Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: P3NNIBAkIN5x7dOzb7fLSHrCuwO1BvuTjex1H6nkgfE=
Subject key identifier: 59:C2:11:6B:4A:26:CF:8F:54:21:C0:D2:E0:B2:33:B9:18:93:CA:FC
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01A18450F298A6B778C50A3C5D73D2135F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 1319
Signing time: Wed 28 Oct 2026 21:00:59 +0000
Manifest this update: Wed 28 Oct 2026 21:00:59 +0000
Manifest next update: Thu 29 Oct 2026 21:00:59 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: TNG8AnODUbL6mF6yQKRUjRTi79wXxqz6njrBN7Ez+54=)
2: NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa (hash: fQmf+0QjeWGgS66kmRBZPjLky3GL2ce/S+K3VIzYjtw=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: eFgaCfFQ4wnN2TLjUx11IbfSUic.roa (hash: PRgXnTA2HUCK93Q2oPHby6jgjDBYph2NqjlwyNitfzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:f2:98:a6:b7:78:c5:0a:3c:5d:73:d2:13:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Oct 28 21:00:59 2026 GMT
Not After : Oct 29 21:00:59 2026 GMT
Subject: CN=59c2116b4a26cf8f5421c0d2e0b233b91893cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:51:5a:a5:19:22:92:37:68:13:a8:ac:09:
80:6e:8d:91:c8:ca:1d:de:9b:38:b2:82:7a:8a:85:
ab:74:9d:47:cc:59:bf:f2:53:ba:2f:6f:73:be:77:
d4:83:70:6d:98:ff:57:ed:05:65:23:a9:9f:f9:53:
fe:14:ae:01:a4:70:19:03:e0:c9:cc:e0:06:59:49:
97:00:f3:6d:84:81:68:5d:75:aa:23:bd:65:c3:fb:
ab:35:57:18:e8:63:7f:ba:eb:8f:9d:a1:45:98:31:
f2:16:fa:de:73:03:95:06:87:7e:ec:f0:40:7a:35:
d6:34:8f:f4:27:04:88:b8:56:88:df:54:f5:b3:91:
00:c0:bb:fc:92:28:45:f6:67:65:73:1e:83:f9:70:
af:2e:2a:8f:44:81:26:76:01:e0:0a:29:5e:06:c2:
bf:ba:76:70:5e:14:15:4a:d5:7d:ca:c2:c7:f6:01:
d2:1c:c4:8b:d8:55:fc:eb:2a:e3:95:01:ec:2e:5e:
fe:f3:fd:f1:a4:73:47:2a:e8:43:8c:9f:0f:49:60:
a2:81:95:54:8f:29:b8:de:1f:fc:44:b2:90:39:59:
7a:d6:18:40:6a:04:24:6d:56:6a:fb:9e:cd:57:f6:
1d:cf:25:a2:4c:c4:a6:7b:c5:80:d8:5d:f9:0e:58:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:11:6B:4A:26:CF:8F:54:21:C0:D2:E0:B2:33:B9:18:93:CA:FC
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:c7:6c:5d:99:01:bf:6d:77:07:e0:db:22:58:56:1a:37:
8d:29:b7:4e:29:70:83:ac:2b:b9:f9:22:d3:29:17:35:ec:94:
a4:d3:66:80:e0:29:46:87:82:22:47:11:36:32:bc:fd:e1:ff:
62:1f:45:d6:98:d8:77:16:43:4f:da:0c:35:4a:0a:36:7f:5c:
e0:da:91:e0:71:71:38:6a:2e:bc:e8:6d:da:fa:d1:21:db:67:
10:da:46:ac:67:84:f9:80:4d:2b:6d:ee:74:c4:6c:52:9b:a3:
47:a9:3f:33:16:f2:7b:7d:f8:d7:92:2c:23:96:96:0d:68:aa:
29:f9:3e:d3:c9:05:83:2c:1d:c2:af:d0:af:fc:52:e5:16:4b:
05:f0:00:19:dc:4a:c5:67:b4:d2:22:7b:fb:0a:e7:e2:bd:21:
0a:1e:10:94:b4:02:24:97:79:9c:04:70:34:fe:26:a5:30:1d:
2f:63:09:2c:7e:c3:02:6e:a7:0f:f3:58:03:89:c1:91:02:87:
83:91:07:00:6c:38:fe:67:e3:82:44:ab:5a:27:4b:ed:05:ef:
9f:0f:67:e0:19:ad:75:77:95:af:0c:72:8b:9a:ca:7c:98:d2:
16:45:0a:15:b0:d0:c6:ce:0a:e5:25:d9:5e:a0:20:10:c7:7b:
14:c1:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:44:00 2026 by rpki-client