Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: BMtN9CBrrus+/nn4R60g81K5pi1xqYlaGE0YCxY9Pg8=
Subject key identifier: A0:57:C7:CF:96:CF:60:C5:D8:AB:BB:31:F4:FC:C4:FB:9C:16:AA:7E
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019F916DC51E201810C4B9BA7B1088B4B0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 01DE
Signing time: Fri 24 Jul 2026 00:01:57 +0000
Manifest this update: Fri 24 Jul 2026 00:01:57 +0000
Manifest next update: Sat 25 Jul 2026 00:01:57 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: Rfj1gwTeQ7u+jWnBkuoCrTWmvmE/8TyenPo7U71RVRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c5:1e:20:18:10:c4:b9:ba:7b:10:88:b4:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Jul 24 00:01:57 2026 GMT
Not After : Jul 25 00:01:57 2026 GMT
Subject: CN=a057c7cf96cf60c5d8abbb31f4fcc4fb9c16aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:48:cc:a9:e2:fb:43:79:be:18:92:e1:54:
60:b7:1a:3a:b8:b9:ab:08:9e:8c:31:26:20:90:74:
3b:9b:25:87:e8:52:c4:3b:72:ed:8e:4c:de:0c:15:
ba:93:20:f3:82:6d:f1:36:ca:9f:d5:06:36:fb:53:
42:6b:ae:cb:8a:fb:81:c5:a3:39:5c:f3:3c:9c:d9:
e1:5b:11:58:18:3b:a9:ee:43:e4:f0:53:4e:03:69:
95:5f:58:15:f6:a2:d2:0e:34:64:77:9c:d5:1d:a6:
da:28:57:a4:1e:02:f6:8c:08:3a:ef:ee:35:8d:32:
68:f6:76:66:4c:b7:ee:f2:35:ce:53:ba:14:3f:8b:
fa:7b:f0:f8:84:fc:1f:34:62:96:aa:80:43:4a:f5:
0f:e3:d9:8b:2b:4c:d0:5e:b5:92:20:cc:1a:b1:ce:
31:f8:94:b1:64:ba:e7:65:e2:7e:a7:1a:ef:d4:9f:
39:fd:81:7d:b6:89:de:e2:ed:9c:86:23:81:dd:ab:
39:33:7d:f3:76:2f:c1:32:e4:00:6a:c1:4e:34:ec:
80:1b:7e:17:4d:83:6d:0b:97:18:c7:c9:6f:07:3c:
c1:b7:95:f7:ce:e1:ac:f6:83:bf:14:c2:58:4c:55:
a8:a5:cc:24:5b:bd:b7:cb:25:3d:79:ca:cb:9c:51:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:C7:CF:96:CF:60:C5:D8:AB:BB:31:F4:FC:C4:FB:9C:16:AA:7E
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:b4:8b:1d:8c:a8:4d:df:2c:11:42:93:55:6d:76:b6:df:
ca:50:b5:3c:3d:5d:d1:ce:99:40:9d:12:a0:14:c5:48:17:df:
17:35:0e:1a:99:0b:a7:99:0e:45:33:bb:06:3d:88:59:11:a9:
85:d9:49:8f:40:d3:e7:23:c8:50:db:57:ab:d6:e3:b0:5f:81:
24:5e:f3:a0:24:3b:37:8f:73:c1:a4:6b:f7:7d:67:ad:f0:6e:
18:fd:f6:dc:b8:b4:71:8b:ee:39:7f:5d:6f:f8:d8:e8:60:36:
7c:d5:d2:a0:0d:0c:41:b2:d5:0d:6b:78:cb:1b:02:c0:2d:f1:
d1:47:1a:6f:f4:71:80:75:f3:80:90:da:35:1b:92:92:44:d4:
72:5c:8a:f8:77:d6:35:88:35:65:b7:bd:65:a5:c3:50:db:7a:
9f:a5:f1:47:d6:7e:f0:a7:d0:ae:c3:68:43:ce:7b:31:c0:dc:
95:a0:cf:52:64:e3:f9:49:d1:cf:ee:a1:df:d2:ee:98:5d:cc:
a6:f4:c7:9c:2a:c1:29:57:62:a4:0b:c8:63:59:a8:2c:55:7a:
df:c5:cb:cf:c8:e5:ed:48:3d:a8:57:da:de:2f:75:df:9c:dd:
9c:0c:43:5a:aa:4d:48:9b:cd:13:80:86:bc:4e:c0:2f:2f:d7:
f9:b2:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:22 2026 by rpki-client