Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: SKFexgMesdlQfQIC4A+VygVSXJAx3jPGGcDD6L2UPtM=
Subject key identifier: 7B:E3:CA:1C:8E:76:DE:0E:DB:A6:1A:B5:4E:56:56:CA:E2:5B:86:9B
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019D37C09AFC0A93C91D3DEA7EA30AEFD92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 11EC
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: GCsnMRnmapDYQLoAJB8swv5+1DTzf5tP7P34n9JtdYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9a:fc:0a:93:c9:1d:3d:ea:7e:a3:0a:ef:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=7be3ca1c8e76de0edba61ab54e5656cae25b869b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:dc:ea:7e:71:8a:2e:d0:4d:49:31:33:8b:
2c:48:6d:64:54:a6:e3:7a:29:56:a3:b2:84:13:ea:
b4:13:1b:ee:ef:61:3b:e3:a4:d3:d5:e8:80:5c:5b:
cf:40:d5:a5:24:ca:64:e2:c2:78:5f:09:2d:34:a0:
76:0a:81:71:c0:24:d9:6c:9d:47:3a:ae:56:de:c1:
4d:fe:71:3e:e6:00:60:07:0b:7e:2c:f1:34:a7:4f:
cd:3b:d7:a6:e6:54:0f:99:fa:d3:8f:09:06:e7:6f:
1a:f2:02:e3:e3:8a:3e:10:74:8a:b4:e1:fd:d4:a9:
ba:89:78:96:12:fa:1d:70:4e:56:af:e2:f2:51:5f:
f4:47:98:ad:11:68:6a:f1:c5:96:95:d1:07:3b:0b:
70:d4:5b:f7:52:9d:2a:dd:4c:75:0c:d3:80:60:13:
03:cb:37:50:e3:19:f2:b3:25:ac:b9:6c:72:c3:c5:
1d:49:6f:ce:c6:d8:03:db:53:9c:2c:fc:89:c6:43:
13:d3:3b:fd:a2:84:af:f3:fa:98:30:55:bf:81:73:
a1:70:07:3b:d1:e8:8f:da:f1:19:af:8f:ff:38:1c:
b3:2c:2c:ed:2c:69:0e:27:8e:fd:13:15:88:72:43:
3b:46:da:c4:cf:5f:56:e0:8a:ec:50:27:bd:56:22:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:CA:1C:8E:76:DE:0E:DB:A6:1A:B5:4E:56:56:CA:E2:5B:86:9B
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:74:5b:a0:c8:fd:b7:d1:e0:03:41:32:9f:ef:63:bf:39:ca:
a9:36:29:9f:72:04:ff:ca:30:e0:9e:e4:f6:49:d4:76:f6:fb:
8d:e9:52:6a:1d:73:83:71:88:41:2b:ee:34:95:15:1a:df:0c:
f5:a3:4c:be:2b:34:41:0a:77:b6:d7:af:9b:03:87:7b:f5:85:
5e:cb:58:1e:e5:78:25:35:d2:a7:22:5f:88:61:84:63:8e:73:
02:75:13:46:66:8f:ff:fb:99:c8:4a:09:b4:50:43:52:4f:e9:
9c:af:db:8e:4c:cd:61:ce:68:9d:6c:2f:fe:01:f6:4d:6e:9d:
17:ee:60:27:3e:19:d0:83:95:e4:ff:a2:7f:a1:5d:a8:18:6d:
f0:17:66:34:cc:f5:c9:b2:2e:f4:ae:22:a3:c7:bd:48:d0:8c:
2d:48:67:cd:6e:68:01:e2:4a:b3:c7:fe:c0:67:ee:a2:c0:97:
15:42:3d:5f:f8:84:d1:e6:cd:a7:c1:bf:38:4c:d7:9b:4e:a4:
d7:83:fa:df:4d:44:f9:aa:ae:c8:5e:fa:5f:33:a3:d1:a1:8f:
1d:a5:53:c2:31:c4:fd:73:fb:2a:07:a2:aa:63:21:d3:6b:39:
cf:71:51:ff:e8:cd:15:5c:6a:13:39:9b:e6:2d:c0:7e:76:94:
cf:c5:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client