Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: QqttP1kA76KzJDad5NJBu6Pd+ia60FxelAY01FsVTJg=
Subject key identifier: 36:B2:98:38:C9:53:80:A9:D3:59:26:D8:28:C3:35:37:9C:4F:92:0A
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019EE96990452350AFB57C4A0C98BE6EC01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 0187
Signing time: Sun 21 Jun 2026 09:01:09 +0000
Manifest this update: Sun 21 Jun 2026 09:01:09 +0000
Manifest next update: Mon 22 Jun 2026 09:01:09 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: fLTTc9czh6GwAvY7cEJhxkqwYWfl5F0OVxzPfN10FHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:69:90:45:23:50:af:b5:7c:4a:0c:98:be:6e:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Jun 21 09:01:09 2026 GMT
Not After : Jun 22 09:01:09 2026 GMT
Subject: CN=36b29838c95380a9d35926d828c335379c4f920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:22:ad:4e:1d:22:76:a9:5c:68:e0:8f:e0:
85:75:2d:2e:e2:20:ea:11:7e:9b:90:ca:28:b3:7d:
fe:58:5f:35:92:3b:63:56:c6:57:3e:96:2f:ff:c0:
ad:28:8a:5a:dc:79:67:a2:54:ba:7e:cf:35:ef:e7:
ff:03:74:90:57:2a:88:d7:79:9f:31:ab:06:4e:6e:
e9:d5:9f:e0:2a:b4:6a:12:7b:5f:2f:10:9f:a5:cf:
71:82:bf:3e:d6:78:57:24:55:54:6d:6b:17:c3:8e:
dc:51:7e:92:8c:18:8e:59:a9:d3:33:ee:4e:da:fd:
d0:b8:c1:52:f7:94:d8:5a:b7:69:ec:ef:fd:46:92:
2a:d8:b4:6c:db:dc:bb:b0:5f:92:a2:da:fe:b3:94:
67:01:45:75:7e:01:cc:77:e9:fa:9c:0b:88:c7:bb:
3e:b6:0e:77:43:81:ab:69:52:56:6f:57:6c:17:ba:
56:33:94:0a:ce:8d:f6:a4:36:f0:85:89:c3:63:d5:
5d:2b:5f:51:b4:19:63:ee:cf:54:68:f2:44:dc:07:
8b:bc:95:c2:ee:47:fe:8f:d6:18:d6:69:20:00:d8:
46:cf:db:01:51:4a:df:6f:4f:a3:6f:eb:cd:ac:54:
19:b1:f1:9d:65:80:6a:07:25:fa:03:fe:77:e0:fc:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:98:38:C9:53:80:A9:D3:59:26:D8:28:C3:35:37:9C:4F:92:0A
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d9:c6:58:dd:90:52:d1:4f:46:eb:09:e6:01:46:96:d1:04:
07:aa:6d:6b:7b:77:53:c1:71:2e:8d:6e:58:70:b2:43:b1:f5:
19:6a:0d:16:23:6f:9c:d1:3e:2d:08:73:9a:9e:4e:4b:fa:14:
22:d5:6d:42:98:0a:5a:09:44:a8:a6:d8:b7:be:65:24:7b:d6:
a6:37:a7:41:6b:40:0d:a9:21:09:3d:af:86:78:c9:53:9d:68:
67:09:f9:fb:21:80:e1:68:0e:60:57:0d:57:f0:56:eb:79:c5:
10:04:96:56:c6:c9:e9:f2:34:47:2f:65:e8:c1:31:b5:a7:24:
3d:02:54:c8:e2:55:b7:f9:8e:1b:5a:64:aa:60:e7:1c:07:fe:
df:36:bb:d5:93:55:89:02:a7:d5:ff:cf:55:c2:3c:c4:12:96:
95:b3:b7:07:1e:5a:d3:7f:9d:66:31:09:62:4e:df:3c:49:05:
7a:e7:84:00:93:47:e1:0f:ef:e0:af:31:18:9e:c4:fd:7c:ea:
f4:e8:cd:43:3e:79:f6:6a:6e:85:8c:c0:64:23:a9:69:04:07:
b7:c4:f6:ba:09:f8:38:25:07:32:45:fe:28:be:59:2b:e0:1e:
dd:1a:8a:1c:58:1c:fe:d2:bf:70:a2:1e:7b:c8:a4:79:73:c1:
55:b2:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:42:49 2026 by rpki-client