Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: DtByoyuWBCxJSpcPz1aYuD77GM5U9/819HvdINjG+88=
Subject key identifier: 03:DB:AC:37:99:E8:F5:C8:80:0A:26:95:84:CA:1A:7F:FB:16:17:1B
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019D0B8CBE1FBAAD6774E0D543AD30533020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 1298
Signing time: Fri 20 Mar 2026 14:01:06 +0000
Manifest this update: Fri 20 Mar 2026 14:01:06 +0000
Manifest next update: Sat 21 Mar 2026 14:01:06 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 9P7aTzZ6vAc6Z4pVpMsdj8luLq0HZJNfIEio18NTbDU=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:8c:be:1f:ba:ad:67:74:e0:d5:43:ad:30:53:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Mar 20 14:01:06 2026 GMT
Not After : Mar 21 14:01:06 2026 GMT
Subject: CN=03dbac3799e8f5c8800a269584ca1a7ffb16171b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:7b:45:46:7a:fd:62:52:83:a1:8c:cb:e3:
da:fc:85:fc:e2:25:71:4a:63:e2:22:8c:3a:0a:00:
19:5d:95:ce:d5:40:6e:fb:50:d7:79:fa:f5:b5:c0:
a5:4c:52:26:53:c6:46:28:db:75:f5:ab:d3:3d:bd:
17:ec:59:78:0e:a0:d0:07:98:40:48:4e:9f:09:db:
d5:76:76:94:10:01:98:67:3f:33:82:a6:90:f5:8e:
44:b2:b2:8a:e6:0e:d1:42:98:df:63:67:2d:23:5d:
90:35:c1:cd:c0:74:37:29:e5:6e:ef:51:dd:b0:44:
56:99:2e:e1:34:39:26:77:01:cf:c5:2d:47:cc:e2:
1b:59:7b:81:a5:5f:8a:bc:c4:33:61:57:b3:54:8c:
bf:d9:3a:e0:dc:37:8d:71:4b:6e:d2:25:6c:ec:0d:
31:99:07:17:2e:c8:1c:da:86:4f:10:2b:b8:1d:b1:
4d:98:65:1a:72:80:d6:44:88:03:e1:d4:70:38:10:
ff:95:5b:06:e8:98:c1:01:e6:5b:67:8d:d4:9c:da:
0f:d5:e7:a6:7d:38:69:2f:bd:b7:f5:df:45:e8:91:
20:98:fb:db:94:e8:f5:7a:65:29:47:70:f2:4a:83:
7c:2c:b2:27:94:26:8b:a6:e5:89:8b:3b:1f:17:21:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:AC:37:99:E8:F5:C8:80:0A:26:95:84:CA:1A:7F:FB:16:17:1B
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cb:7b:aa:b3:9b:36:a1:ea:0b:94:2b:b1:0c:04:25:6b:4b:
ee:cd:c1:48:d6:1a:68:23:9b:bb:60:19:bc:99:28:f2:ab:52:
ae:61:68:54:ed:75:75:6d:7e:12:a0:74:5a:d2:a2:7e:8b:10:
71:a4:de:9b:b6:92:f0:02:28:52:c8:eb:df:a1:a8:bb:3d:de:
07:8d:c5:32:07:5b:25:e6:c5:ba:67:58:7b:7c:01:0c:af:84:
a3:5d:fa:f9:b8:01:76:b5:4e:34:1d:74:02:a7:3a:76:5e:29:
0f:03:84:97:ca:24:94:3e:4c:37:e4:57:b0:e7:f4:91:39:85:
27:16:f0:26:d0:b5:65:c1:42:51:5c:7a:75:8b:b9:b5:a0:fd:
14:e8:39:8f:5f:cf:e5:7a:0d:47:8e:6a:aa:82:73:49:f8:b3:
a5:73:f0:3f:82:5e:6b:cb:e6:b0:c4:36:e1:bf:12:1e:c5:f7:
44:b2:2b:c4:0d:8d:f5:84:a4:ac:cd:5a:a1:a7:ae:41:f8:03:
1d:4e:31:b1:52:74:69:a3:ea:dc:d3:79:92:af:f2:34:08:48:
ed:a1:73:e8:b7:e4:63:21:43:50:96:8d:87:b4:09:b9:b4:f1:
62:80:6c:f3:56:00:58:0a:b1:2a:78:4a:95:ea:ce:83:b0:3b:
99:bd:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:36:49 2026 by rpki-client