Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: MINws8+Z3c8R8ldA7NdV84GhivtZh6FCIr9YR5ZBUlM=
Subject key identifier: B2:C2:88:72:24:1B:01:A1:A7:16:38:A9:AE:73:AE:0D:B2:C6:DF:4A
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 019D37C00C1FCEBE1A8FC1451E758B25411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 0769
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: n4UvSae5Da58FvR6QPs5IfAKIm+2l6GbLdgM1oPIH3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0c:1f:ce:be:1a:8f:c1:45:1e:75:8b:25:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=b2c28872241b01a1a71638a9ae73ae0db2c6df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:c0:7a:88:4b:0c:a7:9b:89:a9:37:e7:9d:
d1:38:d9:28:25:22:8a:11:ff:e3:56:59:01:d6:3e:
99:53:6d:cb:eb:58:7a:25:49:f7:87:f4:d1:83:43:
74:2a:71:55:1a:34:92:24:4e:5e:d2:a2:f7:e1:fd:
a6:68:f8:e3:3d:89:6d:a6:71:23:4a:37:86:85:84:
bc:9d:cd:21:54:44:71:60:c4:5b:10:f5:51:4a:0a:
08:7e:33:af:9e:a2:16:e4:94:24:f5:f4:88:25:2a:
4d:2b:b1:8e:48:ab:e4:8f:0a:15:6d:2b:39:a1:aa:
da:b2:70:74:35:1d:b0:38:14:57:c2:33:44:05:7b:
ca:76:db:39:7e:97:25:ce:b0:4e:9b:c5:88:10:ba:
c1:e6:5a:76:ef:20:ec:75:5a:da:8e:41:1d:30:9b:
e1:24:68:bd:d0:ae:ac:5a:d4:59:da:38:95:47:77:
d0:d9:09:c1:fb:65:68:92:22:b1:c3:73:2d:ec:c1:
89:82:16:db:73:81:52:12:69:df:97:5b:d5:c4:f5:
5a:6f:65:22:ed:af:92:10:c1:f3:ad:1f:88:0d:d4:
10:2f:c0:25:2d:23:98:8b:39:6b:ca:5e:75:89:f2:
09:a1:0c:e1:a5:56:9c:52:a3:96:a9:fd:49:9b:63:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:88:72:24:1B:01:A1:A7:16:38:A9:AE:73:AE:0D:B2:C6:DF:4A
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:f7:e2:a1:a2:cf:c5:bf:b8:c2:cc:58:c2:2e:29:94:b2:
12:f4:31:2c:74:51:2c:1e:cf:10:f4:fc:06:72:05:74:ba:df:
d0:ea:7a:6f:93:3d:6a:a0:21:ea:fb:14:0a:17:d0:e8:ac:57:
72:75:9a:98:f7:fb:41:81:26:1f:1e:c8:90:d1:cd:e3:56:cb:
43:bc:48:87:2b:7e:10:79:74:50:3a:9c:c2:e2:b7:c8:e3:60:
3f:fa:56:58:39:76:e7:9f:01:3d:45:3e:87:1b:2d:b2:12:73:
1b:79:b0:1d:e3:e5:b6:7f:3e:f1:62:a6:17:59:9b:d6:35:fa:
00:eb:02:a0:4b:42:0c:a6:7c:69:3e:87:a3:02:2f:13:a1:28:
69:f7:76:20:86:6e:e2:a4:1a:49:8b:74:f3:20:2d:0d:c0:53:
5a:e5:0e:60:a9:28:64:2c:33:1d:09:ae:4d:15:2e:5b:e0:9e:
8c:b2:e8:cb:a6:9f:ec:45:e8:08:98:7b:df:73:60:fa:5c:38:
1f:99:4a:48:85:02:33:5d:84:f5:26:45:94:48:d9:90:02:28:
5e:7b:cc:55:cb:0d:df:4d:ed:81:c8:b0:28:00:bb:25:47:cc:
02:df:6a:af:7b:ec:88:9f:9e:ed:d4:aa:a9:99:c4:97:18:2f:
ff:c3:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client