Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 7JolPuBMKM+UlaSYmOp2kcze4J+rGlx29dcwx8E/cOM=
Subject key identifier: 34:E7:DE:D9:D4:7E:36:13:A7:CE:52:A2:39:06:6E:A5:8C:BD:8A:8D
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019CBEBADE0E6CC3AE5B1181CEB6F35C7AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1729
Signing time: Thu 05 Mar 2026 16:00:43 +0000
Manifest this update: Thu 05 Mar 2026 16:00:43 +0000
Manifest next update: Fri 06 Mar 2026 16:00:43 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: uvVRP1E49ByJ6babbiIL8EiH/fCEO2q3c76Fg24WxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:ba:de:0e:6c:c3:ae:5b:11:81:ce:b6:f3:5c:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Mar 5 16:00:43 2026 GMT
Not After : Mar 6 16:00:43 2026 GMT
Subject: CN=34e7ded9d47e3613a7ce52a239066ea58cbd8a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:97:0c:3b:5a:ba:66:dd:e9:c1:1a:97:7b:
16:e5:02:18:8e:01:2f:9f:ba:8d:70:d5:d3:79:d7:
28:5a:83:b0:48:67:5c:5b:e5:2a:7d:ad:8f:de:05:
7f:6f:e7:8a:33:81:db:55:e1:ef:79:b1:ea:8f:dd:
0c:46:ef:79:b0:1c:c6:c2:36:8a:3a:92:43:77:95:
bf:a2:25:b2:dd:34:7e:56:58:79:d1:04:4f:8e:a8:
f1:e2:49:65:b1:fa:09:bd:48:bb:e6:f7:97:4d:d7:
cc:bb:c5:ae:17:61:db:83:96:a9:0f:55:ad:ef:d1:
4d:8d:34:a5:3a:b5:78:80:89:c5:26:b2:fc:65:25:
5a:cf:3b:64:70:8f:01:dd:70:a0:c1:97:17:24:70:
dc:62:e6:b5:44:b6:8f:38:d6:4d:08:0f:38:84:85:
29:e3:c9:3c:9b:c6:41:b5:2a:1a:40:2e:e5:6b:81:
cc:f4:1d:e4:3e:28:cf:04:3a:5a:7f:51:0e:55:15:
17:83:cf:29:d8:96:28:cd:fd:e5:a5:a3:06:93:84:
90:74:df:6c:42:30:8c:2f:5a:b5:40:ad:9a:be:14:
bf:43:8e:9c:f7:2f:1d:ed:75:cc:df:65:3b:33:87:
41:57:2f:bc:f6:3c:d2:3d:c8:e2:53:79:a7:f2:c2:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:DE:D9:D4:7E:36:13:A7:CE:52:A2:39:06:6E:A5:8C:BD:8A:8D
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:29:dc:9a:8a:f1:63:c5:f5:62:98:08:dd:fe:0a:6b:90:
72:36:a5:8b:58:65:b0:80:d4:91:01:12:24:ca:c5:bd:2d:0d:
06:23:a4:df:eb:b6:0a:89:e7:d6:33:fb:7c:66:bf:e3:6e:0c:
1b:27:97:e8:b6:c8:e1:f3:21:54:44:09:50:51:8e:50:ea:0e:
32:2a:3e:cc:ca:6a:4a:30:03:dd:b5:be:ad:9e:07:db:a5:27:
3d:d4:55:10:9f:2d:ab:e9:87:99:5e:eb:d0:95:89:7a:16:a5:
96:a1:5f:e9:62:8b:fc:7a:81:25:93:91:a9:8c:ac:00:07:1f:
fc:e1:e6:e9:fa:be:3d:cf:47:09:a6:57:c9:2e:c3:99:37:02:
05:77:ee:e2:94:a3:cb:3d:75:b1:04:aa:0c:2c:c5:a4:15:a5:
6c:d5:e2:76:6d:e2:a5:53:7f:83:20:3f:81:88:53:c2:0c:2d:
d3:54:a1:86:e1:d8:0d:f7:fc:b3:ab:e1:96:da:c5:28:47:0c:
dc:57:6f:ca:3a:24:47:d6:41:22:d3:24:ac:c4:5f:2c:43:53:
b4:5f:e3:b4:d7:80:1c:ea:39:95:3f:78:cf:10:cc:57:d6:9a:
50:6b:69:3e:b0:f8:5c:71:67:67:01:df:12:0a:cf:e8:ff:5b:
8c:9a:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:00:01 2026 by rpki-client