Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: CkCoVrP8qFok6lz3JVJOIDM/eztv+3qywZ+Gn7HbzD4=
Subject key identifier: CB:61:C4:B1:6D:FC:00:47:34:69:0C:16:98:C7:E4:24:37:C3:CF:F2
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019D28F27A1F636493E78DA0C585D7FFFDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 10D6
Signing time: Thu 26 Mar 2026 07:01:12 +0000
Manifest this update: Thu 26 Mar 2026 07:01:12 +0000
Manifest next update: Fri 27 Mar 2026 07:01:12 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: xj7BYGWrrANpBfefpuI/s1plcJB0UMMbcv7He54lOJI=)
2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7a:1f:63:64:93:e7:8d:a0:c5:85:d7:ff:fd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Mar 26 07:01:12 2026 GMT
Not After : Mar 27 07:01:12 2026 GMT
Subject: CN=cb61c4b16dfc004734690c1698c7e42437c3cff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:0b:df:f0:b9:e4:e5:13:bc:c8:ed:62:5c:
31:04:fb:2f:89:66:c1:37:2d:26:1c:91:1c:6e:55:
49:9a:71:91:5a:3e:b0:b1:d5:f7:f6:52:f6:47:7d:
4c:cc:a9:a8:ad:79:7e:8a:7c:3a:32:01:b4:09:12:
b1:45:ac:56:df:19:9a:42:8c:8e:ab:38:5e:26:53:
86:cc:f6:c5:09:04:61:20:ad:d1:e5:c0:c8:be:c0:
d9:9d:f7:a4:d4:c9:d3:17:65:24:01:88:70:03:bf:
cf:34:d0:d0:da:5d:9c:dd:e3:b9:03:e5:9c:f4:d1:
84:fa:5f:e1:b8:9f:c1:13:6d:7d:fe:a8:d9:78:6a:
b8:1b:f6:a7:cb:93:f6:58:23:f0:23:62:b7:32:c9:
81:4c:3e:d8:af:76:dd:b3:91:0c:15:1d:92:2f:5b:
04:c0:08:e1:b2:b3:d8:05:a8:57:3b:46:f6:91:09:
cc:35:21:f5:8e:82:61:6e:e4:8f:b2:46:c2:8c:c8:
f2:b2:ce:37:11:18:ca:66:a4:37:46:50:09:87:b3:
0d:c4:8e:53:04:03:bb:69:64:40:d9:8c:09:1d:4c:
1e:ee:34:d2:c2:a0:74:5a:be:d7:f8:9f:3c:21:0c:
2c:c8:75:db:ce:1f:37:a3:21:24:f8:72:0c:d0:d3:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:C4:B1:6D:FC:00:47:34:69:0C:16:98:C7:E4:24:37:C3:CF:F2
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d7:74:bf:e4:f6:3c:46:a8:7c:5a:9d:02:da:09:1b:dd:6c:
14:15:8d:b8:aa:14:29:fa:0d:5c:11:50:51:61:ca:7b:c8:5e:
25:ce:c7:57:15:0d:e4:6f:99:97:3c:c3:c8:96:76:b2:d1:c5:
04:88:56:91:f3:e3:a9:bd:a0:fc:46:9f:f8:c0:29:86:b0:86:
1b:00:12:e6:23:bc:f1:2c:01:8b:2c:d6:44:af:52:7f:6c:f5:
58:6c:14:a9:9b:07:de:e2:6a:32:d9:b4:e4:8e:b3:56:0d:ca:
3f:95:6e:61:35:44:51:95:78:40:29:fc:09:20:e8:f9:17:8b:
61:5b:08:39:f9:48:2c:0e:2a:9f:cc:81:b2:09:93:fe:70:fb:
b0:9f:58:f7:df:6e:31:7f:51:8e:28:1b:ef:d2:76:63:ba:ab:
c9:40:37:b7:fb:fd:b5:e7:83:b8:3a:94:5e:6d:a2:19:fc:ce:
1a:be:82:6e:34:d4:db:e3:ce:03:0b:ee:4a:e5:a5:8a:c7:69:
f3:df:6e:f2:27:a2:7a:41:33:07:2e:ab:e5:5b:70:59:90:7a:
f7:98:3d:23:c4:93:e3:f6:0c:71:2a:99:e3:b8:27:01:60:77:
5c:72:1c:2b:ab:c5:9f:0a:ad:0b:66:d3:f4:84:96:99:90:4b:
09:75:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:17 2026 by rpki-client