Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: 3XGFGJkej9XCYEFnf76PRPdOplgVybjbIhbd7DnnwsE=
Subject key identifier: 1A:D7:BF:B4:AA:5B:8B:4F:36:00:62:CF:A9:6D:E2:09:86:60:D6:5B
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019D3AC1FE81C915348E4C881BD1A8DFBFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: A8
Signing time: Sun 29 Mar 2026 18:01:25 +0000
Manifest this update: Sun 29 Mar 2026 18:01:25 +0000
Manifest next update: Mon 30 Mar 2026 18:01:25 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: 9pgelRe6iEPA1pm2O0HgqKBM5OpdcJHCNj7xgjRTL5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:fe:81:c9:15:34:8e:4c:88:1b:d1:a8:df:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Mar 29 18:01:25 2026 GMT
Not After : Mar 30 18:01:25 2026 GMT
Subject: CN=1ad7bfb4aa5b8b4f360062cfa96de2098660d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:a8:97:85:5b:17:3d:cf:f7:f4:42:ca:02:
5a:63:32:0a:34:84:47:3e:97:ae:4d:58:bf:a2:e4:
2d:ef:6f:9f:74:fc:87:87:34:08:22:bd:14:c1:87:
43:14:20:c1:b6:a8:c8:aa:28:13:67:9c:df:d0:0a:
30:bc:e7:26:19:ad:66:e6:42:9a:ba:d6:66:88:ae:
5c:d8:d3:58:94:eb:ab:6b:eb:0e:4f:8e:79:96:e9:
31:db:0b:84:e0:6d:1f:a2:d6:77:ce:43:93:06:d4:
1e:cc:db:70:d4:15:ef:f3:0a:7f:91:08:bf:0a:8a:
ee:36:c3:7c:68:25:80:20:7e:19:67:67:47:f7:f1:
c8:be:2a:f9:3e:88:1f:11:6b:cb:2f:3e:25:1f:ee:
0a:76:1c:66:32:13:1c:a7:c8:62:72:03:75:d3:40:
c3:df:75:9d:ce:ce:79:d1:a9:46:2b:7f:62:74:b8:
ea:43:ad:57:40:53:23:ce:4d:43:47:17:07:1b:d1:
e2:a9:86:86:4b:6e:c6:1b:a5:1a:d6:7d:b5:f0:ce:
16:e9:57:8f:2f:27:cc:53:bd:53:91:4b:89:8b:3b:
e8:2c:f7:22:03:4c:7b:41:f5:b5:cb:82:24:2e:2c:
45:70:da:be:b1:fc:50:9b:55:6c:7d:78:46:f1:88:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:BF:B4:AA:5B:8B:4F:36:00:62:CF:A9:6D:E2:09:86:60:D6:5B
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:55:0e:14:9a:db:fa:02:38:68:82:d8:37:6d:d0:86:d1:6d:
8b:0a:30:8b:5f:eb:8a:05:d9:9e:95:a3:8b:e9:43:55:5d:45:
49:4c:0c:7f:f1:0c:b7:35:73:91:eb:86:13:e0:96:87:63:90:
26:00:0c:31:fa:a6:9a:c3:ec:93:ed:3f:9b:1e:3d:f4:88:7f:
8f:12:e2:dd:97:43:84:41:f3:f4:c1:2c:76:7a:e6:85:68:50:
5e:0c:a4:69:e6:e3:94:8a:4d:f7:03:2d:30:09:13:d5:86:9c:
aa:e1:ca:74:be:00:9c:d7:9e:e8:5c:c6:7b:4e:fd:22:f0:32:
26:d0:e0:5e:2a:b6:7e:0d:9b:f8:ec:67:ba:68:9f:86:96:8b:
60:90:b4:e1:67:73:9a:e3:f7:59:f9:ab:96:d9:e9:14:4c:49:
66:68:c6:90:b9:3b:0e:a0:71:68:a9:e4:2d:9d:d9:ef:dc:2d:
24:10:3f:72:40:e8:50:c1:f0:3a:1c:a1:ad:e0:0e:46:7b:71:
00:2b:9a:f6:80:b8:b8:3d:a8:f0:5a:ac:57:51:e7:40:ca:40:
08:f6:af:72:07:f6:d9:e1:ca:1a:ca:76:20:5e:56:83:61:a5:
36:b9:aa:81:ef:24:9d:e4:f0:91:17:ab:9f:2a:ca:06:48:b6:
8e:e7:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:28 2026 by rpki-client