Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: d9M5qP6L+4ebUNWBkLbLy2/5pYlEwPnaxYjv5/VnrQY=
Subject key identifier: EB:06:B4:A4:7A:96:CD:19:43:BF:DA:D4:DB:68:16:75:01:15:C2:31
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 019D3909C3A0E33F01DCDFA2884DAFCD58AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 17A6
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: EBzXiHlpimPraKDCf+bC0PLm22TELg/XrWe0ohOxtXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c3:a0:e3:3f:01:dc:df:a2:88:4d:af:cd:58:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=eb06b4a47a96cd1943bfdad4db6816750115c231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:28:c3:64:38:d6:57:14:b9:be:9d:f3:a1:
01:95:d0:ec:f3:b9:97:35:2a:f4:4c:aa:5d:00:aa:
6d:40:2b:0e:72:eb:51:f5:1c:2d:a2:09:3a:91:d4:
2a:e0:23:20:ac:18:8f:64:0c:98:01:af:a8:65:f4:
b9:c8:67:ba:65:3b:7c:76:01:55:63:bc:7c:1b:2c:
74:5d:3f:da:d8:45:b6:75:32:fb:9a:72:36:e7:cf:
d0:67:8e:2a:bd:8b:0c:23:d5:35:e3:ec:03:3e:da:
59:f3:0e:44:a0:cb:f9:df:33:39:86:a7:95:4a:cf:
9e:59:26:97:00:eb:74:66:94:ac:40:8f:40:93:3b:
8a:8b:4f:8f:85:8d:f2:7f:9c:0b:18:f5:26:8b:3d:
6a:7b:e4:b8:a1:dc:fc:e9:8f:96:5b:f9:98:3c:3e:
61:08:5d:0a:76:55:71:29:50:4c:c7:5e:f8:59:7b:
41:2e:04:57:ca:f9:5e:52:a1:a2:8d:98:bc:2f:c5:
7f:75:b1:00:01:eb:68:78:68:2a:31:7d:86:fc:f5:
57:90:72:86:a5:26:ec:89:e0:92:4f:c5:44:9a:1f:
09:7e:c9:65:9d:c9:8f:f5:78:98:f3:22:5a:33:21:
09:13:62:29:d5:20:6f:98:7f:50:8d:8c:d1:4d:ff:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:B4:A4:7A:96:CD:19:43:BF:DA:D4:DB:68:16:75:01:15:C2:31
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b9:a1:60:b5:63:18:57:b8:a5:6b:df:16:5c:3f:90:7b:f2:
42:73:38:82:a8:02:6f:f5:e3:7a:b9:ed:4a:ff:c1:86:17:c0:
fe:94:e1:b6:82:43:78:3e:fb:5d:43:4d:1c:83:d9:71:7e:a7:
77:87:cf:b9:69:1d:cd:39:20:dc:1a:7a:27:db:31:f3:0f:12:
29:ab:b4:d8:0c:07:70:f9:e4:f6:8c:3f:aa:2c:17:e4:60:4a:
a7:ed:65:cd:f7:d7:f8:4c:1a:e3:ee:1f:64:79:fd:87:3e:2e:
da:55:74:c9:08:12:05:09:38:89:9f:de:0b:ed:86:bd:f5:bd:
f0:c4:23:67:fa:b7:e4:9a:31:fa:cc:37:26:ad:32:18:f0:ee:
54:de:fa:58:1a:7a:af:c7:da:81:75:18:ac:6f:2f:1b:82:17:
e2:21:16:d7:63:39:d7:cb:b9:5b:b0:0c:36:a5:6b:7d:b9:02:
d5:33:00:63:e7:a3:c7:35:74:9b:31:49:a2:97:d2:54:24:95:
fd:33:65:e4:a5:c8:3c:d5:82:34:76:af:aa:cf:f4:f6:f7:46:
4f:3b:ed:5a:e4:57:73:63:49:e4:61:5d:64:fd:21:4d:1b:ae:
32:94:bb:c2:72:79:68:d9:c7:fa:66:41:2b:4e:85:02:ea:e3:
c4:af:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client