Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: FlNIfYSRPXsMMpiso3z4hRlv18O6HrmaB8uyG8utNKo=
Subject key identifier: 1A:2C:46:5A:AB:C8:4F:D3:BD:C9:5B:9B:4E:BF:A8:74:67:9D:6D:90
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 019D390994596911A690E66453712818027E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa (hash: 4ANNNaYCmM44cEh0PesD5gfAd5fKPbOrFIOFq/4zEpE=)
2: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: emN19/VaRRiapDc+mROB/as02sYqDsBZ+VtQgBbNFcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:94:59:69:11:a6:90:e6:64:53:71:28:18:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=1a2c465aabc84fd3bdc95b9b4ebfa874679d6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:9e:6f:43:ba:de:da:30:16:d1:47:25:58:
73:70:de:eb:97:a6:94:cd:22:42:e4:16:c2:57:e3:
75:e4:05:91:05:8e:bf:43:4e:07:ad:37:7b:02:85:
14:32:c1:f2:c9:28:8e:b6:d9:bb:dc:8b:dd:3e:34:
8e:9d:c2:73:92:42:ff:5b:cc:1a:76:a9:aa:00:4d:
64:96:d5:b8:12:78:d1:9a:b9:b1:2b:39:ea:11:ea:
f2:38:e1:d4:66:94:5b:87:d1:95:b0:f8:26:2f:9e:
43:05:29:de:28:2c:9a:5d:c4:e0:6d:0b:23:8f:fa:
61:d3:1f:42:b3:7f:40:c0:e9:0f:d9:83:fa:47:10:
84:ac:6b:1d:ea:9c:5f:0a:92:96:d7:e8:53:bc:04:
cb:41:90:ce:e8:35:c4:87:9d:bb:47:35:48:4e:a9:
c8:1d:3f:99:e7:7b:23:dd:59:df:11:d9:07:eb:23:
6f:3b:b5:b6:84:87:07:fe:80:d9:ca:97:f2:50:c2:
03:11:4a:3c:8e:36:24:59:80:5d:37:97:a9:6f:1d:
14:35:e5:64:47:df:78:a1:da:77:f8:2b:0c:4d:58:
97:3b:4a:7b:e1:ec:f0:eb:9e:1c:22:a3:23:2c:4d:
a8:74:a3:4d:ba:b8:e0:eb:c8:3c:d0:c6:2b:4b:a0:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:46:5A:AB:C8:4F:D3:BD:C9:5B:9B:4E:BF:A8:74:67:9D:6D:90
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:2c:6b:70:f4:91:f2:9e:ec:f8:75:0d:0c:8f:f8:c6:4e:
49:83:bd:58:07:e6:0d:f4:ad:fd:0d:18:92:1a:20:07:da:ec:
06:f2:c5:1e:b8:da:5a:29:32:e7:67:c6:02:19:d6:ee:f8:19:
bf:20:cc:05:d7:47:5f:ed:37:30:3c:84:c6:bc:07:d0:a5:6d:
85:c3:d0:6b:08:f2:ad:b9:ca:64:08:40:95:73:4a:0e:6d:c9:
ee:15:45:51:9e:78:38:6c:09:e9:07:ae:f7:4d:a6:28:32:5d:
23:4f:01:81:23:ed:63:25:5b:a1:9c:03:90:c5:e5:a0:fe:0c:
76:97:f4:1a:97:18:27:47:10:33:20:c8:1c:bd:71:fa:a2:c4:
00:bf:75:ac:81:71:0d:ff:87:cb:34:2c:83:ff:c4:2c:2a:d3:
b8:e5:0d:3e:59:72:a6:1d:ff:6f:bc:46:f6:8b:d6:05:0d:04:
31:1e:72:08:10:67:5b:35:45:3c:77:17:ec:09:68:0b:8c:27:
b5:8d:e1:8d:dd:69:98:36:17:cd:81:49:05:26:f8:78:08:f0:
1e:ab:b9:5b:2b:91:81:cf:7c:0b:a7:d8:4a:45:d0:79:0b:91:
3b:bd:b5:2a:56:d1:4d:16:aa:ff:c6:86:a2:6c:17:bf:00:da:
ca:25:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:08 2026 by rpki-client