Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: H8vOMJoOpdZH283ZML8NZepQaLUTVyXg7Ejfu6qbFmc=
Subject key identifier: 6C:FA:AB:69:2E:EC:63:C1:85:38:42:59:1D:68:53:D7:6E:1B:2F:BE
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019EB845D3E65E05EED94777AD5683DF9715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0A54
Signing time: Thu 11 Jun 2026 20:00:44 +0000
Manifest this update: Thu 11 Jun 2026 20:00:44 +0000
Manifest next update: Fri 12 Jun 2026 20:00:44 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: EZhaYR7SaxdCCAiShKycSoVJ/Wfxd+ib/YYueTUQL8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:d3:e6:5e:05:ee:d9:47:77:ad:56:83:df:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jun 11 20:00:44 2026 GMT
Not After : Jun 12 20:00:44 2026 GMT
Subject: CN=6cfaab692eec63c1853842591d6853d76e1b2fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:2e:fe:20:d3:6f:b4:46:e1:d2:a3:40:ad:
fd:23:63:d8:c3:d2:33:af:6e:9b:80:46:c8:70:29:
94:b5:e7:0c:b5:ba:54:79:d4:c0:aa:6f:48:53:2e:
43:b7:28:04:14:87:52:b7:04:65:24:0a:6e:fd:6a:
1e:48:52:f1:4f:97:98:51:04:71:06:99:47:0c:85:
9a:99:74:02:86:76:8c:1c:9f:4b:da:d4:22:e5:94:
3f:8d:8e:19:b0:14:44:f3:aa:dd:c1:96:8b:c0:25:
27:fd:a5:e0:24:79:4b:61:63:d8:58:19:fa:4c:7c:
46:5e:7e:57:35:69:27:a7:e5:29:49:f0:00:a1:e4:
10:cc:4a:18:0b:1e:1b:e2:48:bb:1a:c2:f0:b4:39:
65:1a:a6:04:c0:ba:7e:07:9d:91:86:82:51:ac:d0:
a4:71:3a:26:8a:7d:45:10:64:5a:ed:37:bf:be:78:
99:13:fe:3a:05:c8:d4:66:bd:84:44:e1:bf:35:53:
ad:bf:9f:fe:31:f8:a4:fb:8c:56:b7:89:97:d8:19:
7e:2d:d5:28:eb:57:59:88:cc:10:df:4d:97:05:60:
c5:57:72:f1:65:4b:8a:f0:76:a7:17:ea:21:50:50:
d1:e9:16:b6:69:7b:b9:cf:77:47:41:07:4b:79:98:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FA:AB:69:2E:EC:63:C1:85:38:42:59:1D:68:53:D7:6E:1B:2F:BE
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:77:aa:0c:52:dc:bb:40:69:c9:89:b0:e6:ed:10:15:25:69:
18:ff:1f:a8:3f:4e:64:e9:56:1b:26:54:cc:e6:f5:c3:dd:e4:
be:0f:12:40:db:da:42:b1:d1:65:25:eb:8b:1a:58:7e:7a:6d:
61:58:85:a2:5b:93:9d:89:39:0c:09:46:71:91:43:94:a6:f5:
41:e6:12:52:ee:e6:af:ac:a1:b8:e6:8b:48:20:b2:3d:61:a1:
01:9c:6d:5e:33:22:be:05:f5:1f:56:bf:3a:ba:4c:01:b4:da:
fd:55:0c:cc:95:cc:71:38:14:ed:5f:a8:d5:70:a8:2e:24:26:
0a:60:c0:48:75:8d:6f:48:62:bf:d8:c6:c6:5f:e0:46:e5:09:
17:88:24:aa:01:e9:47:18:4e:63:b2:fa:5e:1c:3e:85:3c:8d:
31:f4:2e:72:f9:5c:90:9e:00:0d:bf:b3:ad:f3:8f:31:26:57:
5a:08:f2:0a:2b:dd:d4:bb:58:c3:20:38:6b:1b:41:00:04:d7:
e0:0b:96:75:a0:e7:fa:96:64:48:f2:ea:f1:98:ad:1f:c9:30:
b7:c3:59:5c:83:ac:a7:07:8d:35:f4:e5:1d:8c:41:18:5e:95:
b9:95:4f:5e:8d:9f:7f:ca:af:a3:28:91:fa:72:a3:03:e3:f1:
4d:52:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:19:17 2026 by rpki-client