Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: OLsTi0qWD2JI7e9OIcb5Z7dlD852QByvAtyP/Z+lmhw=
Subject key identifier: B6:B5:9E:D1:C1:97:26:D2:A0:CC:F0:27:EF:82:78:89:84:89:24:9B
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 01A13A4A125D202CA4682CEA03A5A5B3AED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0E9B
Signing time: Wed 14 Oct 2026 12:01:35 +0000
Manifest this update: Wed 14 Oct 2026 12:01:35 +0000
Manifest next update: Thu 15 Oct 2026 12:01:35 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: T4U1dcmnmsRwMlzPvAQms9huxVaXWCc1BYRSs1UpP80=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:4a:12:5d:20:2c:a4:68:2c:ea:03:a5:a5:b3:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Oct 14 12:01:35 2026 GMT
Not After : Oct 15 12:01:35 2026 GMT
Subject: CN=b6b59ed1c19726d2a0ccf027ef8278898489249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:61:fd:6d:50:7c:58:40:e8:73:1f:00:ec:
e0:57:32:e3:da:38:ca:b9:50:64:5f:40:ed:19:8a:
85:3c:02:b3:fe:17:2b:2f:2e:45:ef:78:00:2e:c0:
c8:f3:7d:56:b2:ee:9a:e6:b1:05:bd:d4:78:63:e1:
29:26:71:78:b2:7f:0f:f8:10:54:4e:fc:8c:70:fb:
20:cb:26:b6:74:29:07:e1:34:ae:2c:8a:d7:a8:cb:
0e:bf:9a:3d:05:05:9c:f4:1e:fc:ba:ac:48:77:8e:
42:96:bb:de:f8:41:26:34:18:ee:70:0e:e9:c4:f6:
e8:7b:a5:4b:36:6c:af:5a:4d:3f:a8:e0:71:cc:9d:
9d:ab:d1:89:db:a4:ab:6b:e8:10:b8:fb:ca:0e:17:
b7:1d:77:c6:ae:be:51:fa:96:ff:fc:54:34:4c:da:
ea:15:eb:1b:73:d3:d9:dd:e6:74:22:95:16:d0:ad:
73:f5:40:69:89:84:80:39:ef:a1:bc:f0:b0:5e:61:
d9:e1:01:f0:90:5e:08:8f:e3:e6:1b:99:d2:21:1b:
bc:d5:34:f0:99:8d:09:3e:f3:83:ff:98:36:7f:92:
3a:b3:af:e9:8d:3e:90:d1:2d:34:08:14:f9:52:36:
da:97:31:17:8f:2c:11:8b:d1:ca:de:6e:07:b8:9b:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:9E:D1:C1:97:26:D2:A0:CC:F0:27:EF:82:78:89:84:89:24:9B
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:cc:cb:cc:0a:01:ff:6e:85:bc:b1:da:ee:21:c9:fc:c1:
6e:a2:f0:bb:be:6e:d5:9a:64:60:3f:4b:d9:7c:9b:e1:71:4b:
89:fd:3b:6c:56:63:5c:45:f3:c3:c7:07:f8:08:72:72:2d:87:
1c:dd:fa:07:11:56:a3:7a:ab:7b:96:bd:9c:bd:d8:09:a6:02:
21:32:70:af:98:04:38:67:3c:1f:05:3f:f8:2b:8b:b2:3d:77:
59:e6:b6:67:23:ed:bb:58:ea:f5:ee:ce:4e:8d:fc:5b:ce:69:
7f:2e:03:e2:9a:f0:6f:65:c9:3f:fb:e2:1d:84:94:50:8e:ff:
61:78:d5:a7:d8:4a:d4:38:80:73:d3:39:44:03:4b:c9:e9:41:
26:e0:3d:5d:6e:01:e3:39:7f:3d:87:bc:39:75:25:34:e7:46:
6e:dd:d3:14:f3:51:87:13:52:d3:3b:96:91:41:7f:5b:c3:97:
87:23:23:10:43:fa:c3:14:a7:77:46:a3:28:5a:29:5a:b5:c3:
41:d3:44:ea:f7:3d:b6:e6:f5:72:77:ee:95:5c:7f:7c:f5:b8:
41:ad:97:1e:48:30:29:74:30:11:f7:34:8e:f1:60:84:9a:cc:
4d:4b:e1:7f:eb:cd:45:36:21:bb:e8:24:b3:24:97:c7:35:14:
8a:de:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:00:28 2026 by rpki-client