Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: NNxrUjwThNJYHjgdom/LT4D+A7Gr8NeZ/xWpX+vgBFc=
Subject key identifier: 16:10:B3:86:F0:71:FD:A9:54:BB:6D:07:84:99:AD:DB:3B:B1:86:8E
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01A148E0DA50595473E52CB904771095850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 14CA
Signing time: Sat 17 Oct 2026 08:00:57 +0000
Manifest this update: Sat 17 Oct 2026 08:00:57 +0000
Manifest next update: Sun 18 Oct 2026 08:00:57 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: DGY9l6oLF5Y6wGo7Xp1gf3AhP3mdBsvQLOaxvXy6YfU=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:da:50:59:54:73:e5:2c:b9:04:77:10:95:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Oct 17 08:00:57 2026 GMT
Not After : Oct 18 08:00:57 2026 GMT
Subject: CN=1610b386f071fda954bb6d078499addb3bb1868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:04:a8:e5:11:74:38:af:7e:8f:f4:ed:1f:
d1:cd:eb:76:28:7d:ac:eb:63:97:b5:9f:45:7a:99:
c1:9a:25:be:9e:c6:9b:1b:df:19:ee:6c:69:d4:45:
de:6a:4e:75:c5:cc:35:0d:53:1c:33:fe:77:24:e5:
1d:d4:25:35:83:fb:d4:ec:7f:e0:ce:15:fd:04:82:
20:7b:9b:cd:0d:28:49:8c:78:42:7e:60:41:2e:f1:
37:90:a7:5c:d1:27:c5:dc:e1:bd:67:3d:4a:1e:3f:
6e:ba:32:ec:bd:9b:ac:18:54:3b:e9:38:eb:60:52:
ff:5a:76:c2:36:a7:f6:e5:25:ee:5a:c3:36:67:50:
65:70:5f:f6:3a:9e:a4:f1:0d:63:3d:ae:be:7c:ef:
85:6a:04:93:9e:f2:2d:62:28:32:55:80:52:fc:75:
30:f1:ea:ec:96:62:3a:4a:bb:ef:31:68:b7:9f:d5:
a0:c6:6e:0f:2e:c4:61:24:9d:b4:38:be:86:b2:b3:
bb:05:1c:2e:65:40:7e:ae:7f:7b:7d:e7:53:01:b6:
fb:d3:6b:3d:9f:2a:42:aa:e8:da:84:c3:02:2f:0c:
f1:94:2e:9a:5b:33:99:91:44:b1:b4:72:3a:aa:01:
9c:35:04:0f:93:0a:ee:db:48:f3:17:56:24:40:4b:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:B3:86:F0:71:FD:A9:54:BB:6D:07:84:99:AD:DB:3B:B1:86:8E
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fd:8b:d5:51:25:71:58:23:d2:d7:da:ba:9e:ce:ba:9e:7b:
68:44:f0:b7:5e:b4:bf:0c:6a:f0:65:cc:f0:51:c7:70:51:d7:
fe:d7:4e:4d:0f:0a:78:85:d5:be:50:26:16:28:2d:78:ad:0a:
ff:5a:f0:da:af:1f:7d:ed:c7:19:1d:cd:bd:f0:81:1e:2d:dc:
d4:32:0d:18:5c:14:85:71:8c:41:7f:5a:8e:44:8e:e0:17:9b:
fd:8f:9a:d4:ad:b4:2f:55:b5:0a:61:6a:9a:e5:aa:1d:e7:25:
85:e8:08:96:61:e4:af:85:2c:a1:9c:26:db:33:0b:45:23:20:
a2:c0:69:b7:53:09:42:d9:5f:8f:ee:e3:18:99:83:c8:c6:d6:
53:36:ed:2a:10:54:9f:60:d7:35:9c:5d:40:0f:be:14:b0:e0:
29:38:35:48:70:80:d5:6e:86:d2:6b:a1:3a:5a:58:c4:90:63:
dc:25:5a:2c:4c:ec:cf:ca:cb:76:47:c3:06:24:08:0b:58:df:
19:b2:40:f9:9c:13:93:f1:e9:34:66:87:15:1e:e9:7e:ee:3b:
89:27:3c:ff:03:60:4b:8c:5d:23:11:2b:58:5c:1c:c0:1e:3a:
e0:60:54:9e:12:29:7e:4c:a3:62:78:1f:99:31:41:8b:fe:2d:
db:09:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:10:24 2026 by rpki-client