Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: RbqiuOc0Wl/NWshmoVoxQWDSvk0zVa94yW61hT/qIk4=
Subject key identifier: 0B:BF:7F:7A:C9:06:72:0A:8D:A9:97:E7:C7:24:8B:D0:EC:D8:28:EB
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019D386665213892038E3129D475B1D1C4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0B45
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: 3t0EE2wbyaFMOC5POETNt/D9kfC2Jyyh6z3EGM5U4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:65:21:38:92:03:8e:31:29:d4:75:b1:d1:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=0bbf7f7ac906720a8da997e7c7248bd0ecd828eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:8c:bc:b9:78:b8:6e:76:fd:47:2a:fb:2a:
75:c7:93:c3:59:54:fb:92:8d:ca:4d:a9:4c:a8:a2:
70:ee:54:7e:89:d6:eb:55:c2:4a:2f:b7:fb:2a:1b:
46:14:9c:05:a8:58:6e:5c:e7:a0:d2:35:f4:db:c3:
e6:03:32:67:96:34:8a:5c:b8:0c:90:bd:bb:74:28:
8f:97:23:24:c4:c9:4d:9f:af:31:52:2e:c4:50:f5:
a4:64:72:7c:5c:5e:cf:ab:20:e4:b0:0f:46:5a:3b:
82:ad:d5:a4:a5:d6:54:aa:95:5d:fa:ff:b4:41:15:
7d:d0:5b:93:ee:90:21:ed:30:78:c3:a8:6f:c4:d9:
ae:91:b3:49:b0:a1:8e:a2:16:81:1f:b5:bc:ea:d7:
2f:c0:31:c0:f0:50:c4:4d:11:40:3e:63:27:d1:2d:
6c:27:9b:10:e8:9b:a1:9c:83:2f:fe:94:0d:da:3c:
1e:3d:1a:37:e3:d0:fd:ab:d5:a6:aa:cc:f5:8a:81:
e5:d1:32:cb:20:0e:f4:2f:35:03:d4:81:e7:f0:3d:
db:6f:4b:23:cb:0c:ab:69:d8:45:4f:dd:47:74:eb:
da:d5:81:fc:a1:cf:85:91:24:1f:f8:c4:fe:fb:cb:
ac:d9:7a:27:26:bf:31:c6:24:93:43:8a:13:5a:0d:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:7F:7A:C9:06:72:0A:8D:A9:97:E7:C7:24:8B:D0:EC:D8:28:EB
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1c:2d:28:2a:27:cc:31:7a:00:9a:02:ec:46:24:cd:e2:8a:
f8:f8:32:e6:5d:15:25:b1:a1:8c:a5:48:22:5b:ba:0a:33:fe:
e8:3c:ed:1f:4d:e7:b1:d6:43:2b:2d:1a:ee:02:81:4d:0b:3d:
b5:b0:17:6a:02:20:8a:09:79:25:42:48:fb:98:c1:17:74:1e:
00:97:3a:78:88:b8:b7:f7:06:09:c5:16:7c:ac:77:5e:c0:34:
98:f5:76:2f:44:ca:20:3e:d8:d8:a4:97:0e:3c:d1:17:31:c5:
87:8f:8a:2e:db:e8:be:b6:aa:54:16:49:56:f2:e8:24:e9:9c:
b6:b9:83:69:2c:3f:4e:e0:81:52:85:45:c9:9f:3f:ce:7a:57:
be:e6:52:0b:8e:8a:ec:a0:92:43:a2:6e:3a:0c:a6:36:32:cf:
c5:4e:69:3a:97:ce:74:cd:9e:0d:b7:c8:f2:8f:9e:5e:e4:e3:
0c:b3:51:d9:97:57:a2:02:45:ad:9c:bb:ec:91:14:98:b0:9e:
04:12:7f:91:ec:7d:dc:21:90:36:d7:b1:61:79:c5:8f:3b:96:
7a:50:c2:13:7c:26:7e:16:12:40:6d:d4:6a:9c:2f:12:3b:c5:
7a:36:7a:47:5b:1c:b7:70:94:ed:f2:76:55:6b:3c:e2:45:63:
cf:82:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:03 2026 by rpki-client