Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: 3O4tKnBFR6TcIvx2bZNggfCbsSu+N0tlFWfT0dxhEEg=
Subject key identifier: E6:B1:4E:7E:E9:18:AB:1A:DC:B1:E9:B5:F7:8E:04:67:78:10:23:E1
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019F111BBC66AB3655C6623BB184882F3C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 13A4
Signing time: Mon 29 Jun 2026 02:00:58 +0000
Manifest this update: Mon 29 Jun 2026 02:00:58 +0000
Manifest next update: Tue 30 Jun 2026 02:00:58 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: qIGwpxQ2e74EXxy4v5+vfG4ai+CRLmw6Ypx82g6rHs0=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:bc:66:ab:36:55:c6:62:3b:b1:84:88:2f:3c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jun 29 02:00:58 2026 GMT
Not After : Jun 30 02:00:58 2026 GMT
Subject: CN=e6b14e7ee918ab1adcb1e9b5f78e0467781023e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:f2:d8:8e:21:92:e4:76:c5:59:e3:1b:95:
49:4e:c3:61:fc:aa:46:3f:0a:88:36:8e:56:bc:64:
f2:e8:6b:a3:98:98:97:87:49:9e:54:8f:ba:3e:64:
ca:b2:1f:78:3a:34:5f:05:29:66:17:4c:c8:71:9c:
8c:e1:60:2d:99:a2:aa:ae:62:eb:61:37:58:e2:2c:
63:7d:ac:5b:d2:ca:cd:df:97:5e:3b:d8:d3:45:cd:
27:ed:bc:48:78:ea:e2:ac:a4:47:8a:12:4d:8f:2e:
e7:c0:68:44:0f:42:4d:a0:e2:f3:44:8d:2c:18:ef:
fe:cb:b5:de:e6:7e:1a:95:fd:f7:2c:35:83:3b:cb:
e5:46:d7:33:3c:cb:de:7c:9c:a7:ef:7d:18:6f:64:
7e:d6:50:e4:d0:de:79:76:bd:9c:3a:f8:00:08:d7:
25:a5:20:78:b2:73:b2:a7:57:ab:30:41:96:91:3d:
46:60:1d:7f:d9:dc:8a:8e:c8:2b:12:1c:3e:7b:b5:
ac:08:a1:c0:22:34:c2:f3:34:1f:45:83:04:52:b7:
0d:d8:82:ab:cc:9e:2a:5b:52:ac:84:e4:bf:ed:be:
1a:b1:fd:cd:6a:9c:eb:82:90:98:c9:5c:22:ad:1a:
e8:72:d4:1c:54:7d:3e:d8:62:a8:ad:ba:15:94:dd:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:4E:7E:E9:18:AB:1A:DC:B1:E9:B5:F7:8E:04:67:78:10:23:E1
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:ca:20:56:c7:33:c2:cb:f6:b1:40:86:01:66:ee:1e:4c:
8b:be:a7:ac:76:e6:78:4c:36:4a:49:e8:60:e2:20:d7:78:90:
78:21:88:d7:e1:3a:a9:00:e2:bc:cd:9c:c9:86:5e:f0:f5:00:
44:4e:0b:d3:f8:44:03:8d:b2:bc:02:7c:c7:8e:db:50:3e:54:
4e:8e:14:bd:40:e4:74:6d:8a:66:46:71:f8:4e:f9:21:71:01:
5e:48:fa:07:50:29:5d:3b:2e:77:35:c5:73:1b:95:c2:8b:06:
a5:19:5a:47:d8:c0:53:5b:92:aa:4e:db:bd:9c:37:fb:76:2a:
be:8b:ca:23:b8:2d:dc:35:90:e3:f4:a2:ab:ef:c5:9d:84:af:
bf:19:0a:db:94:36:66:68:2b:9e:23:d5:de:4b:bd:6b:74:49:
6c:b6:77:70:9f:32:0c:99:de:84:5a:6f:02:4a:84:ce:79:46:
5f:c4:b3:fa:fa:06:8c:11:31:c4:96:19:3d:76:77:10:7c:ef:
f7:7a:47:76:f5:12:fe:ad:0d:40:47:26:c1:6b:90:ba:00:c3:
f7:13:6d:47:d2:c9:0f:20:29:1d:20:31:86:8b:54:4f:ff:00:
3c:0e:89:08:13:21:79:2e:8e:6d:90:12:09:95:fa:c6:68:cf:
a7:5c:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:46 2026 by rpki-client