
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: dsAIOOjgh6Ihyo+wBLdOXVRPj5khI9EYsd91su1yBqo=
Subject key identifier: 24:B2:59:D9:B9:0A:29:4A:5C:64:38:22:2C:27:CE:27:24:2D:F6:40
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01A089B1160456D916562F27F01DC94DBBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0B45
Signing time: Thu 10 Sep 2026 05:01:19 +0000
Manifest this update: Thu 10 Sep 2026 05:01:19 +0000
Manifest next update: Fri 11 Sep 2026 05:01:19 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: gUomoYojmlJsSDKCqqQfOKN2EFSLg3cwD/5cHIxvtFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:16:04:56:d9:16:56:2f:27:f0:1d:c9:4d:bb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Sep 10 05:01:19 2026 GMT
Not After : Sep 11 05:01:19 2026 GMT
Subject: CN=24b259d9b90a294a5c6438222c27ce27242df640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:83:20:ae:4d:9e:cc:4f:bd:5b:88:6a:26:
db:75:17:b5:b9:d4:5a:04:7d:0d:d3:af:a1:e3:9e:
8e:8a:74:36:66:bd:0f:ea:2b:3b:71:3a:0c:cb:4b:
6c:85:e7:aa:21:c6:6e:65:6b:8a:a3:a6:64:e5:42:
43:d4:cc:be:50:18:1a:29:7d:8d:0d:9a:4b:b2:a4:
fa:92:df:38:69:98:c3:7f:9b:3a:2d:ec:dc:74:69:
c4:37:9a:3a:3c:c8:cd:10:28:67:ee:a1:d2:01:48:
d0:83:ab:04:c6:b8:26:a4:87:16:0c:ea:e3:e6:34:
0c:ac:db:cd:28:6e:9e:49:bb:8e:48:c2:6c:bf:b0:
81:ad:9e:5e:a5:66:74:c6:47:d4:2c:b3:8b:ae:13:
2d:3d:e0:e5:dd:37:d9:49:cd:7e:6b:59:ce:7b:6c:
4e:f1:e9:76:dd:34:a1:6a:7f:87:99:52:a1:f7:f5:
c9:96:48:63:5f:be:4a:35:40:64:56:8a:e6:6d:75:
fc:d4:be:db:73:43:f1:a4:4c:a4:65:36:89:b1:29:
7a:c8:ff:81:ec:e9:fe:ee:52:2f:56:7b:f1:63:06:
a5:4a:53:7f:3b:16:65:82:4b:a9:f9:98:fe:c4:0e:
25:39:cb:c1:0b:d1:b5:92:b0:2f:7a:19:d4:06:90:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:59:D9:B9:0A:29:4A:5C:64:38:22:2C:27:CE:27:24:2D:F6:40
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6d:77:7d:18:86:8e:13:80:81:60:a0:88:77:3f:3f:5e:33:
94:f8:22:23:30:a6:57:b8:7f:ca:e1:cb:b3:d9:34:f2:63:c2:
17:6e:6b:20:70:23:f5:25:bc:16:ce:f4:e2:8d:66:ff:b8:a4:
44:cf:e0:de:b3:34:ef:a2:e5:e7:08:87:de:71:14:cf:04:0f:
55:dd:90:00:88:d0:f9:a9:a8:4f:ec:61:a3:2f:15:b5:19:b5:
6e:d4:34:c2:2b:70:6e:6d:21:07:55:39:fe:22:fc:d7:63:d1:
17:3c:7b:63:08:f1:cc:a6:fb:6a:91:49:bc:56:e4:ed:2c:c4:
7b:66:47:8b:83:8d:74:8d:0d:81:46:67:11:a0:93:0f:84:e9:
59:db:d5:b3:88:6e:c1:4d:16:06:80:01:a7:83:51:d4:d3:68:
61:1e:26:db:0d:d4:a5:1d:f8:19:82:10:2a:9a:06:57:31:4d:
b3:8c:00:48:a1:f7:d4:61:fd:cc:8c:a5:4e:7f:1d:10:42:5f:
84:9b:5f:eb:f9:85:a1:d4:3e:0b:c2:3f:5f:6e:24:8e:8d:9e:
7d:b0:4a:2d:97:b5:09:2a:52:26:f9:e7:8a:62:f4:b7:25:7b:
a8:90:f9:69:2e:df:ff:7f:ba:25:69:35:a2:78:fb:4c:92:6e:
0e:85:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:36:04 2026 by rpki-client