Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: Y5bDAbyEsYbX8HuA096Yb19IE3QDVSqiJrYtDxiO6T4=
Subject key identifier: 60:5C:07:2E:34:CF:2B:74:B7:B8:08:FD:39:5E:B6:BB:E7:C4:6F:0A
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019D27729470970AA3C542823997EF390E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0C7F
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: rJT8XMSUF/2xGkO5wUMR25J2OpJAq6YfHe6dsm1t8Pg=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:94:70:97:0a:a3:c5:42:82:39:97:ef:39:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=605c072e34cf2b74b7b808fd395eb6bbe7c46f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:ab:7a:27:9b:8e:30:2f:a6:36:ca:3b:7c:
60:af:eb:79:b8:89:31:65:8d:a3:24:2b:15:90:07:
e7:84:f4:cd:7c:58:dc:a8:fc:b6:fc:73:fe:b6:9b:
8f:4d:c9:45:01:70:b8:1a:7e:01:13:a6:ff:72:21:
38:56:f2:81:87:aa:e4:ea:8b:dc:19:af:8b:ae:fc:
df:4f:4c:a7:c6:6e:68:a6:5f:79:ee:77:0e:3c:16:
52:98:c6:63:32:a5:dd:33:10:70:20:8c:04:06:22:
f3:b1:3e:7b:5f:07:30:42:39:50:18:1c:86:6a:87:
a8:75:e4:13:2b:31:a9:ac:3f:1d:79:85:c4:ca:4b:
a0:56:98:a7:84:ab:91:74:9b:bf:1a:2c:54:10:9d:
1f:68:eb:f2:c7:e1:a2:ed:45:d0:ba:68:ee:9c:b2:
25:16:17:6b:9f:96:4a:a7:84:6d:65:f2:a8:b6:a3:
41:ee:66:24:17:da:ff:fd:4d:06:6b:2b:45:86:8d:
a3:06:6b:56:65:8a:1c:53:00:ab:dd:63:55:9e:36:
f2:cf:31:3b:f9:6e:a3:99:89:8a:0b:b4:b7:fc:01:
75:06:c2:b0:ac:f3:a0:80:6a:56:31:8d:9e:de:f2:
0a:ae:bc:ce:e7:d7:2c:e8:48:df:8a:c9:9c:1e:af:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:07:2E:34:CF:2B:74:B7:B8:08:FD:39:5E:B6:BB:E7:C4:6F:0A
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:17:0c:15:72:b1:ab:44:f0:5d:65:2f:6d:5d:41:5a:21:
1a:6b:37:25:47:6f:f2:9b:a5:bd:24:1a:51:57:c9:23:bc:13:
a7:61:71:7f:06:2b:83:72:05:51:e4:d8:dc:8f:05:fa:35:b6:
af:67:f7:7b:ae:ef:2c:91:d8:c9:c8:03:ca:78:2d:14:89:d6:
c1:da:a0:48:ed:c1:40:78:a6:ce:a1:f3:54:3c:88:b2:91:14:
24:b5:1a:ca:21:76:99:8a:05:d7:9a:08:64:d7:f9:a9:e9:c5:
d3:da:2f:3e:aa:3e:b4:1a:f0:c4:f1:af:ad:26:03:1f:cd:70:
d5:54:17:d4:59:b2:74:db:e8:d1:25:6f:4c:f3:1b:04:d1:f9:
15:59:7c:2a:06:d2:0d:26:8d:a0:34:60:96:8d:e1:c1:c0:03:
ba:97:3b:3c:c6:71:ea:88:ff:ae:71:5d:1a:00:95:ff:ef:ef:
21:95:11:5b:3c:1b:46:ff:4f:f2:a8:fc:b6:71:51:2e:92:84:
e0:1b:22:88:25:35:be:80:58:81:23:7d:02:2c:53:93:02:ed:
c5:18:13:5b:c1:9f:d3:19:b7:9d:7d:2b:96:15:fc:90:d7:21:
72:af:d2:c3:cb:aa:43:13:90:6e:2f:95:40:bb:a2:73:be:ae:
5e:a7:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:16 2026 by rpki-client