Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: rQgHj7RbyqK/Mv32ajY22MOnzIKhpS+e0ZSJX2UNSJw=
Subject key identifier: ED:35:61:4F:E7:4C:E2:6C:E7:68:F9:CE:50:4A:27:4F:00:10:C9:E7
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01A1DD94F1DFAD0C5779206C0AB6B0E4A64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0BF5
Signing time: Sun 15 Nov 2026 05:01:28 +0000
Manifest this update: Sun 15 Nov 2026 05:01:28 +0000
Manifest next update: Mon 16 Nov 2026 05:01:28 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: m6rgvbpou4z8QwVkNaH0gAFed4Uj//ZG2HeYzDRqF/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:f1:df:ad:0c:57:79:20:6c:0a:b6:b0:e4:a6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Nov 15 05:01:28 2026 GMT
Not After : Nov 16 05:01:28 2026 GMT
Subject: CN=ed35614fe74ce26ce768f9ce504a274f0010c9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:c1:ba:62:50:db:cb:a4:4d:07:f3:2c:60:
f8:c8:99:1b:21:b6:c1:9c:1a:e7:e7:c0:f2:2b:40:
84:74:7d:a5:33:95:15:88:e9:40:5a:71:6c:ca:c1:
83:10:08:0b:98:4a:cd:27:1c:66:2d:8f:d4:ee:81:
57:43:8a:e4:d8:96:1a:6e:13:6a:65:2d:12:e1:07:
64:ee:52:14:66:c7:ba:dd:f3:23:c9:4a:96:b0:d8:
66:b4:8d:84:a0:57:43:b7:e8:de:fd:f0:b7:1b:2e:
3a:59:e9:93:b7:f3:fe:8c:e3:48:16:74:fe:44:ea:
91:2f:66:27:03:4e:3c:6f:25:d6:ee:da:83:23:b5:
88:fd:7c:cc:76:2f:fc:80:a2:79:35:5b:b7:ab:67:
97:b9:c3:a5:ab:89:3a:2c:14:aa:31:cd:55:21:8d:
aa:39:a4:02:97:26:1b:79:64:44:a3:ce:79:81:a4:
69:fc:73:46:cf:72:ca:9b:9b:a3:17:e2:6d:2e:f8:
9d:87:57:1c:30:5f:6c:ee:a7:89:69:f9:8b:b5:b1:
fb:f8:f9:85:47:df:5f:9d:55:ab:4a:86:07:37:6c:
4c:e3:14:b5:c3:83:1c:66:5e:89:94:66:b2:de:57:
55:af:ef:eb:d4:88:9e:0c:ec:db:e0:c1:2d:8e:bb:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:61:4F:E7:4C:E2:6C:E7:68:F9:CE:50:4A:27:4F:00:10:C9:E7
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:78:75:3d:13:58:e4:bc:8b:3a:30:e0:81:79:b9:bb:20:
42:22:5a:ff:a2:ca:df:5a:ae:aa:e7:99:1c:7d:23:27:99:ae:
13:ab:57:e4:f2:08:07:8f:2f:06:aa:9f:43:e1:40:13:58:a5:
84:cd:8c:cb:7f:bb:66:cc:5e:13:90:ec:c7:31:a8:7b:d3:a5:
07:8e:b9:bd:a9:e6:56:07:bc:f6:01:dc:b2:ea:32:6d:9f:6e:
67:8b:2c:88:b6:19:82:e3:57:ba:2a:24:26:86:6e:0f:aa:0a:
97:5c:4e:96:7e:29:f0:a8:17:6b:d6:93:82:c2:e6:41:28:7a:
95:14:cd:20:9e:39:e9:6b:0d:e0:af:f3:53:21:2f:7d:30:ea:
b4:82:4f:82:34:c7:75:d2:be:7f:bb:b9:8f:17:2c:43:4d:ab:
76:b2:f8:f7:d3:44:9a:be:51:d9:8d:8e:5e:93:3f:8a:49:71:
cd:19:b0:59:26:7b:8a:66:1c:88:35:31:58:b9:c1:da:1b:1e:
58:f6:ae:18:22:62:dc:46:46:f1:5c:b8:c6:8a:a2:56:d0:46:
2e:46:9f:95:29:2c:f2:8b:dd:b5:45:d8:88:e9:ac:9a:63:d2:
c2:4a:8e:e4:4a:62:d5:4c:be:55:a0:cc:94:ab:99:ff:a7:09:
b7:11:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:26:19 2026 by rpki-client