Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: TqqpGWXKJ2V0kWUZTaJCWZ1o/MBDxhzYFr4G4lR2JlU=
Subject key identifier: 80:86:F1:54:6C:EB:5B:89:1C:5C:C1:30:1F:8B:56:32:BA:E5:4B:90
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019D38661072EC84EF78049771B3191593B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 07FD
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: Zx8QhtLe1pdWI7HEw/FR29wkGu/IRzJIhPgvKgxkSAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:10:72:ec:84:ef:78:04:97:71:b3:19:15:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=8086f1546ceb5b891c5cc1301f8b5632bae54b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:72:bf:05:9b:3c:01:b5:52:3e:60:06:b2:
c4:dc:58:37:81:48:d4:43:4e:dc:46:b3:97:9d:9b:
ee:8b:af:5d:0c:b6:69:30:70:07:e1:d9:97:6c:50:
bb:6f:05:5e:48:45:4b:c2:5c:fb:a3:10:07:c8:3b:
b0:ef:17:89:31:7d:5d:78:a2:f8:06:7f:61:2a:0f:
02:34:f7:9b:bd:2f:9f:be:99:c4:8c:94:c9:5e:2f:
bb:6b:63:4f:a5:99:44:38:d6:cc:54:23:8c:a4:ab:
1a:3b:d9:8e:7f:2b:c3:c5:2c:d4:3f:b3:ce:5d:cc:
9a:56:fd:33:15:fb:43:69:57:26:c7:64:c8:13:06:
c0:7a:0b:89:d9:74:4b:79:11:c2:2f:38:04:3d:30:
aa:4e:19:05:fd:3f:89:b5:93:ec:b1:25:01:e7:07:
da:7d:b3:a6:89:29:15:74:4d:bb:6a:90:61:f7:89:
4a:e9:2e:d2:d8:c2:49:64:0d:b5:11:07:76:d5:22:
7f:70:69:7f:d3:84:a1:ed:87:a8:b8:b4:8a:aa:c5:
3e:78:d3:37:31:57:81:97:e4:74:df:04:c3:6e:0b:
ec:38:a1:b0:7c:56:0c:85:8d:ee:b2:72:8f:c7:eb:
50:02:cd:33:cb:9a:67:53:3c:58:d7:9a:f7:76:1f:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:F1:54:6C:EB:5B:89:1C:5C:C1:30:1F:8B:56:32:BA:E5:4B:90
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:fd:91:43:fd:f9:f6:74:1b:28:4c:b4:dd:a8:a7:e7:17:
42:6c:07:17:15:f5:9b:38:54:b5:0d:7f:62:0b:8b:8b:c4:81:
b3:24:46:1c:2c:34:0e:b1:32:56:e3:88:bd:e4:f4:88:66:eb:
6b:cb:87:49:a7:42:8a:1e:c1:29:28:9f:4b:75:44:c4:44:ae:
d7:53:ee:a2:69:e9:b3:77:27:b3:a2:3e:72:8a:af:9d:c2:2f:
fe:93:71:b4:ef:66:8c:64:bd:31:75:eb:9b:a9:34:84:2e:ab:
c5:eb:83:13:ca:2b:e5:91:4a:98:27:fc:6f:f7:c3:d8:29:11:
ec:21:97:6c:62:f1:81:93:20:b9:13:49:25:3b:a4:87:ef:ae:
95:4c:de:e9:43:47:fd:a1:bd:3a:66:61:36:b3:7a:36:b8:f4:
1e:82:18:bc:fb:42:15:d1:38:ad:44:81:5b:24:93:db:d9:33:
f2:58:0d:db:55:8f:59:0f:ec:83:00:09:e7:e4:f0:1d:84:4e:
f6:1e:c2:34:e2:70:67:a8:93:75:77:11:c7:14:94:82:3b:52:
30:c7:e8:f1:34:59:25:bf:a9:03:0a:2d:43:11:93:05:cd:fc:
f7:e1:89:3c:da:d6:01:6c:24:d2:b3:ee:d1:86:c4:67:39:ca:
a4:64:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:31 2026 by rpki-client