Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: 2rgwLJjJvAFXki62uIr/EUpXD8MPzAUCo7Lza47fIjk=
Subject key identifier: 34:FF:3B:D3:50:89:D7:1E:52:77:F7:FA:B4:F9:86:B1:FB:E8:33:1A
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 01A0D3EFF2308DF374AF7EE93CBC773A6E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 0285
Signing time: Thu 24 Sep 2026 15:01:52 +0000
Manifest this update: Thu 24 Sep 2026 15:01:52 +0000
Manifest next update: Fri 25 Sep 2026 15:01:52 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: lEvnhAaDmpIgwpRXLMPPqpXvsYm+s3LZeWVOpqJPwM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:f2:30:8d:f3:74:af:7e:e9:3c:bc:77:3a:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Sep 24 15:01:52 2026 GMT
Not After : Sep 25 15:01:52 2026 GMT
Subject: CN=34ff3bd35089d71e5277f7fab4f986b1fbe8331a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:39:1c:f4:f8:83:1b:fd:16:05:a3:59:e0:
cf:8a:74:31:cb:ec:9f:9f:9b:55:b6:64:f4:65:82:
1c:01:1f:aa:05:67:bb:96:d7:08:34:f5:39:bc:8c:
d3:41:1b:c5:f8:2f:84:4d:04:4b:0c:c1:13:7b:c8:
ad:f2:00:a7:d9:36:a7:cb:c0:d4:99:cf:cc:ca:a8:
ae:53:44:4d:7c:a3:0b:59:7e:a1:00:89:47:06:6f:
f3:6f:1b:2f:8c:99:0c:49:a5:d7:f3:36:3d:3c:f7:
b7:0e:ce:c1:16:7b:39:9d:77:99:fa:22:f0:0f:ae:
d4:4d:1f:26:70:65:9e:37:74:de:6f:96:dc:c5:2b:
cc:e1:ec:d8:3b:24:0b:c7:0a:04:41:7b:d5:ed:38:
99:dd:43:2f:ec:08:64:e4:e4:5f:33:a6:00:0d:10:
0a:da:4d:1f:2f:89:8f:b3:16:21:80:47:5b:c9:b7:
00:cb:23:1c:75:a7:3a:03:97:f1:c7:72:94:6e:d1:
63:fb:7e:a2:75:f7:02:53:04:5d:86:9d:6e:71:5f:
03:85:b2:9b:f9:c4:49:2d:e6:e3:d8:76:9c:72:41:
6c:99:c7:77:d5:9b:b3:24:b3:2e:e2:64:b2:c7:a6:
eb:b5:6b:a3:18:dd:94:1b:5e:bf:85:76:4a:2f:63:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FF:3B:D3:50:89:D7:1E:52:77:F7:FA:B4:F9:86:B1:FB:E8:33:1A
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:57:20:69:a2:0f:7a:75:33:5c:08:c0:2a:cb:8d:c3:c2:
70:ac:00:08:42:8f:0d:b9:81:ff:20:f9:0b:cc:7f:25:62:7b:
3b:a2:f8:4a:16:dd:3d:8c:6b:13:c8:ed:ed:37:b2:3d:ce:30:
3b:a1:f6:87:37:96:e5:71:a2:5f:1b:04:58:9f:80:71:90:21:
a2:bb:a2:ca:6d:dd:0f:a9:cd:17:ef:84:97:af:dd:13:56:be:
9b:2f:3d:c9:b8:0a:5b:70:4e:d7:2a:26:47:5a:84:e9:27:38:
b6:1e:04:80:aa:98:6e:7e:f8:6e:e1:5a:78:a9:75:3d:13:94:
83:72:72:47:74:00:a9:2f:31:7b:2a:9c:13:36:b6:ef:fc:00:
da:22:bd:06:7e:78:e4:01:aa:2c:2c:08:c2:02:6e:e5:f3:12:
88:d3:de:2b:48:89:1f:f8:96:c2:c0:37:fc:5a:40:c1:82:95:
3b:75:a9:69:46:a6:fe:a1:44:a8:44:15:9e:e1:60:0c:01:23:
d9:7f:ce:2a:5b:bd:df:e7:4a:aa:0a:87:e3:aa:4d:65:91:f1:
1e:a8:b3:bd:a9:1e:6d:37:67:50:63:ef:55:53:d1:c6:a7:b5:
c3:17:a8:36:81:01:7e:86:84:25:65:c7:ff:b3:88:c8:a8:1b:
c4:39:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:46:46 2026 by rpki-client