Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: kl5qiL7qvp3dL0m1BjsvZ0bsfoQCNaNARZtrUERtFi8=
Subject key identifier: DB:98:35:65:01:A0:00:F4:AA:A2:58:85:B1:1D:C2:09:9E:4D:D2:B1
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019FFB6D615A6A3BE9F8E808D493BE03D525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1707
Signing time: Thu 13 Aug 2026 14:01:17 +0000
Manifest this update: Thu 13 Aug 2026 14:01:17 +0000
Manifest next update: Fri 14 Aug 2026 14:01:17 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: M9kntSiQZooezSnzG05oKPFqeI6rh0NSGANUIBJZUR8=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:6d:61:5a:6a:3b:e9:f8:e8:08:d4:93:be:03:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Aug 13 14:01:17 2026 GMT
Not After : Aug 14 14:01:17 2026 GMT
Subject: CN=db98356501a000f4aaa25885b11dc2099e4dd2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:0e:8f:17:cf:4c:72:df:58:23:56:5c:64:
c0:7d:6f:d8:38:35:33:5b:51:4c:8b:e1:ec:22:01:
06:36:ea:55:c8:9a:3f:70:dc:4f:cf:0d:c8:0a:f0:
d1:bf:07:8d:10:8e:b0:c4:e6:0b:81:70:ba:bb:9c:
bf:67:53:ea:80:6b:da:88:42:ee:d3:5d:ca:f0:b9:
29:62:c3:75:67:9a:d0:12:d1:42:20:9e:27:b0:35:
c8:52:b7:8a:3a:d0:3c:64:ea:50:3b:69:01:03:d1:
b9:13:97:d0:75:a1:87:33:cc:df:7b:c0:6e:86:89:
f1:cb:a9:b6:70:a5:3f:b6:fd:3f:fa:54:fc:a0:04:
be:02:97:51:15:9b:f4:35:8b:b2:29:57:62:3f:15:
21:e2:42:79:23:3a:d9:95:e2:3a:ce:0e:24:d8:fe:
7c:33:39:26:51:e8:93:bc:b1:85:80:ca:db:c6:43:
10:ab:55:24:11:ee:75:d8:55:64:c2:15:98:4a:d4:
fe:fc:f5:ea:10:9b:0c:fc:70:e6:b0:c0:b5:81:ec:
c1:e4:73:3c:97:28:03:f0:3d:36:7e:85:72:f1:55:
73:ac:4b:e5:29:02:01:a5:85:1e:1e:3a:b9:95:1f:
36:6e:df:c3:42:8d:ce:3f:a0:b1:fc:87:8f:d2:89:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:98:35:65:01:A0:00:F4:AA:A2:58:85:B1:1D:C2:09:9E:4D:D2:B1
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:92:26:04:a4:10:0e:92:db:70:d2:4f:47:bd:3e:a9:b1:74:
6b:2a:5d:92:ad:3f:98:d8:c9:ca:7c:69:1d:0d:93:0f:a5:00:
54:5b:bb:e4:61:a3:9b:cf:21:ea:18:23:c9:59:cc:bb:6f:17:
42:34:ce:0b:82:85:be:b7:24:62:31:83:0b:88:e1:2e:2c:16:
a1:cc:f4:8e:07:c2:37:73:c4:bf:f8:7d:97:85:29:92:3b:3e:
a6:ee:7d:33:83:74:0b:1d:ad:0a:05:c1:79:bb:5f:0e:b8:22:
49:a6:71:79:27:3f:22:af:fa:cb:3d:4f:4e:58:5a:75:70:d1:
a4:60:e9:8a:f4:dc:88:24:70:29:76:73:bf:69:9c:ba:5e:e7:
c9:df:e7:7e:b8:a3:d2:29:bf:34:fc:83:6e:1e:ca:c1:07:29:
3a:67:fe:03:79:53:82:34:9f:ab:94:45:3c:e4:25:ac:7a:52:
ac:9b:55:0a:57:36:e9:3b:02:26:44:29:e8:ae:80:6c:01:d4:
ca:a9:c3:84:4c:f1:33:ad:8e:17:32:d6:43:f3:5f:6c:db:48:
5b:83:30:26:7e:62:9d:1e:ea:5e:e3:7d:4f:0c:5f:da:96:94:
6b:8f:8e:26:44:3b:31:74:0c:ce:c6:48:7a:c5:51:4b:b9:9b:
54:66:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:51:09 2026 by rpki-client