Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: 74Tn39sEAm1ZnnXlYD0gL/HEdvq0QO4Jjpmn5NDXe9U=
Subject key identifier: D5:30:C1:07:33:D5:D4:B2:06:76:78:3C:81:B2:00:BA:CD:2D:85:DF
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019E2091B1F517C13F198E57DB8FABD33B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0D00
Signing time: Wed 13 May 2026 09:01:19 +0000
Manifest this update: Wed 13 May 2026 09:01:19 +0000
Manifest next update: Thu 14 May 2026 09:01:19 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: 0qAhguKC+rpLqs2I/3pXHE8oJnvYIhyysTi8uIbeNO8=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:b1:f5:17:c1:3f:19:8e:57:db:8f:ab:d3:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: May 13 09:01:19 2026 GMT
Not After : May 14 09:01:19 2026 GMT
Subject: CN=d530c10733d5d4b20676783c81b200bacd2d85df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:d9:66:b5:8f:e2:6e:a3:2f:01:b1:c9:e3:
29:03:e1:2b:bd:e1:b4:99:b6:f9:a3:29:e5:ad:f5:
16:cb:5d:3b:ac:52:c0:4c:ea:8c:3b:3d:33:41:06:
a5:da:61:cd:11:62:96:21:b0:a2:5e:c2:bf:9f:2c:
7a:8e:dd:89:d9:88:6a:f6:f7:36:40:35:e1:92:35:
e5:bf:91:2e:5d:d5:92:cf:e6:6b:29:54:ae:95:92:
40:b0:af:88:0b:8f:79:e2:0a:75:e5:49:25:17:e7:
71:ad:90:2f:da:2d:37:e0:00:ee:25:35:1e:77:c9:
50:5c:50:f8:7f:72:52:3f:5a:2f:9c:81:44:91:16:
3d:20:cd:0e:df:c4:c6:e6:98:0a:7e:e9:95:c4:31:
be:a7:0c:02:58:6f:5b:b0:b2:05:05:30:c2:69:f0:
1b:db:83:11:19:d3:16:97:37:fc:9e:a2:e5:e8:ae:
3a:cd:7d:f2:f3:b5:9a:b0:de:7a:94:fd:d5:32:eb:
52:c8:1c:25:49:9a:c4:48:b1:c9:c3:5a:cc:67:c8:
bf:fc:3e:e8:86:75:a4:0c:73:5b:bb:32:9d:6c:85:
6c:83:47:3f:12:38:cf:ed:ea:ed:d5:56:a9:e7:5d:
e9:51:20:07:c7:c7:61:0c:27:4b:9e:c1:74:17:a1:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:C1:07:33:D5:D4:B2:06:76:78:3C:81:B2:00:BA:CD:2D:85:DF
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:9d:17:ad:51:95:c0:af:81:36:b6:ff:c1:52:9f:55:c8:
51:68:c7:67:c9:2d:10:2f:1a:ca:95:32:6c:61:d8:9f:6f:2d:
8e:bf:0e:c4:24:b2:5f:86:59:ed:62:77:90:36:23:64:88:94:
d7:84:8d:3d:6c:fd:2f:de:41:53:9f:e7:c4:94:ea:57:a0:7d:
44:02:cd:1a:af:f6:73:84:80:98:e2:48:30:90:4a:05:82:be:
57:ac:9f:10:02:76:c3:a1:c2:21:df:a3:cf:46:24:4c:cb:79:
26:fd:5e:d9:06:56:d5:f5:c3:70:f6:7a:b8:3f:03:7a:2d:af:
68:99:59:94:91:e3:e4:72:f6:2d:02:7b:86:5c:09:85:8e:4a:
84:b9:5e:aa:db:1f:bb:58:68:01:72:5e:1d:5e:15:2a:6e:c9:
70:a2:22:7e:8f:ae:49:8b:f5:05:c5:c9:f0:f9:a4:7f:bd:cf:
b5:df:52:c2:32:79:51:08:88:2b:52:de:82:55:7f:da:eb:81:
33:f2:19:64:84:04:13:e7:c3:e9:67:18:34:48:68:f2:2b:47:
a8:69:0f:cb:ea:6c:2a:81:e9:67:79:b0:9e:71:4c:90:b6:52:
f0:55:1b:4f:d7:ab:00:2f:48:b9:83:00:99:a9:21:6e:ed:91:
d8:14:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:12:35 2026 by rpki-client