Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: JKYk3DtO0+ZPiB9/x5QSSBqQ0qphl6OnzvBc7LfKOTc=
Subject key identifier: C0:41:27:7A:2F:BC:B2:C3:FF:34:F9:93:2D:76:0C:CB:4F:3B:44:95
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019D269657CEA52E879338ACCA5EDD50CDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 12A6
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: KQuzPwV4zqm/na4xI97OQnYS/7NPfB2FlFzoZ14O0Es=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:57:ce:a5:2e:87:93:38:ac:ca:5e:dd:50:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=c041277a2fbcb2c3ff34f9932d760ccb4f3b4495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:35:95:5c:90:62:0b:da:af:3b:06:cc:0e:
cf:3d:53:06:19:94:57:0f:a8:70:5b:a7:ac:d8:19:
a7:5b:0c:6b:5f:b8:ad:55:42:65:2a:37:4a:51:82:
28:61:a1:28:f9:b1:6e:ca:44:f1:8f:f7:93:d8:f1:
8f:56:31:13:79:01:b7:c9:a5:2d:35:ef:95:05:b0:
24:33:87:07:cb:18:9e:2b:2f:18:ce:44:e7:29:f9:
6e:a4:b9:ac:fa:c4:ab:6a:c4:87:94:ac:e9:a6:c1:
48:96:9a:c9:88:7b:9d:8f:5f:1d:af:81:d5:de:38:
0c:dc:90:62:cc:e2:00:44:e9:10:eb:c7:80:a0:3f:
08:3a:92:53:f1:a3:28:27:08:a5:43:24:e1:0f:aa:
d6:21:89:f0:09:53:1d:27:03:02:0b:b2:d7:20:47:
86:a0:1b:b1:a8:8e:3c:e5:66:1b:88:63:0d:3e:52:
d9:6a:8f:c7:bc:66:ce:13:d2:99:18:ea:79:8c:f4:
d9:43:9f:9a:aa:01:f4:0b:8d:f1:5b:05:f7:11:93:
d1:bc:cc:60:eb:09:05:86:0d:8e:df:06:66:cf:1d:
84:b4:6d:a6:7b:37:04:00:55:53:86:7c:1e:67:47:
bd:e6:a4:4f:f3:ff:e8:ae:ea:19:fc:10:f0:88:9c:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:27:7A:2F:BC:B2:C3:FF:34:F9:93:2D:76:0C:CB:4F:3B:44:95
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a5:ac:e9:41:44:23:f4:ae:89:6e:2c:ce:95:40:73:59:92:
c9:75:45:08:ea:30:df:84:53:d3:40:e1:a1:a1:94:26:62:89:
8c:d5:18:4b:e3:66:57:82:b6:52:27:f0:03:56:9e:f9:6b:c2:
59:df:36:df:3c:a1:fb:d5:7b:de:02:30:eb:5b:3f:75:2d:71:
73:44:75:8c:96:bc:4d:60:60:db:8b:24:22:11:52:2b:7b:2f:
20:ab:1a:7b:58:01:76:0e:2f:2c:11:fc:aa:7e:34:6e:13:91:
ff:05:2d:0a:9d:0a:17:0c:a0:6d:47:64:e6:53:50:34:1c:1b:
03:2e:4b:c8:a3:9a:15:96:34:b9:64:ed:b7:5a:8d:f4:1d:40:
5b:20:44:eb:6f:4f:21:d6:79:9b:1a:96:6c:93:a9:cf:d5:e0:
c1:b6:3b:fa:7b:4c:df:a0:d4:1a:e0:e6:54:24:04:d1:32:a0:
b7:9e:69:ec:b1:a0:8e:21:64:06:ea:96:e1:15:ec:e2:83:91:
8a:46:d7:92:63:f5:77:f0:99:e3:07:21:45:3e:ad:2b:96:b1:
dc:51:35:1c:a2:e2:58:68:ce:01:58:c4:2a:b6:15:7d:fa:0c:
6f:62:a4:0d:77:6f:45:f8:7e:58:7f:6d:e3:2b:8d:16:3f:2d:
66:cc:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:29 2026 by rpki-client