Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: r8OCA8AgahbQF8ubETdluka/AO3SlXjD2gknJ8QjVs0=
Subject key identifier: 5D:6D:E0:FF:65:71:CF:61:A1:C3:F2:0D:BA:DF:CD:93:67:3B:DB:AA
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019F965BCEBAA312F49EE2D8E2F63D09C6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 13E9
Signing time: Fri 24 Jul 2026 23:00:26 +0000
Manifest this update: Fri 24 Jul 2026 23:00:26 +0000
Manifest next update: Sat 25 Jul 2026 23:00:26 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: RAKAL5r0ru8rbi7yBcJRSC83VxsHLxQQWEsscuy8AjU=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:ce:ba:a3:12:f4:9e:e2:d8:e2:f6:3d:09:c6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jul 24 23:00:26 2026 GMT
Not After : Jul 25 23:00:26 2026 GMT
Subject: CN=5d6de0ff6571cf61a1c3f20dbadfcd93673bdbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:ca:00:41:3f:33:d0:10:87:2c:31:0d:5c:
95:3e:91:c4:22:5b:58:8e:14:79:79:4c:94:1e:6b:
8c:d0:40:42:cd:0a:0f:27:17:cb:fe:e3:c6:ea:94:
58:f0:46:8c:0e:98:6b:e4:de:5c:30:f9:f4:61:9e:
db:d1:68:c0:04:39:46:03:10:5c:16:30:2d:d3:92:
c8:ac:3d:20:c8:a7:ff:21:73:f2:68:d0:6c:0f:12:
2e:61:0b:9a:8c:2b:9e:24:73:d2:08:38:f0:19:4f:
ac:88:fb:d8:8f:3f:66:5e:60:51:9f:3e:33:18:08:
2a:64:2c:61:a4:39:11:3a:0f:c1:03:7d:09:90:45:
92:c2:3e:0e:81:50:65:35:47:ab:f8:08:68:1d:e5:
54:59:db:45:4e:10:cb:71:65:ff:8c:68:c6:3c:91:
3d:f3:d0:8f:b7:01:14:f4:c5:f9:0c:a7:d1:7a:7e:
f6:00:78:e7:ef:d7:cc:37:8f:84:10:3d:fa:8b:67:
9a:0e:e6:cf:73:0b:9d:f5:77:1f:cb:1d:bb:ae:dd:
4c:5d:68:69:bd:61:3e:e2:2f:e8:d7:2b:a3:9b:47:
a6:91:3f:67:bb:43:45:12:4e:d5:fb:6a:87:cb:0e:
1d:91:0b:dc:25:73:38:36:a8:e6:1f:f2:dd:a8:e9:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:E0:FF:65:71:CF:61:A1:C3:F2:0D:BA:DF:CD:93:67:3B:DB:AA
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:05:a8:40:7b:e8:97:fc:45:84:e0:f2:ae:c5:95:a7:70:c4:
01:91:8e:9c:dd:7b:f1:12:8e:2e:81:d6:29:72:99:f1:79:ef:
1e:2a:1b:63:aa:7a:7d:1e:cb:47:ab:11:82:9e:8c:ab:f7:33:
43:8f:5b:61:cf:a2:76:8f:4d:ed:64:5b:1d:05:b5:87:dd:6f:
fd:db:25:2f:4f:ed:f9:99:5c:23:68:b6:ef:28:96:c4:8d:b2:
03:f2:4e:09:b4:8a:11:f2:01:e2:4b:a1:57:36:df:50:2a:64:
b4:72:f9:0c:70:aa:a4:28:f2:96:3b:7e:d3:26:be:34:86:7d:
d7:6f:c2:c7:52:20:0e:26:ab:f9:d4:c2:e3:7f:9c:9a:32:5b:
8c:b8:06:b0:f6:f9:45:ce:77:ff:d5:4d:d6:97:75:73:92:69:
12:87:50:24:1e:e5:04:5f:37:3d:96:85:f5:40:b3:56:cd:6d:
47:31:87:5d:9d:01:c6:b5:68:63:f8:53:7c:b3:d7:21:c0:55:
c0:92:ae:f6:63:8c:98:c6:f7:dd:67:e6:0a:7b:fc:1f:d9:ac:
87:a9:50:5b:41:cc:bf:06:8f:4c:45:a3:3e:09:de:8a:9b:ce:
95:d5:de:a8:ca:55:0d:97:db:40:9e:c7:29:77:31:f7:54:10:
b4:e5:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:58 2026 by rpki-client