Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: 7DlfEqFAWjNwu/Vy2YMv/jrTnnMfwUxj+0jLvAMOLLU=
Subject key identifier: C1:29:4F:20:EC:F0:0A:D0:B4:D6:F9:08:0B:2D:97:71:61:EA:4D:71
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019D371B2CD9A576690148F1CEA7345B9D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 01:00:20 +0000
Manifest this update: Sun 29 Mar 2026 01:00:20 +0000
Manifest next update: Mon 30 Mar 2026 01:00:20 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: MaGpgDZSUMq5TvJBM4lNqR8hVyY4fQcXCjniHFP+ncQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:2c:d9:a5:76:69:01:48:f1:ce:a7:34:5b:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Mar 29 01:00:20 2026 GMT
Not After : Mar 30 01:00:20 2026 GMT
Subject: CN=c1294f20ecf00ad0b4d6f9080b2d977161ea4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:e9:f5:17:99:d5:af:23:58:14:cf:5f:bf:
f9:91:c5:ac:7f:92:31:aa:6f:b3:e4:e3:9a:f1:70:
19:4d:92:ab:aa:a9:bd:85:56:10:00:38:c6:fa:d9:
2c:11:a6:34:de:39:f0:2b:d7:e1:63:7b:da:41:1e:
11:f1:1e:a3:5c:d7:5e:09:0a:dc:22:d6:cb:2c:43:
75:0d:fb:41:4a:f1:f5:52:90:dd:50:8a:04:dc:35:
77:fc:96:3f:c4:9a:32:b9:fb:ae:a8:f6:8d:c5:29:
cf:2d:a3:d5:50:83:f0:8a:34:99:78:31:bf:ff:80:
30:67:eb:8c:00:6a:a6:e8:f7:ce:d1:cf:eb:f3:1c:
1f:14:b8:18:60:c6:64:ab:cc:8f:2c:92:c8:70:19:
b9:d6:2a:75:5e:54:13:3e:c6:a9:b0:0a:d3:c6:4d:
0a:67:01:cf:36:19:2e:86:b8:21:5d:83:9d:1c:48:
79:ca:39:ae:22:40:42:4e:e1:84:81:3f:ea:d6:31:
a6:16:57:e6:ae:3a:1b:da:e5:de:ae:e8:6f:73:28:
a8:c7:41:ef:8a:17:41:64:7c:3d:31:f1:80:ec:2a:
28:e1:a7:2b:d4:0f:cf:02:77:51:9d:d3:39:46:35:
af:d3:e0:85:c5:60:33:4e:4b:cc:bb:c5:cf:0d:cd:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:4F:20:EC:F0:0A:D0:B4:D6:F9:08:0B:2D:97:71:61:EA:4D:71
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5b:d1:dc:82:1e:b6:99:04:ce:ce:48:5e:98:60:f1:71:0f:
9f:8a:fa:13:ae:f3:66:9a:89:65:7e:a4:c0:93:6c:21:ff:ad:
22:30:6f:0b:44:4e:93:cb:24:46:37:8b:cc:e2:a0:85:84:d5:
9c:5f:9e:73:fa:d0:ef:b2:ee:9c:1b:97:d1:21:2b:9e:cf:dc:
1d:b2:c6:fa:02:03:79:cc:d2:ed:22:bb:36:54:68:51:de:2c:
87:ae:23:ff:fa:79:e9:8e:10:c5:c5:d0:9d:72:9b:90:93:b9:
4d:fe:42:48:db:46:2b:31:3a:f1:60:9d:14:5c:cd:a7:69:9a:
26:6b:89:39:27:9e:32:3a:50:c2:60:1e:b4:69:75:3f:09:1d:
40:7d:31:1d:6f:34:56:8b:91:4f:ff:9c:9e:bd:0e:98:ee:eb:
24:a7:9a:bc:c0:c4:8d:0d:bb:2f:5c:0f:81:8e:1f:4b:d4:f1:
61:e3:d2:aa:da:f3:c3:86:69:82:13:55:e4:96:39:8c:e9:9f:
48:c9:fd:92:74:28:5c:e3:81:d8:be:a3:e3:10:c5:46:d4:d8:
02:64:7a:44:90:0e:e6:fe:16:9d:c7:35:9c:85:76:1a:3a:db:
7a:e6:96:1f:23:5c:77:12:2a:dd:b9:f8:2c:6b:f7:2d:87:38:
0e:bf:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:37 2026 by rpki-client