Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: MBaJxnjTbMy8RFRXGolwiOR+dHj3HQiTc/uNnXtDuVg=
Subject key identifier: 57:C1:57:B8:AD:FF:92:88:34:F9:11:62:EC:BC:81:01:1E:18:E0:08
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019D270440A0D28E1AEA5334BB5AA2CDF486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 07F4
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: yCZRnSdpVTe4ULp9M4GZIAnLbV7545Q5WIyPAWIjyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:40:a0:d2:8e:1a:ea:53:34:bb:5a:a2:cd:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=57c157b8adff928834f91162ecbc81011e18e008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:b2:dc:b8:4e:24:82:42:a0:1f:80:b8:19:
a8:3e:41:ec:0b:5d:71:36:f7:3a:a7:07:88:23:27:
19:d0:49:45:40:0f:9b:48:d8:b8:5d:b4:a0:fd:89:
d3:35:68:53:72:53:1e:12:43:6a:69:c8:e5:9f:45:
b0:65:49:ad:24:9d:24:3c:cd:4c:ab:24:d4:f0:55:
c5:6f:22:44:8f:08:7c:71:5f:e4:b2:3a:f6:52:da:
58:16:e7:43:23:d3:6d:93:f6:1e:01:5f:73:6a:7e:
f0:48:23:84:a0:0f:e1:b5:a0:6f:70:dc:40:f1:76:
c4:1d:4e:fc:6e:55:76:70:c9:3a:68:bc:82:3c:4d:
d4:1c:f8:f2:46:03:21:25:02:2c:19:c8:70:5c:4b:
6a:4e:93:ad:16:0c:47:b4:82:6c:43:aa:1b:5d:90:
68:d6:13:0a:2d:e2:91:44:35:26:f2:45:a9:4a:c6:
0b:cf:3a:5f:50:55:4d:3e:fc:d1:ce:67:00:e9:83:
18:08:fb:7c:e0:9c:78:ad:f8:a9:25:97:af:b1:0d:
68:d6:44:be:8a:0b:16:cc:99:58:89:8d:69:6f:36:
50:85:e4:87:44:68:b8:58:80:1f:fd:e0:88:97:7b:
7f:29:bf:66:ae:b0:d7:03:85:3a:2f:0e:58:9e:75:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:57:B8:AD:FF:92:88:34:F9:11:62:EC:BC:81:01:1E:18:E0:08
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:00:7a:9a:46:ca:6f:1f:b5:61:3a:5e:1c:f5:e5:f3:ad:
62:5d:f0:68:8a:b4:0b:d0:80:aa:f3:61:64:bd:dc:2c:d7:22:
4e:89:4f:e1:f1:b4:6c:00:77:c5:7d:11:9c:dd:e8:b3:43:a7:
61:a7:40:53:44:30:a3:87:36:15:16:00:28:f2:c9:14:cf:7b:
77:bd:f3:5b:47:c4:a2:cd:1d:ec:be:e2:74:99:08:8d:9e:9c:
3d:4b:06:41:dd:69:3e:5f:41:c9:e4:9d:a1:3f:ff:c7:ae:3a:
22:54:82:3b:55:d4:b3:04:0f:a0:9e:9b:59:94:f3:45:56:05:
2f:81:53:a6:ed:43:d0:27:cb:8a:ed:e4:89:fa:b1:82:c3:84:
5a:32:47:2c:02:80:34:e4:79:c8:77:52:9c:c9:ba:19:7c:c6:
5c:f6:64:e4:a4:9f:6e:4a:4b:96:59:e3:5f:cb:95:06:f9:4b:
cb:03:ba:ea:69:c1:b2:59:41:61:e4:65:b3:4c:95:5b:7f:ac:
cd:4b:98:97:96:c3:2b:be:ab:55:84:9b:e6:44:77:72:87:58:
5c:ba:1c:f2:ed:9f:0e:d6:13:19:da:ea:af:0f:89:b4:14:6a:
91:fd:3d:33:a6:e4:dd:a2:be:4a:ec:7c:70:d1:bb:f7:2c:de:
8f:70:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:58 2026 by rpki-client