Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: OJsx9g04+/UjTt2I0Dr2WqrAS5ZjQhG1nEuX56S2Rw4=
Subject key identifier: C3:46:93:4B:E8:D2:20:53:D4:EF:24:EF:2C:9E:F8:7B:7B:B0:C0:DE
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019F45AE4625AAB0D64C5AE12D43F235CD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1878
Signing time: Thu 09 Jul 2026 07:01:16 +0000
Manifest this update: Thu 09 Jul 2026 07:01:16 +0000
Manifest next update: Fri 10 Jul 2026 07:01:16 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: teAqKrQzECsPularzhvP2nc/Lu1MsFrmZlLmkyk/Ll0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:ae:46:25:aa:b0:d6:4c:5a:e1:2d:43:f2:35:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jul 9 07:01:16 2026 GMT
Not After : Jul 10 07:01:16 2026 GMT
Subject: CN=c346934be8d22053d4ef24ef2c9ef87b7bb0c0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:bc:13:61:60:64:51:f5:72:5f:6f:e2:5b:
48:ff:33:cc:08:dc:4a:8f:80:f2:9c:e8:bc:21:46:
63:b9:41:7e:c9:91:47:f7:96:ff:a9:bc:0d:d2:f7:
e2:07:7c:57:de:e8:a4:e8:55:2b:33:4c:24:30:98:
6b:b5:03:24:43:88:19:5e:1b:45:7d:5e:e9:73:41:
6c:b3:c9:e4:9c:fb:9f:b8:bd:44:9e:06:0c:4c:7f:
5f:02:94:81:85:70:ad:ed:40:a8:e8:b6:41:e8:bd:
bf:5f:cd:25:f0:b0:51:dc:b7:16:2a:87:9a:2a:8b:
88:b0:04:4d:92:d2:f1:37:76:01:f2:5c:6b:fd:e6:
7b:a5:16:5a:1b:87:e0:30:e8:76:47:9b:6e:b4:df:
de:c0:c8:b1:fb:c8:05:b2:76:bd:5f:0d:57:69:ab:
47:2e:06:91:8e:bb:b2:c3:5b:c7:c2:29:3f:de:f1:
7d:16:74:70:6b:a8:29:fa:36:7c:8e:6b:9d:dc:8d:
bd:9b:16:4e:93:d4:46:c5:ef:53:6e:cd:55:11:ee:
39:71:65:b3:a8:be:a4:99:e5:7f:89:ad:ec:4e:65:
6f:c9:7c:31:03:3b:d2:5a:86:53:dc:95:51:1f:a0:
7f:88:46:7a:29:f1:93:24:ce:02:19:9d:71:0e:83:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:93:4B:E8:D2:20:53:D4:EF:24:EF:2C:9E:F8:7B:7B:B0:C0:DE
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:18:39:c9:56:6b:67:bf:94:97:0e:cf:74:db:88:d8:74:be:
e4:c5:ba:ff:1b:c6:97:71:65:0d:d2:11:11:28:e4:76:3f:4d:
47:db:44:42:93:0b:0a:1c:c2:87:e8:19:33:b0:49:a3:6a:e3:
ee:f7:e4:e2:da:67:59:ff:f6:23:6f:e2:63:01:74:40:43:57:
43:1e:30:29:7f:cd:34:75:b8:f9:44:61:02:07:c7:2b:5b:dd:
70:a1:10:83:ce:ac:f8:57:cf:27:cf:fa:09:2e:e4:2b:bd:bb:
cd:c5:36:d9:9b:3b:60:87:9d:24:2b:00:10:84:30:27:e1:34:
a2:8e:f9:3a:15:97:e6:03:76:58:c2:93:59:36:14:3e:11:e5:
7d:e4:63:91:73:21:25:5e:8f:3a:65:ac:ab:fe:9c:13:01:df:
4c:a3:0f:1c:12:e1:14:cf:3a:e2:6d:f9:5c:46:23:ff:e1:fa:
a4:54:90:7e:5f:33:6c:30:33:5c:b0:e1:8f:d8:c1:44:99:21:
08:ed:4c:f6:2d:69:77:1b:6c:4b:57:88:29:67:02:1a:de:16:
fb:8e:ad:1e:da:46:61:6f:78:80:ea:35:55:de:43:ef:49:7c:
b4:85:74:e4:47:53:72:e2:5a:25:c4:2a:c0:6d:85:88:ba:72:
8a:b1:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:54:03 2026 by rpki-client