Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: R870swEfe2/4uvxlWC6lzHaZbIPYHSZ06ZVDnlNhelY=
Subject key identifier: A9:3C:83:77:63:6F:88:9A:16:96:5A:FC:5B:97:BA:A8:78:16:19:CA
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019F935C50520DB85BBB9539087D36B9CFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0DC0
Signing time: Fri 24 Jul 2026 09:02:08 +0000
Manifest this update: Fri 24 Jul 2026 09:02:08 +0000
Manifest next update: Sat 25 Jul 2026 09:02:08 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: HVdWkCVNCXiLzR42jh+gX7DFViJlOs7x+gjcZAQNE0U=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:50:52:0d:b8:5b:bb:95:39:08:7d:36:b9:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Jul 24 09:02:08 2026 GMT
Not After : Jul 25 09:02:08 2026 GMT
Subject: CN=a93c8377636f889a16965afc5b97baa8781619ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:8d:1c:58:5d:84:e2:79:8b:62:71:ee:2b:
f4:b3:50:5e:2a:ad:5e:ba:32:81:b1:e3:9f:32:f2:
30:0f:d7:db:7b:39:33:09:2f:3e:d1:e7:2a:3c:3a:
a6:9f:ad:5f:0b:06:74:38:75:13:14:bd:30:1c:3f:
4c:7c:8f:af:57:3b:e5:e7:de:e7:b3:3a:81:38:75:
5e:af:33:8f:06:93:f1:a8:09:af:f5:76:1d:77:5a:
b5:d1:0c:46:52:b2:db:2f:db:bc:78:73:5d:66:c0:
53:54:c8:80:ff:71:94:45:8a:d5:03:10:d0:aa:32:
71:e4:70:97:27:74:00:35:54:3f:02:e2:d2:b9:71:
e2:76:3f:7c:ad:67:6f:04:35:66:e3:da:f8:a9:ba:
b3:47:16:6e:69:60:b3:dd:91:38:0e:df:2a:89:7b:
8c:d9:73:4c:05:c7:94:a8:ee:a9:76:d8:e7:8c:d0:
3b:c5:90:df:d2:37:6c:32:0a:63:8d:28:b6:59:5f:
0b:7a:8f:8a:cf:5f:3c:1d:7b:89:e7:71:4c:3d:cb:
eb:ad:d6:1f:0b:a8:64:32:c6:26:c2:66:a7:95:b1:
e1:7d:6b:ae:ad:95:b5:51:4b:de:4a:cd:d9:53:c7:
98:fc:93:d1:31:91:1c:d2:53:dd:d2:4e:ae:e7:8c:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:83:77:63:6F:88:9A:16:96:5A:FC:5B:97:BA:A8:78:16:19:CA
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:45:da:ef:09:99:50:0b:7a:7c:e6:e7:28:31:73:f8:95:
10:2b:5c:19:e0:15:7d:a2:01:ba:b0:9e:5e:53:89:53:a6:6f:
d6:13:0c:85:85:1a:e6:4a:d3:4d:a9:93:86:5d:79:d8:1e:46:
c2:4b:9e:71:0b:d1:cf:6f:11:63:a9:79:d6:58:ad:62:de:24:
a0:89:1f:88:89:a0:da:bd:61:bc:7e:fd:42:20:55:20:50:75:
7b:11:11:e4:94:cc:5f:21:c1:33:c4:af:44:65:73:1a:43:83:
b0:66:a0:3a:92:11:fd:68:67:37:3d:bc:55:0f:fa:5e:0e:77:
8e:71:a1:aa:e3:fe:39:a8:54:9d:4f:a1:4b:65:dd:0c:a7:b8:
e3:84:f0:cf:2d:8f:6f:38:e1:d9:ff:a5:28:ac:d7:cf:45:91:
2a:68:82:f8:12:50:81:f3:cd:c1:1c:b2:1b:0c:e0:cd:17:05:
1d:d3:2e:ed:a6:85:26:8c:76:74:6d:8f:63:1b:33:26:c3:1a:
c2:3b:85:4f:1a:59:06:e3:9d:ec:aa:7f:bb:3c:a6:4b:ea:39:
15:60:8e:81:2d:2b:26:95:99:c7:b1:15:9e:86:d2:3b:93:1d:
75:92:69:fa:98:0b:15:ab:a9:7c:c2:68:67:f0:07:af:12:63:
c9:06:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:25 2026 by rpki-client