Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: pKCuHM0l3ikC0QQpdiPiP4YK3snxKGahTDp3nt/Tx1E=
Subject key identifier: C8:98:E8:95:FF:C1:5A:AA:B9:F9:ED:31:32:A9:7A:7F:46:F6:B3:BB
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01A184BEDB3385899EFBAA127E9F014F799A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0BC7
Signing time: Wed 28 Oct 2026 23:01:02 +0000
Manifest this update: Wed 28 Oct 2026 23:01:02 +0000
Manifest next update: Thu 29 Oct 2026 23:01:02 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: AuNcjI1cMY4/FvUCjJot+ap/adAa9YF37Qe77DLkw1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:db:33:85:89:9e:fb:aa:12:7e:9f:01:4f:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Oct 28 23:01:02 2026 GMT
Not After : Oct 29 23:01:02 2026 GMT
Subject: CN=c898e895ffc15aaab9f9ed3132a97a7f46f6b3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:a4:26:b0:06:07:98:f4:61:75:1b:fd:f0:
16:00:e9:5c:08:55:14:2e:25:4c:49:76:73:cc:3c:
34:6a:38:1c:c8:88:b1:46:71:d4:83:ba:47:24:30:
11:de:db:f5:fd:e4:4f:0e:08:7f:13:ef:e8:eb:5b:
8a:0d:e1:eb:0c:d4:e7:d1:04:7a:20:08:47:65:ff:
52:32:10:6a:c7:ed:e7:fb:a4:9d:d1:5d:59:ab:01:
4c:0a:b2:53:c9:4d:74:f8:7f:6a:ea:96:83:33:34:
ab:4f:d7:47:1b:40:f8:de:45:90:b4:70:b7:72:81:
5b:03:a6:09:5e:dc:6c:00:f3:fe:01:63:58:6e:f0:
87:32:3b:d9:b4:62:21:1d:b4:bf:79:62:f9:9d:be:
a4:f5:bc:d9:52:c7:ca:73:f1:25:24:f8:e8:e0:d9:
aa:8c:65:73:72:d8:74:82:3d:47:86:4f:92:05:63:
4f:4b:d2:ef:12:fa:0f:ef:8c:12:94:ca:95:75:71:
af:88:72:e2:23:5f:84:ac:19:86:44:e0:7c:01:34:
9b:45:85:88:13:03:20:79:46:e1:28:3f:ae:10:ff:
cf:d9:01:db:1d:ed:be:6b:44:47:a5:1c:b4:a6:d8:
56:29:66:5b:d4:6a:67:dc:9b:5d:cb:2b:33:0a:34:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:E8:95:FF:C1:5A:AA:B9:F9:ED:31:32:A9:7A:7F:46:F6:B3:BB
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a5:a8:04:aa:15:e0:5c:b9:92:02:72:62:a0:48:84:ec:74:
d0:c7:16:9e:d7:69:cd:2b:7a:79:02:ca:a9:71:e5:a4:fd:6c:
46:9a:6d:15:92:be:61:28:2f:41:e7:40:7a:6b:02:1c:a1:5e:
e1:7b:6d:4e:ae:15:3c:22:30:30:45:06:b0:c3:fc:a1:c0:1d:
d3:e5:61:76:53:ea:c8:e8:ab:23:4d:5e:8c:c7:e3:b0:9d:80:
46:8d:d5:66:34:f2:41:62:85:36:53:7c:28:4f:43:92:50:66:
46:d4:b4:4e:25:7d:9b:10:81:b1:dc:65:a2:1f:1c:88:b7:3e:
1d:17:96:e6:3d:2f:61:fa:d7:3a:be:85:d6:6e:c7:69:56:0b:
0c:87:e1:2a:cf:9a:7b:a8:56:33:d9:08:21:98:00:49:8a:78:
c9:48:db:31:41:c9:cc:40:f9:63:c2:8f:a6:d0:6d:ba:6e:fe:
33:5d:b1:9f:23:48:2f:5e:4b:88:19:15:cf:ee:4c:74:00:23:
b8:8a:98:af:7b:68:dd:e2:df:c9:7b:61:4e:09:92:9e:79:7d:
3e:8f:bb:ea:c6:61:ed:e7:32:28:27:08:be:9d:d7:ff:d1:40:
db:8b:1c:24:5d:b7:c1:28:d2:7e:c5:01:3b:98:7b:66:e6:1b:
3e:b6:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:48 2026 by rpki-client