Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: MsWSALf+vY1JEYtdx8iWGutEAdWGOvdItqLn7ZvDEno=
Subject key identifier: CF:BC:D0:C3:A0:34:52:40:3B:DF:5F:D2:4F:BA:5C:41:7F:54:00:81
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01A0D8DE950D56F24F6B502CFA7C73A713B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0B6E
Signing time: Fri 25 Sep 2026 14:01:00 +0000
Manifest this update: Fri 25 Sep 2026 14:01:00 +0000
Manifest next update: Sat 26 Sep 2026 14:01:00 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: MllRHXFJUQh/1OIJFcQ05zPB8xlIpJvJxNse4gdrE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:95:0d:56:f2:4f:6b:50:2c:fa:7c:73:a7:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Sep 25 14:01:00 2026 GMT
Not After : Sep 26 14:01:00 2026 GMT
Subject: CN=cfbcd0c3a03452403bdf5fd24fba5c417f540081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:18:82:fa:af:ab:08:f3:87:3e:d0:05:5b:
26:de:c5:19:45:ea:a5:83:dd:34:bb:0e:67:35:b4:
87:eb:fe:ff:97:c6:e3:4c:cd:46:a6:31:cd:84:34:
15:fd:c6:d5:71:4c:4b:24:fe:ca:e9:b0:d7:4f:ec:
5e:6a:f3:1f:21:93:a3:3c:08:5c:fd:e4:d9:76:2e:
70:c9:df:fc:05:b8:40:ef:39:05:c8:64:29:0d:27:
53:35:e3:63:eb:6e:89:af:ab:30:b6:19:a2:fa:38:
f5:a0:e3:64:87:06:ff:d0:8e:60:12:84:5e:0b:0d:
a8:02:69:21:8d:55:e4:af:75:59:0f:86:a1:aa:82:
ec:35:63:2e:46:f4:42:a7:c3:37:ef:45:24:8d:66:
2d:d5:79:d0:93:70:97:3a:09:cb:11:90:d7:85:14:
bc:35:8f:2b:b7:e2:69:2c:7a:6b:fa:29:30:ab:de:
20:10:80:f4:ec:b5:39:a4:20:c3:26:81:c9:ee:95:
c8:8b:13:e1:cf:d2:2f:9f:37:8e:3f:e2:42:09:6a:
f4:8b:87:b6:e3:52:9a:30:f6:58:7e:64:fc:1f:cc:
b6:e3:7f:65:61:95:6d:5c:88:d5:5b:85:8c:d0:e2:
8c:1c:24:fd:44:13:51:f0:08:96:18:5b:5e:57:dd:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:D0:C3:A0:34:52:40:3B:DF:5F:D2:4F:BA:5C:41:7F:54:00:81
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:19:a5:8a:0d:61:62:d6:2b:45:9d:60:51:a4:4e:56:b2:
91:2e:48:8e:b5:fc:47:fb:34:a9:77:95:3e:27:c1:03:44:ed:
b1:0a:12:d1:dc:5b:42:57:8d:11:c3:09:79:5d:51:c8:09:f9:
20:80:a4:62:96:02:b3:a3:ca:49:72:ab:9f:44:c9:00:9e:2c:
5a:00:ef:63:d1:ad:7a:04:f3:60:af:95:f3:ad:3b:83:16:da:
ab:a4:c8:26:c8:77:0e:40:e5:43:cd:ad:35:48:87:ce:4f:0d:
bf:fa:1e:af:fd:eb:70:73:0c:d1:8a:70:d3:25:48:97:4d:4f:
f2:2d:c9:df:84:8b:30:9e:e7:67:b6:23:f6:ed:57:54:c7:e2:
fe:64:41:87:f6:95:e6:a2:56:e3:03:d1:19:ba:74:4c:a7:2e:
62:95:f1:4a:ef:5a:14:e3:fc:02:a4:68:19:f8:b8:a3:65:2f:
8a:c5:e1:f6:53:1e:84:e8:26:92:8c:cf:02:d6:31:05:b6:80:
48:43:55:8f:3d:f8:ac:73:c9:c8:90:74:79:c2:61:7d:3b:21:
a1:0d:8c:7b:38:e9:fd:5b:2e:a8:1a:8e:1f:45:9f:40:00:d9:
d8:ae:4c:ba:89:c7:37:2f:e3:37:99:44:3a:ff:ce:7c:97:26:
1f:2c:dc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3pUNVvJPa1As+nxzpxO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjYwOTI1MTQwMTAwWhcNMjYwOTI2MTQwMTAwWjAzMTEwLwYDVQQD
EyhjZmJjZDBjM2EwMzQ1MjQwM2JkZjVmZDI0ZmJhNWM0MTdmNTQwMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+QYgvqvqwjzhz7QBVsm3sUZReql
g900uw5nNbSH6/7/l8bjTM1GpjHNhDQV/cbVcUxLJP7K6bDXT+xeavMfIZOjPAhc
/eTZdi5wyd/8BbhA7zkFyGQpDSdTNeNj626Jr6swthmi+jj1oONkhwb/0I5gEoRe
Cw2oAmkhjVXkr3VZD4ahqoLsNWMuRvRCp8M370UkjWYt1XnQk3CXOgnLEZDXhRS8
NY8rt+JpLHpr+ikwq94gEID07LU5pCDDJoHJ7pXIixPhz9IvnzeOP+JCCWr0i4e2
41KaMPZYfmT8H8y2439lYZVtXIjVW4WM0OKMHCT9RBNR8AiWGFteV92i6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+80MOgNFJAO99f0k+6XEF/VACBMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPMZpYoN
YWLWK0WdYFGkTlaykS5IjrX8R/s0qXeVPifBA0TtsQoS0dxbQleNEcMJeV1RyAn5
IICkYpYCs6PKSXKrn0TJAJ4sWgDvY9GtegTzYK+V8607gxbaq6TIJsh3DkDlQ82t
NUiHzk8Nv/oer/3rcHMM0Ypw0yVIl01P8i3J34SLMJ7nZ7Yj9u1XVMfi/mRBh/aV
5qJW4wPRGbp0TKcuYpXxSu9aFOP8AqRoGfi4o2UvisXh9lMehOgmkozPAtYxBbaA
SENVjz34rHPJyJB0ecJhfTshoQ2Mezjp/VsuqBqOH0WfQADZ2K5MuonHNy/jN5lE
Ov/OfJcmHyzcgw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:50 2026 by rpki-client