Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File: kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier: Xmmuoprcs5658z5kqtDlUAwmQLhcyxUhORC4sLwjqyk=
Subject key identifier: CD:87:0E:67:CB:B1:D9:5B:0A:70:B6:10:75:05:84:C8:63:31:A0:7C
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 019D3977DB7B3A7965310F07A62E0BE73EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: bEArHlljEiQd4PzQYnP+LerHJ9qrSzINgmdN2klQloc=)
2: xpFzvNysauejwNurSrVoomGPi2g.roa (hash: ZWen67CGabL9A0ahpVR1yOAZANbCjCBbSuhLawAwcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:db:7b:3a:79:65:31:0f:07:a6:2e:0b:e7:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=cd870e67cbb1d95b0a70b610750584c86331a07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:47:dc:f7:93:29:9e:47:1d:63:26:44:06:
b3:41:ef:ba:fd:2c:dd:bb:81:d5:96:fe:2b:be:cc:
62:87:f4:0d:b9:90:3f:30:73:b8:62:91:0d:8e:ee:
80:31:7b:28:d2:7c:34:db:ff:bd:d3:77:00:4b:ed:
59:2c:26:90:f8:fa:c8:c4:dd:91:89:04:5b:97:49:
25:d8:26:6c:45:1a:3a:2c:78:78:df:82:67:13:24:
0d:8d:66:41:e9:fa:36:ea:91:56:19:eb:64:d1:6a:
66:31:fc:6a:c9:4f:d3:5f:b2:5e:ce:f8:78:4d:b4:
40:9c:1b:17:ca:a9:8d:9a:02:d5:52:ea:3f:59:e2:
a4:8e:40:2d:73:e7:30:34:fe:74:9a:15:e0:f3:20:
81:73:a6:3e:7c:0b:dc:a3:dd:87:54:b1:5e:b4:45:
3f:2b:3c:8a:0a:5d:21:e2:ef:8d:af:01:30:8f:c6:
f0:8b:30:14:4f:4a:23:7c:c6:f1:99:64:b1:54:97:
72:4b:b5:e9:56:f2:1b:2a:0b:16:ab:d7:06:3d:61:
b0:16:97:27:75:ca:3e:d8:97:cb:75:07:3d:39:0a:
2a:dd:a0:eb:3c:05:c4:b0:1a:a9:ba:4f:e5:66:39:
f6:d2:49:28:8d:84:b4:85:3a:d1:80:56:34:ed:fe:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:0E:67:CB:B1:D9:5B:0A:70:B6:10:75:05:84:C8:63:31:A0:7C
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bc:0e:25:e1:aa:21:e1:2a:f5:09:ca:94:93:56:be:df:d9:
34:dd:1d:cf:15:27:7d:01:22:a2:8a:21:2f:e8:42:1b:c6:4d:
af:13:27:6a:66:50:c9:24:30:05:47:b7:04:ad:92:39:00:34:
14:8d:6b:45:a4:8b:2a:6a:60:a4:66:f3:45:15:c3:9d:54:fe:
fc:ba:fa:5c:0a:f4:23:6f:38:f2:67:bd:a0:3c:12:f2:22:4e:
c0:8c:00:78:a0:79:23:63:6c:6c:a4:d3:54:96:90:38:df:92:
d0:d5:af:0a:3e:d5:9e:51:77:31:0f:9d:f5:2f:06:6c:82:37:
fc:94:05:83:78:fa:5d:20:2b:a5:f1:67:ac:4d:54:17:95:b7:
ac:46:c7:35:b9:d3:ea:96:48:65:0e:50:a6:0e:dd:04:2c:d3:
aa:e0:20:d8:7a:0f:7d:4c:90:3c:45:df:4e:94:f3:cc:1e:c5:
5d:cc:d7:84:2d:8e:94:16:31:36:c5:9e:95:46:07:dd:c4:d9:
23:a8:64:04:1c:c0:e6:34:c0:57:11:5f:cc:e0:7b:df:1d:e4:
e9:2a:26:df:69:bb:f9:53:b2:60:e8:d6:d9:33:a6:d6:c7:48:
fd:7f:8f:9f:b1:48:f3:9d:f2:de:b8:68:15:0a:b9:b1:cf:a5:
41:8b:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:50:37 2026 by rpki-client