Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: w+Fiqp4gLuuttpIBYW5pl3FqCDt7L73X04OhsG7KWM8=
Subject key identifier: 72:68:05:2F:2C:03:22:50:59:36:0C:FC:32:92:39:41:93:EA:F3:83
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019D37F75677144E9416B560CCF1076C4E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 098D
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: JDm2lTjsSsU8Je0AKwz7DOJPtH4cPsdrrQnSAkoS/6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:56:77:14:4e:94:16:b5:60:cc:f1:07:6c:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=7268052f2c03225059360cfc3292394193eaf383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:92:ac:5f:ea:1e:5e:1a:51:77:7c:1a:8d:
81:ea:50:7a:a6:57:a7:73:76:37:b7:f0:41:f1:3b:
02:78:1d:a0:a6:7f:cf:e7:45:41:d7:a3:a7:00:5f:
04:86:a5:3b:95:a7:f2:47:96:81:b8:79:8d:8d:df:
5a:e6:0f:8f:3e:dd:a8:40:ad:50:56:17:78:eb:99:
d2:27:b2:48:10:0e:24:39:67:3d:7c:02:7d:f7:14:
35:00:43:71:8e:44:5a:d3:16:98:6b:41:aa:93:04:
f9:cf:cd:78:8d:bf:0f:3f:77:c2:a6:7c:7c:49:46:
cb:d2:58:73:6b:36:6d:f4:e9:3f:85:ae:aa:df:29:
b7:59:65:fb:88:62:57:7f:ee:22:40:35:b5:6c:c9:
df:33:76:c7:09:99:1d:f4:27:cb:a2:72:9c:81:c7:
75:70:b5:00:53:37:96:36:5e:e7:8d:e0:bc:ed:0d:
2e:bd:93:42:94:f0:99:de:81:88:72:38:3f:36:50:
01:65:c1:e9:e9:86:b1:77:5d:ad:63:a4:11:57:04:
7c:9a:6e:68:bf:ec:e7:d0:c4:e6:b9:56:e4:ac:9b:
c1:8a:bd:ae:15:8a:a0:81:23:b7:08:35:0e:f4:37:
d2:6f:11:7c:01:7f:ab:4f:e4:16:0c:51:71:27:43:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:05:2F:2C:03:22:50:59:36:0C:FC:32:92:39:41:93:EA:F3:83
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d6:50:fa:57:77:ac:48:50:99:30:94:62:b4:60:26:59:c6:
8d:b1:48:a6:01:ff:ce:63:5b:eb:ff:ac:f8:3a:ab:c6:c6:78:
97:b2:73:29:30:68:b4:7d:bf:d2:7c:cb:e0:67:ec:bb:ff:09:
67:5d:71:fb:14:48:cd:c7:bc:b0:1d:74:34:a1:46:57:89:a1:
2d:41:7d:9e:fb:a8:b4:9b:37:e8:8e:35:9d:13:54:2b:5d:32:
7e:30:1a:27:99:34:45:49:86:bf:58:00:73:e8:00:21:9b:5c:
49:6c:b1:dc:e4:31:06:3e:e4:83:f3:e8:b8:46:17:d3:ec:54:
be:63:b8:3e:32:2f:9e:9f:a5:69:dd:aa:b5:e6:f3:a5:15:53:
26:12:5b:db:ad:13:5d:b0:d1:6d:3f:2d:83:08:7b:bc:7e:61:
c1:10:05:80:cb:21:22:9b:62:b1:92:22:66:be:5c:22:27:ab:
d8:66:30:22:a5:a7:72:a8:89:8e:9b:33:84:8c:89:72:08:6f:
c8:06:e9:64:c5:4b:24:9e:42:24:00:01:0b:90:9d:02:45:d3:
06:bd:3c:78:f4:5b:c7:dc:1c:4b:43:43:12:09:70:79:6e:9f:
e0:0b:04:a0:8c:c7:df:07:50:3b:b8:8c:57:87:1f:f8:89:b4:
d9:62:a2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391Z3FE6UFrVgzPEHbE4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjYwMzI5MDUwMDQ5WhcNMjYwMzMwMDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3MjY4MDUyZjJjMDMyMjUwNTkzNjBjZmMzMjkyMzk0MTkzZWFmMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+SrF/qHl4aUXd8Go2B6lB6plen
c3Y3t/BB8TsCeB2gpn/P50VB16OnAF8EhqU7lafyR5aBuHmNjd9a5g+PPt2oQK1Q
Vhd465nSJ7JIEA4kOWc9fAJ99xQ1AENxjkRa0xaYa0GqkwT5z814jb8PP3fCpnx8
SUbL0lhzazZt9Ok/ha6q3ym3WWX7iGJXf+4iQDW1bMnfM3bHCZkd9CfLonKcgcd1
cLUAUzeWNl7njeC87Q0uvZNClPCZ3oGIcjg/NlABZcHp6Yaxd12tY6QRVwR8mm5o
v+zn0MTmuVbkrJvBir2uFYqggSO3CDUO9DfSbxF8AX+rT+QWDFFxJ0O3GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJoBS8sAyJQWTYM/DKSOUGT6vODMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetZQ+ld3
rEhQmTCUYrRgJlnGjbFIpgH/zmNb6/+s+DqrxsZ4l7JzKTBotH2/0nzL4Gfsu/8J
Z11x+xRIzce8sB10NKFGV4mhLUF9nvuotJs36I41nRNUK10yfjAaJ5k0RUmGv1gA
c+gAIZtcSWyx3OQxBj7kg/PouEYX0+xUvmO4PjIvnp+lad2qtebzpRVTJhJb260T
XbDRbT8tgwh7vH5hwRAFgMshIptisZIiZr5cIier2GYwIqWncqiJjpszhIyJcghv
yAbpZMVLJJ5CJAABC5CdAkXTBr08ePRbx9wcS0NDEglweW6f4AsEoIzH3wdQO7iM
V4cf+Im02WKiKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:34 2026 by rpki-client