Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: TBHuECiIvdQqRSof6jTF1ya9VtFMZJ9YbdZoYjTkzzs=
Subject key identifier: 21:C1:94:39:E9:B0:5F:0A:9F:E1:58:5D:69:55:75:47:47:17:BB:3D
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019E7CD66228312AD1D6046CA389179AE3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0BED
Signing time: Sun 31 May 2026 07:01:24 +0000
Manifest this update: Sun 31 May 2026 07:01:24 +0000
Manifest next update: Mon 01 Jun 2026 07:01:24 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: vL7DyrJe47p9ic+ADei9R4Cgh0XtXgSf8W5MpcVikZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:d6:62:28:31:2a:d1:d6:04:6c:a3:89:17:9a:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: May 31 07:01:24 2026 GMT
Not After : Jun 1 07:01:24 2026 GMT
Subject: CN=21c19439e9b05f0a9fe1585d695575474717bb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:ce:89:1b:3f:1c:c3:01:ed:67:aa:f8:05:
42:b0:63:fc:59:34:e5:50:ba:d3:77:72:bf:c3:c2:
fe:02:ef:5d:86:b3:34:4a:83:ce:93:f4:3a:b3:61:
74:69:92:27:83:a5:09:29:5f:98:61:eb:c4:a3:20:
c4:77:d6:23:0f:84:fd:1d:f8:b4:3f:fe:09:6a:f2:
5b:0f:b2:60:ca:ef:f2:ec:38:07:e1:21:a0:77:e1:
c8:52:32:99:c0:8e:b2:64:bd:2d:18:60:ad:a8:b1:
d6:04:a2:8e:93:b4:44:4f:41:be:aa:16:69:6f:fd:
d0:c6:54:90:15:71:63:98:dd:f4:20:4a:3a:06:a1:
5a:46:ac:8b:2b:61:cd:6c:c3:4a:0e:31:0b:51:e7:
2c:fa:b9:f9:90:34:cd:fc:bd:2d:b1:58:a4:a8:02:
7b:5a:e5:d5:c2:4b:a9:1e:73:d4:83:06:b6:88:02:
6a:5c:ca:2f:d2:d7:c1:94:c9:58:fd:fd:f9:29:40:
78:46:14:c4:9a:0c:7d:eb:2b:9e:63:30:ab:b3:db:
4f:38:ee:85:e2:64:90:42:73:48:48:90:83:44:d1:
dc:fd:5a:75:bb:28:d6:91:de:2a:6d:b6:bc:ad:dd:
94:41:5c:8d:5d:d7:9c:71:64:ca:76:5b:51:8d:05:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:94:39:E9:B0:5F:0A:9F:E1:58:5D:69:55:75:47:47:17:BB:3D
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:eb:84:10:a3:b1:ad:d3:c6:43:f6:08:2a:38:55:1a:bb:20:
f8:41:c3:83:49:a8:c5:86:84:cb:34:2d:f1:56:31:d9:2c:18:
9c:29:22:ee:ce:31:c8:47:9a:6e:54:ad:50:a9:4b:96:2d:75:
1e:1f:b2:51:89:63:ab:91:59:f3:c5:12:fd:72:52:04:b4:39:
ba:4d:07:b5:f6:01:dd:9a:6c:94:ed:f4:a3:87:2f:33:c6:74:
13:23:40:22:b4:81:82:ca:52:f6:33:ae:bb:27:77:ee:7a:2a:
b7:95:13:a0:45:4a:92:a8:5e:ac:1e:b5:c9:ad:ce:78:9c:ad:
cb:1e:ae:fc:8e:91:e2:9b:3d:31:ed:c4:a1:71:5d:74:1c:1b:
50:93:46:52:8d:8c:5e:1c:8f:34:76:46:b6:9f:2d:3e:be:b8:
e8:47:48:ea:99:08:21:b8:77:9e:c4:6b:1b:fd:97:02:65:c7:
a2:6c:38:82:42:e1:7e:54:69:18:ec:81:56:9f:42:a9:56:00:
3c:5a:93:0d:1d:82:5a:dd:f4:03:75:5e:88:36:b8:54:62:53:
6c:62:30:9b:c7:ea:6d:bc:2a:68:02:33:b8:f8:48:ff:1b:67:
89:9f:12:b9:81:4b:b9:b1:77:c8:fe:ae:99:05:db:75:e7:fa:
8a:1c:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:46:18 2026 by rpki-client