Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: H5ys0o6NTpD85Gxcce/LHx83TMuJdbEFAI4WMFViBpQ=
Subject key identifier: AE:5D:73:D6:7B:FB:75:B2:47:02:E6:E3:0B:B0:38:B9:50:96:1B:D7
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019EB8EABE7D40CF0D20EAA14A9016F8F62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 111D
Signing time: Thu 11 Jun 2026 23:00:52 +0000
Manifest this update: Thu 11 Jun 2026 23:00:52 +0000
Manifest next update: Fri 12 Jun 2026 23:00:52 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: nYAgXkwaZ3KeRZMHtJtO+E8zfRqgRdVQ8MB/Td17dEA=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:be:7d:40:cf:0d:20:ea:a1:4a:90:16:f8:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jun 11 23:00:52 2026 GMT
Not After : Jun 12 23:00:52 2026 GMT
Subject: CN=ae5d73d67bfb75b24702e6e30bb038b950961bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:54:f0:47:a4:3e:fd:22:98:a2:de:18:25:
79:28:2f:f2:ae:01:75:60:8a:db:12:e3:41:63:d7:
78:76:67:43:9c:bb:94:48:ec:42:92:0e:76:a3:bb:
0d:9a:42:77:d4:f8:d9:e5:ae:24:48:b1:58:2e:a7:
6a:79:c2:78:42:f5:06:2f:ec:da:74:56:5b:e5:3c:
49:66:29:e0:bb:9f:65:04:e5:cc:39:76:96:a0:41:
5f:25:17:9e:9e:d4:8c:c7:0a:52:7b:e5:ca:1e:fa:
58:6c:ff:c2:c7:1c:68:20:18:d9:39:2f:47:a5:22:
a9:7e:27:1c:2c:cb:65:e7:78:2d:f5:f1:7d:6c:b0:
c0:e9:01:0d:e5:c9:f2:34:f0:41:48:84:d8:e1:02:
32:78:1b:c1:5c:f3:af:c2:3d:74:6b:1f:1a:99:d8:
db:58:90:4f:8d:91:21:c1:6a:22:ba:e6:83:46:42:
2a:dc:01:09:51:01:01:11:fc:aa:6a:77:ee:c7:97:
12:31:bb:fe:1f:de:3a:46:23:8d:38:35:28:ef:bd:
d7:5b:f0:6a:48:d2:8f:37:61:f1:45:1a:bf:10:cc:
e3:3e:53:a2:87:c3:ff:ce:3f:5e:7b:4d:cd:30:c4:
64:86:8c:3a:f5:87:f1:c5:d1:00:c5:ea:02:2e:f7:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:73:D6:7B:FB:75:B2:47:02:E6:E3:0B:B0:38:B9:50:96:1B:D7
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:10:ab:0d:f3:8e:0d:df:bc:96:5d:8d:f0:63:3c:d7:82:bd:
91:70:c0:68:33:5e:b2:d0:39:72:bc:96:f5:e6:a3:c7:02:c5:
79:e0:a1:6b:33:eb:db:71:03:61:ef:02:7c:27:b5:f5:7e:57:
08:1f:ba:a0:41:fc:aa:7a:0f:66:88:22:06:11:ad:7c:e7:b9:
8c:d3:dd:53:f5:66:82:f6:5a:56:6a:37:24:c6:dc:c7:62:88:
13:b8:87:74:fe:71:e5:fe:96:9b:a4:e5:c8:0a:a3:06:cd:b3:
06:9e:d8:2a:ed:0a:a9:84:99:9e:51:81:ad:26:c1:28:f1:ef:
24:23:64:96:c3:00:96:a4:49:bc:7e:d2:a8:d2:34:b3:88:a0:
9b:d8:9e:fa:88:a4:1d:c0:33:56:7c:cd:cc:36:e9:bb:ee:a9:
24:8c:21:7a:b4:42:28:43:6d:89:8d:8f:a6:e9:ed:49:d8:b7:
81:c2:16:69:bf:ad:ec:9f:f9:4e:d7:86:9e:cd:47:f4:88:7b:
20:64:25:cf:1f:c0:ea:11:86:3c:88:d5:00:e3:7e:88:2e:31:
67:e4:3d:d3:05:d3:98:b7:20:34:39:a6:dd:29:1d:bb:a7:23:
93:67:73:a9:d3:c6:e3:f7:10:cf:c3:88:1f:21:d5:56:6f:6d:
77:f6:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:43 2026 by rpki-client