Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: vGlMqc8ym4081vOwHcW0CVzdqBKTe0R+8ouj0yTsnYU=
Subject key identifier: BD:B4:7B:E2:41:0B:0A:64:4D:8C:0C:B2:EC:B4:44:B8:03:D1:36:A5
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019E1FB5DB68AB0F9F88146CCA0A2BAB3775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 1327
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: AvHF4Prno7y87BCCaXCbEebwrFZJegazzS0X8sbfvyQ=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:db:68:ab:0f:9f:88:14:6c:ca:0a:2b:ab:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=bdb47be2410b0a644d8c0cb2ecb444b803d136a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:ce:1f:0e:1c:e5:8b:01:a2:77:d4:01:9c:
3a:92:d3:29:37:ba:98:87:39:eb:f1:88:94:b7:5d:
50:c6:f5:9e:2e:89:a5:a8:ba:03:cb:76:67:5f:e7:
ee:9c:b5:e1:59:2a:a6:f2:92:f5:96:a0:63:8d:80:
ca:20:85:ac:f4:19:52:ca:1c:01:72:7d:ad:2d:c5:
18:49:31:3c:9f:f5:8d:3a:63:7a:00:6e:cc:b3:7f:
c2:bc:5a:7c:db:50:a5:42:cb:60:38:78:66:db:2b:
e4:44:d3:43:49:a7:3f:6f:c8:04:d8:c2:c0:51:7f:
70:51:a0:6d:d6:92:7f:05:4d:28:dd:fe:32:9c:e3:
e0:89:5c:d3:0d:18:86:4d:29:0d:7f:59:b5:2b:35:
58:aa:a8:53:65:01:18:91:76:39:8f:b8:61:bc:bb:
5d:81:45:76:de:f9:11:e1:d0:f3:f6:a4:b3:2e:1e:
df:b9:fa:58:96:b3:f1:0d:b6:56:fe:f0:e2:c2:51:
59:cc:fa:23:3a:84:b6:c7:51:7c:c5:55:16:89:86:
93:a7:4d:f4:42:bf:0f:f4:e4:09:4a:9f:7a:71:87:
21:d0:c1:35:83:f2:91:fb:5a:2b:95:70:48:7b:ca:
7a:fd:1d:03:34:4d:1b:a0:aa:fb:3e:42:4a:d9:c1:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:7B:E2:41:0B:0A:64:4D:8C:0C:B2:EC:B4:44:B8:03:D1:36:A5
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:c1:fb:d1:bf:ce:cb:bc:40:85:a7:36:2b:cd:9b:ec:24:
21:51:5b:00:45:ab:d0:08:e4:28:0e:2b:7a:32:ee:01:23:05:
5e:9a:60:c4:b5:20:36:66:c9:38:89:0f:1a:ec:80:7a:e6:e6:
2e:bf:dd:fa:bc:69:2f:10:ec:ee:7d:3d:8c:71:f2:88:fc:98:
76:87:17:05:6f:eb:ea:05:ac:06:8e:c3:61:fe:41:3f:15:c6:
9c:63:85:13:33:03:e5:fc:5b:d8:72:ec:31:d0:24:05:b6:9f:
1a:e6:c0:9b:c6:af:44:01:2f:95:8e:52:72:70:73:86:cc:ce:
10:6b:b9:84:6a:a3:89:19:a0:b1:a2:c3:7d:7d:13:af:f7:44:
11:0c:b6:96:0b:af:a3:8a:66:05:1e:43:f1:5c:df:2c:ae:0e:
05:a5:17:2e:6a:90:93:c8:9c:23:7b:69:f2:52:97:9a:57:8b:
ac:d1:4d:cd:a1:17:9c:84:72:58:6e:ab:10:a0:80:bd:f3:0e:
d5:84:35:99:17:fe:33:58:04:b7:58:97:3e:2b:63:30:0e:0b:
7e:bd:eb:b0:85:e8:76:f7:3e:2c:2c:e6:55:c5:ca:30:61:bf:
33:fb:87:2c:ce:df:ce:89:47:0b:46:96:66:db:c6:d3:b8:6c:
e0:ae:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:45 2026 by rpki-client