
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: 3gX920E5U5b1vbKVBPWC/J0IYzZNhZKZzlGZehcKauI=
Subject key identifier: 95:C2:21:47:45:D1:CC:1B:7C:CE:27:EB:82:38:73:89:6A:1E:9D:B3
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 01A0D2012D545A66EDCC8D0993962DF7AD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 0284
Signing time: Thu 24 Sep 2026 06:01:27 +0000
Manifest this update: Thu 24 Sep 2026 06:01:27 +0000
Manifest next update: Fri 25 Sep 2026 06:01:27 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: w7N0P8SO006p5OtVNzG1pq+X3G020eL3ZxJ5ki8xtI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:2d:54:5a:66:ed:cc:8d:09:93:96:2d:f7:ad:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Sep 24 06:01:27 2026 GMT
Not After : Sep 25 06:01:27 2026 GMT
Subject: CN=95c2214745d1cc1b7cce27eb823873896a1e9db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:23:47:c6:d2:59:43:06:ff:7a:96:a5:ff:
77:98:58:8a:c0:42:1a:0a:1d:cd:c7:7e:d1:fe:cd:
a5:66:7a:44:62:0c:61:8b:21:8b:a1:19:c2:56:2e:
50:66:c5:2e:ab:50:b1:ee:33:47:7d:71:71:4e:ab:
a7:3c:d1:9d:0a:aa:77:c6:66:bb:a7:a7:e3:0e:ae:
60:0c:2b:64:79:f1:80:52:c2:e1:d7:f6:b1:73:aa:
68:ac:ac:73:f3:0b:2e:9a:8c:7d:cc:a4:c2:40:3f:
d1:e9:aa:be:20:17:3f:f4:37:1d:eb:11:87:da:3a:
4a:da:f9:a6:ad:c8:d6:e5:2d:cb:4f:a8:77:9d:f2:
4e:61:12:58:2f:e6:10:5f:b9:61:51:d0:26:25:54:
3a:b6:1c:45:9d:f9:7f:86:f5:b9:89:c3:ab:f5:58:
ca:55:d3:41:d3:81:af:5c:3f:60:4b:c8:f0:fe:88:
bb:67:91:3b:9b:bc:06:85:a6:2f:ca:f0:4c:6e:a9:
fc:6d:c3:3a:4e:5e:c8:5d:14:5b:1f:1c:86:7f:b1:
e6:71:bc:58:76:62:39:5a:89:36:77:d2:f3:71:f3:
e0:47:09:92:ab:be:ec:cd:a8:10:37:83:38:62:9b:
53:09:c9:51:00:7d:a6:6b:80:c6:62:0c:f5:b6:eb:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:21:47:45:D1:CC:1B:7C:CE:27:EB:82:38:73:89:6A:1E:9D:B3
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:72:65:50:f4:6c:2d:40:5e:03:1e:3a:c3:ed:f3:94:ac:
06:af:52:dc:b7:5a:c5:d4:2d:54:5e:d5:af:bf:dd:f3:d1:81:
a4:e6:4b:fb:05:cb:b8:2a:a5:29:e2:f7:78:5d:bb:f1:60:98:
d9:f8:83:f2:88:a2:f5:80:f6:e6:d7:b0:13:f9:df:d6:27:6e:
75:ee:5a:ce:ee:a2:ee:58:38:8e:e5:26:79:a6:d1:6b:af:aa:
b6:9a:c0:5c:37:d0:9a:e5:53:57:29:8e:c6:82:59:1b:f8:85:
26:32:ee:b2:5a:81:3f:f4:95:a6:de:b4:b0:fb:27:58:9d:d1:
1a:8f:c3:65:3e:5a:bc:bb:d4:e1:a3:ba:82:58:63:1b:09:8b:
3a:a0:00:b4:ae:3c:2b:11:5a:c7:fd:c8:d1:7d:94:33:01:e3:
4d:6d:bd:fb:8f:4e:e7:ed:9e:ba:98:58:17:c2:cb:18:70:30:
5a:33:b0:c7:65:ce:fd:d7:35:2d:71:ce:b4:b2:da:ca:91:4e:
9c:d9:8d:34:b3:ce:d8:c1:a2:90:aa:e1:14:1e:ab:2c:2a:cd:
a4:0f:2c:6f:06:b4:76:a7:78:bc:ce:db:2a:7d:60:3e:13:15:
5f:af:d7:84:41:38:5c:64:0a:27:1e:29:d3:93:ca:c5:ae:d2:
c3:36:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:23 2026 by rpki-client