Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: tD19yPQL+YhveP45tFnolWUKJv58cSTTuVx12zNxcFw=
Subject key identifier: FE:1A:A1:4D:E6:11:82:6B:88:96:10:95:46:73:BE:FB:44:81:19:F6
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 01A1A4805F98F6C568EED0E55691E4C136D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 02F1
Signing time: Wed 04 Nov 2026 03:00:38 +0000
Manifest this update: Wed 04 Nov 2026 03:00:38 +0000
Manifest next update: Thu 05 Nov 2026 03:00:38 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: U84KmIiQjhFh5BCpx4apr+JCrUAs8Ad5zn2sqi/XIBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:80:5f:98:f6:c5:68:ee:d0:e5:56:91:e4:c1:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Nov 4 03:00:38 2026 GMT
Not After : Nov 5 03:00:38 2026 GMT
Subject: CN=fe1aa14de611826b889610954673befb448119f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:c7:c3:2b:53:13:5e:55:11:a1:d1:5d:8e:
91:80:6d:8a:71:fa:b2:b8:70:23:d8:7e:4f:75:de:
37:6b:e1:5b:fc:dc:5c:34:57:fb:2b:bc:3f:b4:03:
38:3b:3a:a1:46:38:1f:5d:89:58:2d:4e:6a:c5:6b:
81:ac:4b:a1:8a:9e:f2:07:15:96:d8:f5:b9:65:57:
6d:53:2a:8e:1b:11:7b:92:a8:a0:e7:6d:54:21:68:
9c:05:7c:3c:b7:fb:8e:7a:b8:ed:c2:91:82:33:ab:
03:a2:1f:54:76:09:fc:a2:70:1d:1f:5a:ca:40:03:
e4:2f:5a:bc:d1:67:65:00:0f:bf:f3:ee:f8:d3:f6:
f8:07:6c:b4:86:84:84:91:bf:81:50:83:08:f7:19:
f3:b4:b1:eb:d4:58:f6:78:db:e7:43:d5:ac:ac:9b:
27:59:c8:61:ea:08:e8:b4:f7:08:07:f9:e7:aa:9b:
ac:ce:c0:7a:50:18:64:7e:cb:34:af:05:eb:31:0c:
4a:d4:af:45:ff:d3:30:d5:e9:04:88:a6:61:8d:ef:
20:ef:48:e6:dd:fc:b6:d7:0f:e2:45:b2:dd:ae:16:
ef:c7:8f:db:39:e3:2e:5b:1b:8d:00:2a:93:33:cb:
d6:14:ea:3e:bf:2d:61:f6:58:6b:49:54:3b:d9:60:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:A1:4D:E6:11:82:6B:88:96:10:95:46:73:BE:FB:44:81:19:F6
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:24:e7:0f:f8:f0:bb:10:ba:23:df:7f:b7:62:cf:58:54:
ba:e0:17:39:68:fc:24:dc:82:99:09:ca:58:de:56:35:bd:f9:
47:5b:13:f0:b5:69:03:e7:15:2f:e1:d4:37:37:dc:13:5c:fe:
54:52:74:3b:37:c8:d5:be:c1:5e:6e:35:fa:6c:4a:8e:fe:0d:
d7:7d:ab:cc:19:b6:35:10:b2:44:46:0a:5e:59:62:cd:a4:c1:
e4:64:bc:e3:ae:25:db:17:56:67:6d:e0:8f:5c:62:9a:21:f7:
d3:e9:1e:a0:92:47:c5:c7:2a:ad:77:13:c4:62:fb:a0:ce:9f:
ad:00:17:44:6b:e3:38:f9:bc:6c:32:2b:11:6a:c7:da:c2:03:
4a:a2:4c:38:71:b6:3c:69:70:4b:b3:c4:5b:a8:0b:7c:5c:49:
f8:fd:40:93:88:6d:46:85:3f:92:e1:1a:cf:69:09:aa:b8:4c:
4d:d1:cf:3c:cc:99:e1:3e:0f:57:7f:dc:32:8c:97:88:4b:20:
53:7a:a2:ae:f2:dc:5d:f1:c6:97:2e:f7:12:2a:32:5a:ad:a4:
52:cf:19:64:7c:6c:11:1a:3d:d5:23:8a:8b:3d:54:11:70:75:
61:f5:e2:ab:25:dc:24:94:da:b0:c6:f2:13:7f:06:61:38:db:
cf:4b:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:40:18 2026 by rpki-client