Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: RgJPagLZxHG9xp7gr06ZZGyFs3664lCgpDJHrawjpag=
Subject key identifier: BC:14:A2:D9:32:8F:56:F4:15:D0:C8:DE:40:0F:EB:30:5B:78:51:CC
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019D2884AAC5534FDD3B38B23965CE3AD56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0985
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: a7bsY53NN6xxT+T8b4kMOeSHoy3bJDLNMYXBY2XSmEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:aa:c5:53:4f:dd:3b:38:b2:39:65:ce:3a:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=bc14a2d9328f56f415d0c8de400feb305b7851cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:6d:8f:dc:7d:cd:04:a7:02:e9:86:c3:14:
54:ee:d8:be:3c:43:04:aa:c8:08:c3:81:9f:89:40:
17:e3:13:6f:de:1a:f5:5b:0c:3a:d8:ff:50:b4:cc:
72:95:77:2f:13:1a:91:81:57:64:69:2d:72:35:d8:
8b:11:cd:cc:f6:2d:b6:94:e5:93:65:07:36:c6:d5:
eb:2d:fc:33:62:18:b2:b5:a5:5f:e4:4c:6b:95:04:
4f:ce:ea:06:a0:96:c0:7c:c7:9d:ec:90:a4:cf:f3:
c6:0e:35:4b:e8:30:e1:f9:65:ff:a7:ce:50:03:c0:
8f:0a:b6:ae:0a:75:78:95:d5:2c:3e:eb:a3:15:92:
c2:42:22:65:75:1c:91:6a:63:55:b8:8a:d5:f6:4b:
ac:8e:4a:ca:35:98:35:95:d9:cc:05:fd:9d:67:0b:
9f:71:a2:97:b7:db:69:be:fd:73:8c:89:d5:a5:35:
5b:bd:b6:87:c5:4b:38:ef:9e:c2:25:86:0c:9a:50:
8f:ef:d6:84:8a:9d:5a:b7:70:c7:de:e2:54:34:b6:
55:94:bc:d7:94:7c:26:35:bb:c1:d3:37:2c:55:74:
28:3c:4d:ab:ed:9f:3c:62:f2:43:14:f9:52:7a:e1:
db:e3:e6:8a:9f:53:19:1b:f1:a4:2b:d9:22:67:ec:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:A2:D9:32:8F:56:F4:15:D0:C8:DE:40:0F:EB:30:5B:78:51:CC
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:14:d2:07:ce:dc:d2:5a:0b:4d:30:1c:20:6b:a3:30:27:b1:
d8:d3:66:af:6b:4c:ab:74:6d:e1:a0:4e:60:be:3e:73:d8:5a:
a0:b8:bd:0e:3a:68:a2:08:55:ac:ce:0b:83:51:9b:31:8f:6f:
3b:9a:12:1a:c3:59:eb:04:bc:d4:0b:e2:33:05:41:71:52:0d:
2c:b4:03:a2:4e:28:3e:e6:f9:6c:e3:54:83:9c:0c:0d:6c:66:
b7:8d:0d:b3:b6:62:26:b9:5e:8b:d5:34:18:3a:6e:95:df:d9:
76:41:46:2a:bd:c2:14:47:fa:44:54:d3:29:63:39:bd:5f:7f:
74:d1:99:d0:42:21:9c:5b:7d:3e:e4:e7:95:7a:4b:7b:22:98:
f0:42:00:2d:51:56:33:4a:ad:d6:f4:c2:43:66:cf:41:70:ba:
39:7b:2d:d5:83:09:f5:fb:0e:54:1a:4f:e8:ac:9e:43:fd:20:
31:81:c4:49:10:ac:ea:d0:4a:f4:f5:bf:b4:9f:c6:0f:2c:18:
2c:3b:3c:dd:2c:d9:d0:39:cc:4b:06:db:dd:df:05:57:db:2f:
44:a0:be:e2:36:89:29:a6:4d:8d:bf:ff:7a:e1:1f:62:82:71:
06:03:e7:d5:9a:6e:5e:fd:ea:59:16:cf:81:bf:ad:f1:cc:35:
1b:82:d4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKrFU0/dOziyOWXOOtVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjYwMzI2MDUwMTE2WhcNMjYwMzI3MDUwMTE2WjAzMTEwLwYDVQQD
EyhiYzE0YTJkOTMyOGY1NmY0MTVkMGM4ZGU0MDBmZWIzMDViNzg1MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsFtj9x9zQSnAumGwxRU7ti+PEME
qsgIw4GfiUAX4xNv3hr1Www62P9QtMxylXcvExqRgVdkaS1yNdiLEc3M9i22lOWT
ZQc2xtXrLfwzYhiytaVf5ExrlQRPzuoGoJbAfMed7JCkz/PGDjVL6DDh+WX/p85Q
A8CPCrauCnV4ldUsPuujFZLCQiJldRyRamNVuIrV9kusjkrKNZg1ldnMBf2dZwuf
caKXt9tpvv1zjInVpTVbvbaHxUs4757CJYYMmlCP79aEip1at3DH3uJUNLZVlLzX
lHwmNbvB0zcsVXQoPE2r7Z88YvJDFPlSeuHb4+aKn1MZG/GkK9kiZ+xrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwUotkyj1b0FdDI3kAP6zBbeFHMMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBTSB87c
0loLTTAcIGujMCex2NNmr2tMq3Rt4aBOYL4+c9haoLi9DjpooghVrM4Lg1GbMY9v
O5oSGsNZ6wS81AviMwVBcVINLLQDok4oPub5bONUg5wMDWxmt40Ns7ZiJrlei9U0
GDpuld/ZdkFGKr3CFEf6RFTTKWM5vV9/dNGZ0EIhnFt9PuTnlXpLeyKY8EIALVFW
M0qt1vTCQ2bPQXC6OXst1YMJ9fsOVBpP6KyeQ/0gMYHESRCs6tBK9PW/tJ/GDywY
LDs83SzZ0DnMSwbb3d8FV9svRKC+4jaJKaZNjb//euEfYoJxBgPn1ZpuXv3qWRbP
gb+t8cw1G4LU7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:12 2026 by rpki-client