Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: 2GtO39c2WoUe+gOYam8KcuIsKQw+TS13XVGxQS6guSU=
Subject key identifier: E3:53:D1:DB:05:91:92:90:43:23:10:42:4F:2A:F2:CC:A2:68:12:A0
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019D2B4E187348634D2BFB28B53844E7B1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 18:00:31 +0000
Manifest this update: Thu 26 Mar 2026 18:00:31 +0000
Manifest next update: Fri 27 Mar 2026 18:00:31 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: AGNuC2UrkdN7tt/aZRiXDy72ksQkaZQ/QcHqBhdifao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:18:73:48:63:4d:2b:fb:28:b5:38:44:e7:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Mar 26 18:00:31 2026 GMT
Not After : Mar 27 18:00:31 2026 GMT
Subject: CN=e353d1db05919290432310424f2af2cca26812a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:da:3f:27:ab:fd:cf:da:31:b4:bf:8d:97:
0e:f9:13:18:40:16:d3:04:38:40:1e:4d:13:33:6d:
6e:3e:1f:f9:00:1f:82:ce:2a:ca:c1:7e:23:7e:f8:
18:e9:13:72:4e:e8:80:c2:c5:7c:31:26:a5:e9:ca:
88:4f:e9:09:90:e9:e8:7a:a7:72:8e:ba:a5:8a:be:
a9:8c:07:79:53:e7:70:9e:e2:60:fb:7a:a0:68:43:
a9:8f:50:2d:c6:74:d5:f2:2b:2b:df:c1:ab:59:4d:
04:0f:41:c4:a9:e9:da:5d:a8:7c:6a:3e:c3:e5:53:
5f:86:08:be:67:df:5a:ed:98:6f:a4:9c:11:5a:a9:
4d:ec:02:c2:d5:1b:97:43:13:4d:a8:51:ab:14:69:
9d:7f:bf:0f:53:aa:21:c2:5f:dc:84:5f:ae:46:11:
40:77:ee:be:f9:14:3b:c9:2d:4b:c3:21:c3:ab:78:
79:2c:10:60:d7:38:11:7b:58:f6:ad:b0:cd:73:47:
33:22:66:a9:cd:f1:0e:b8:10:90:b0:8b:18:95:21:
66:82:3d:72:e4:fd:b2:92:aa:3c:5f:31:ea:f4:ba:
04:b9:94:7a:e3:56:9b:dc:e1:63:c0:f5:6f:5d:93:
bb:76:43:09:21:f8:2b:3a:06:1d:7c:9c:0d:46:a5:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:53:D1:DB:05:91:92:90:43:23:10:42:4F:2A:F2:CC:A2:68:12:A0
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:65:62:c2:0f:fc:a1:23:40:76:9c:5b:71:75:15:10:9c:
39:7f:91:0d:5e:63:05:24:2b:8b:4b:94:09:0c:50:20:e1:d4:
40:97:c3:99:8c:16:a1:cf:83:01:ca:01:7c:49:77:01:b7:48:
69:24:64:29:44:41:8a:0a:59:af:69:5e:ba:4e:12:49:22:c6:
fc:da:83:86:21:92:75:39:6d:69:92:30:46:0f:bd:c8:5f:7d:
22:89:cc:11:a9:0d:38:ac:20:fe:36:dc:ba:f3:aa:30:a8:ae:
e0:f4:97:8a:8e:0d:80:df:48:6e:98:7f:88:77:04:26:23:fd:
5c:8a:d2:31:20:c0:e0:e4:45:14:99:4b:b9:39:39:5c:36:8c:
f9:23:67:2a:9b:3a:81:8d:2d:e0:dd:d1:03:c7:18:ab:76:98:
95:b7:55:b1:75:d6:ec:8b:dc:9b:ac:f2:91:4c:f4:ab:0f:7b:
d2:3b:2f:3a:2a:40:c4:2a:51:d9:22:3c:84:b2:52:7c:bd:6f:
fb:10:ea:bc:ac:d6:e5:6a:43:70:e3:22:68:5c:12:97:92:48:
ff:3b:9d:a4:61:31:0c:9b:6f:e3:6f:6f:93:54:a1:f6:7f:45:
61:d3:a4:6d:ec:5d:f3:17:fb:22:cf:d9:ab:29:4f:98:26:1b:
90:7a:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:41 2026 by rpki-client