Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: VmtFRMGN4VmNyTCRLh7xd1QsHuwUrcJCCLX5XKDWHEE=
Subject key identifier: 3A:AF:E7:B1:2C:CA:93:22:84:DC:39:01:9F:48:2B:AD:E2:22:A0:97
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 019D3978023D4BEAEEA5CA12AC5959D828D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 1741
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: Ego0nl6qnumbw-BU5_acGm_TtM8.roa (hash: 7c/b4633erpOytsAafi0TuyOCeY/FHIybW7GxJJgywE=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: I/2WYhsz+2CGK2vzhOHdja2EATk9D1ziGQc7DyCMhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:02:3d:4b:ea:ee:a5:ca:12:ac:59:59:d8:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=3aafe7b12cca932284dc39019f482bade222a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:88:78:51:71:9b:f2:26:15:97:00:5f:f0:
45:27:47:51:b7:a4:2d:3d:e2:42:7f:94:7d:84:7a:
1d:8e:bc:1b:41:f9:1f:03:a7:9c:c2:cc:fa:33:92:
60:4b:78:10:b3:f6:89:62:92:a3:0c:1a:2c:74:b9:
10:1f:10:5a:6e:f4:d8:a1:1b:2d:45:98:c1:21:dc:
0d:b3:54:08:f2:17:7e:33:dc:c8:9f:81:40:7f:66:
81:8c:9d:d0:01:ec:3d:2a:20:7c:47:da:ae:f1:0f:
c1:70:5c:aa:0e:a7:6a:c1:5a:c9:6e:4b:ac:de:15:
de:1e:8d:08:ae:ff:9a:3b:95:df:da:91:f2:af:44:
7f:88:43:f4:5e:7e:26:9f:fc:9b:59:48:e6:95:1e:
0e:a7:c1:d4:65:2d:c5:65:aa:31:a8:15:74:d3:bf:
73:a1:1e:04:7a:f1:3e:b5:6d:dd:7f:f4:fc:ad:0e:
31:40:9a:ba:3a:eb:ab:98:e6:30:80:9b:ac:44:b3:
6d:53:c4:2c:6f:c0:a3:ab:15:d0:2e:10:77:a3:30:
5c:72:16:11:c0:c7:77:5c:02:03:d8:db:47:95:d5:
ac:71:e0:24:c9:60:59:6d:aa:6b:d1:45:f9:91:5a:
64:a2:91:d9:5e:f3:72:84:a4:68:9c:dc:d8:11:e4:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:E7:B1:2C:CA:93:22:84:DC:39:01:9F:48:2B:AD:E2:22:A0:97
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c4:a6:36:a6:14:4d:ed:45:f5:21:fa:4e:fc:0b:fd:d3:ff:
49:6e:93:f8:cb:7e:99:39:2e:67:f0:61:27:17:b5:0e:b0:38:
cf:7a:d2:ed:b9:86:cb:98:6e:94:04:70:ad:de:f7:a1:f8:8f:
b8:83:7c:8b:09:03:8e:18:3e:6d:bd:53:5f:fe:7f:52:01:80:
6c:1d:94:02:84:4f:49:2a:94:24:aa:4a:6c:ad:41:62:f4:05:
64:6c:f7:fa:62:b2:ff:ee:f9:c6:ca:a3:54:01:16:82:bd:6d:
27:58:47:a2:18:fa:be:39:fd:a5:16:de:7d:01:46:78:80:aa:
52:fc:49:de:e4:de:18:1b:15:2a:f7:7e:ea:f7:f3:8e:f7:98:
72:ee:39:ea:4d:77:e4:fc:af:fa:d3:96:4c:ff:1a:2f:93:c3:
27:c9:0e:26:a7:60:73:b0:bc:35:96:3f:65:33:0a:b6:56:8f:
50:a9:9a:2e:b7:90:98:fc:b7:47:68:03:26:57:9f:a7:6c:da:
c7:4f:44:25:a2:88:a5:59:9f:40:86:a1:dd:cd:bc:54:59:73:
a4:56:27:e4:57:6c:49:bc:bc:38:03:a8:b0:32:64:c9:8c:34:
e7:bf:67:7d:52:aa:26:73:6f:3b:b6:54:69:c7:b2:d1:17:cc:
95:fe:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:23 2026 by rpki-client