:43:87:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:94:53:E9:E4:78:0F:13:19:55:B0:51:3F:09:21:CA:8E:4B:E4
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:93:82:98:4e:48:93:96:26:82:66:9b:e0:cd:8e:a5:65:
98:a4:e7:e0:b9:57:b5:48:ac:61:d1:af:59:44:3f:2a:97:90:
d0:82:7a:6c:8f:d6:7d:1d:8e:c0:6a:66:ed:0d:bc:fb:20:43:
ab:fc:70:d2:b2:92:df:32:21:bc:23:e7:b2:c5:78:b8:92:a7:
28:95:d2:db:6f:66:ba:e6:68:ed:bf:11:4d:b3:a7:0e:99:d6:
17:70:80:04:5a:5d:dc:c0:54:ec:b6:a0:f8:5e:91:be:25:47:
e8:51:5f:13:05:a1:1a:49:bd:43:c2:fb:ad:f1:fd:78:eb:91:
fc:3c:4f:d5:9d:06:f2:26:86:65:a2:ae:ab:ff:a7:f4:ff:42:
0a:3f:50:5d:71:78:14:9d:ac:f0:9d:b3:c7:08:36:90:a0:74:
8a:5a:a4:da:fc:82:db:ec:27:01:76:b2:d8:6e:57:4d:5f:f2:
1b:37:0f:c8:0b:47:3b:36:f8:11:2e:7e:9a:7e:aa:a4:e6:df:
02:65:20:1b:ca:45:8d:3b:c1:b7:31:54:fc:66:53:52:ee:da:
5b:1b:d4:1c:36:23:e2:cb:1b:d9:42:e1:f7:ed:e2:8d:11:eb:
f9:1d:4b:98:d4:7d:ba:59:06:fa:69:b6:68:dc:21:73:b9:0d:
b6:3f:dc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf0u1Oevwx+ix9B7KMwhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjYwNzI0MDUwMDQzWhcNMjYwNzI1MDUwMDQzWjAzMTEwLwYDVQQD
EygyNjQ3OTQ1M2U5ZTQ3ODBmMTMxOTU1YjA1MTNmMDkyMWNhOGU0YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxZhrIeu6mCMZkZN8PMMheglmVVf
uVlGYrZZxfc29YYt3sJOea2wAqXJGy4thkVwISO7pD8YOzKsOXgU4LQfsGtk9GVw
bdX4lx415PuhJqYYBqDmBV7Yb6DMs6DFkZB4Un3RCDzaceSEHdV8ERla4sKJK2Ps
KbskSRtk8EB56ABdo9pQoqN8tlEPmEQRYkcUSo1mhaycLGD2hZyqjYrwqWx+dzTg
Tpr/sqPTLlECmnyDWWyBerAiEx/cAnC4enx9SPvU7kVi8p2qYEWAlhgYjiUl/odB
mXYyLiq3SBuNrQ0HtaOGKi7Ic3VpKt762yGu1tskjRd0Br5xbtL9Q4ca2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZHlFPp5HgPExlVsFE/CSHKjkvkMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiKTgphO
SJOWJoJmm+DNjqVlmKTn4LlXtUisYdGvWUQ/KpeQ0IJ6bI/WfR2OwGpm7Q28+yBD
q/xw0rKS3zIhvCPnssV4uJKnKJXS229muuZo7b8RTbOnDpnWF3CABFpd3MBU7Lag
+F6RviVH6FFfEwWhGkm9Q8L7rfH9eOuR/DxP1Z0G8iaGZaKuq/+n9P9CCj9QXXF4
FJ2s8J2zxwg2kKB0ilqk2vyC2+wnAXay2G5XTV/yGzcPyAtHOzb4ES5+mn6qpObf
AmUgG8pFjTvBtzFU/GZTUu7aWxvUHDYj4ssb2ULh9+3ijRHr+R1LmNR9ulkG+mm2
aNwhc7kNtj/ceQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:02 2026 by rpki-client