Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: 7K7cYBxz1VO6LRx2mFP7P+8g8MUPZ2xmiGU6GQH7rGU=
Subject key identifier: CC:65:42:1B:2F:9A:0F:83:82:1C:EC:6C:F0:1F:A8:32:43:4E:4D:95
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 019D25BA303FC09E563916E0FA4C3116E23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 15BB
Signing time: Wed 25 Mar 2026 16:00:52 +0000
Manifest this update: Wed 25 Mar 2026 16:00:52 +0000
Manifest next update: Thu 26 Mar 2026 16:00:52 +0000
Files and hashes: 1: DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa (hash: 4ANNNaYCmM44cEh0PesD5gfAd5fKPbOrFIOFq/4zEpE=)
2: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: NLmBt7wg60gJSGRbSo8qG5xXP/zMiz+vFPsCGmGhXVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:30:3f:c0:9e:56:39:16:e0:fa:4c:31:16:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Mar 25 16:00:52 2026 GMT
Not After : Mar 26 16:00:52 2026 GMT
Subject: CN=cc65421b2f9a0f83821cec6cf01fa832434e4d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:9a:6b:2b:6d:67:1a:5d:c2:8d:78:77:e9:
76:1b:66:02:e0:b7:95:77:7f:07:e8:d6:03:3b:0f:
2f:55:ae:a9:6c:83:1d:f6:07:c4:89:62:34:89:25:
25:49:3d:51:c8:04:0b:36:2b:6f:53:1d:fb:62:a1:
b6:c8:fa:46:cb:4f:f5:4e:3d:de:90:c6:2c:39:66:
21:eb:e0:bf:79:dd:aa:d3:19:4c:35:77:8d:20:19:
51:13:0d:09:0d:13:03:be:24:bb:bd:54:f1:a9:bb:
eb:f2:3c:2c:3b:db:41:5b:87:b6:d2:fa:bc:bd:31:
4d:dc:1a:d6:6f:99:ee:04:27:3a:e0:c8:49:05:a9:
bf:19:9b:b8:49:f3:f4:90:52:23:0c:bd:fc:8b:2c:
3c:b3:7b:93:aa:30:22:77:ad:6a:4f:2a:c9:39:c1:
80:75:98:63:af:c4:58:b8:e5:12:5d:8a:46:3d:6d:
ec:8a:34:9c:c1:83:58:2e:97:a5:af:ce:f8:8e:8a:
f4:5c:38:34:5b:e1:62:72:c4:37:53:35:85:ea:2d:
e2:58:9b:e9:e2:99:07:ca:fa:0e:f6:77:06:49:25:
21:c2:6f:a1:0b:19:a3:de:c6:14:ed:33:5b:f6:b2:
d2:8d:a8:6c:06:d3:94:25:15:02:0b:0c:a8:b2:af:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:42:1B:2F:9A:0F:83:82:1C:EC:6C:F0:1F:A8:32:43:4E:4D:95
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:0a:5d:b6:bc:a4:89:03:3c:3c:4f:6f:b1:74:11:59:61:
8f:2c:7b:d2:3b:e3:48:d1:75:2e:da:6c:c1:79:b9:de:bc:91:
81:df:32:da:db:b6:95:6f:35:e1:2c:91:2d:70:11:92:24:43:
86:cc:fa:5b:35:dc:b9:c6:55:47:86:c6:8a:7d:3b:95:14:7d:
2b:08:b1:27:ea:9b:67:5d:05:cb:30:2c:b4:6e:af:b0:9b:9c:
5f:72:68:55:18:d5:62:98:bf:26:5b:92:b6:03:98:f3:9e:d3:
9d:e8:93:24:ff:d0:80:10:31:66:6e:c8:95:89:95:37:b8:1e:
bf:12:d4:17:80:7b:ea:0b:d4:68:7c:55:b4:1c:a0:b0:55:1e:
43:95:0e:40:fc:0c:72:fe:22:90:77:02:1a:28:7e:4e:86:94:
81:fa:f4:87:9b:ba:f4:23:b2:12:92:de:25:84:c8:6d:1f:c0:
4f:b1:69:63:47:e2:25:b3:4d:a5:48:d2:d8:7e:d0:40:b4:ca:
e4:05:03:2c:0b:8e:4e:b2:8c:8d:fb:2e:bc:3b:68:20:a4:9e:
32:c3:65:8c:84:21:99:fe:a4:a6:49:53:39:32:e4:9b:d6:f4:
7e:f3:72:52:14:3c:32:08:13:69:b9:70:1c:b9:d9:db:e1:87:
80:bb:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:35 2026 by rpki-client