Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: GVeqGX4ERB3yWdlFatvW/Rts9J0cklWjGFlLMVtMl5I=
Subject key identifier: 90:93:7C:B2:F2:5C:6E:6A:2D:18:24:1E:72:00:33:94:76:96:4B:C4
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019FA1F2171264540CB6D704F92D546147EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0ACD
Signing time: Mon 27 Jul 2026 05:00:24 +0000
Manifest this update: Mon 27 Jul 2026 05:00:24 +0000
Manifest next update: Tue 28 Jul 2026 05:00:24 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: 5ZMkqEfBILf0dOukXwA5lAJjtCvwQQBkN0j0vQncODA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:17:12:64:54:0c:b6:d7:04:f9:2d:54:61:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jul 27 05:00:24 2026 GMT
Not After : Jul 28 05:00:24 2026 GMT
Subject: CN=90937cb2f25c6e6a2d18241e7200339476964bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:a2:f2:12:38:80:c1:0f:86:43:da:f8:13:
e0:98:6c:68:82:f1:b8:92:c6:8e:54:4c:9b:9a:f9:
c9:4d:b7:a3:4c:dc:dd:31:66:f7:da:f1:91:80:46:
c1:5c:01:19:5c:55:e8:b4:86:bc:12:e3:4f:30:79:
16:34:b8:f5:1c:e2:4d:bb:56:07:06:5f:28:4c:96:
f4:8e:c0:87:d5:b4:98:c9:52:e5:cb:4b:07:43:90:
3f:fa:cf:83:c4:92:65:88:07:21:9b:f0:c3:5a:cb:
1b:2a:04:9f:70:49:3d:c3:49:01:e5:62:8c:be:b0:
c7:22:46:3e:42:ca:cb:c6:56:fc:6d:61:62:cf:97:
f7:8c:22:46:6e:76:59:d3:8c:ac:5c:6f:6c:ee:c4:
88:6b:c1:ae:1d:c5:2d:e0:bb:6b:e1:df:c2:cb:24:
43:3f:be:93:bf:74:9f:d2:5b:72:51:7f:23:4f:4d:
20:c3:9c:66:f8:ed:33:d5:6f:0e:40:b4:59:91:b9:
e2:11:ee:e4:50:b1:2f:f2:2f:45:77:f7:ac:eb:9c:
c2:1a:ec:cc:8a:56:91:72:c2:a1:89:93:b7:37:21:
1f:ae:c5:1c:d5:59:c7:0e:7a:d0:7b:7d:ab:87:e0:
f8:ae:09:a6:8d:f9:99:e0:d6:9e:27:54:52:61:ba:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:7C:B2:F2:5C:6E:6A:2D:18:24:1E:72:00:33:94:76:96:4B:C4
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:4e:95:e6:cf:d4:0e:56:ab:8b:55:a1:76:64:e6:5a:65:
aa:4d:e3:35:51:c0:9d:f5:2f:50:54:fd:2f:69:fd:72:f3:84:
24:64:94:c3:d8:d9:3e:bc:cf:05:6c:3a:5e:53:7d:8c:4c:32:
33:e0:85:21:f7:66:d1:af:cd:76:ab:36:f5:66:43:77:fa:5c:
b7:7c:75:db:7d:b2:da:57:e2:20:6c:a2:cd:86:e3:4f:0a:2a:
bd:7c:84:ef:6f:d0:30:3b:1c:16:2f:ab:15:f2:b8:59:9b:1b:
ab:52:ca:0f:31:09:d0:b3:17:b8:92:ef:58:54:86:41:ee:dd:
de:ae:6f:60:56:4f:4c:77:8e:ea:a0:af:1f:0b:cd:be:2e:bc:
7d:2a:c7:cf:b9:27:49:42:c4:f6:5e:65:54:e6:b6:48:d7:ff:
3f:56:67:02:de:75:b0:7f:87:65:8b:fc:a1:98:2c:14:21:99:
10:50:5c:fd:c0:85:d8:a6:72:0d:d1:4b:b5:90:5a:6a:e3:0d:
ff:df:21:67:27:3c:db:82:93:d2:5d:67:5d:2e:2d:52:e2:cf:
cb:37:89:1a:fc:69:56:b6:d6:03:9c:4d:7c:51:e4:ec:dd:a7:
a2:72:f4:ca:fa:d7:6c:b6:0b:a2:b8:72:6c:dc:25:4b:ad:36:
f3:87:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:26 2026 by rpki-client