Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: t1MIdjEAyUyLst9gh4I1gO6Jf4C2asnoAgY4+Aho+Aw=
Subject key identifier: 95:54:B3:F0:93:A2:8B:8D:5C:FD:78:A8:63:5C:4F:B9:22:04:38:C6
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019DCD18EA992AA1D741B6039962CBF85FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 112B
Signing time: Mon 27 Apr 2026 04:00:55 +0000
Manifest this update: Mon 27 Apr 2026 04:00:55 +0000
Manifest next update: Tue 28 Apr 2026 04:00:55 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: 37jjN5fCIt+amRbHoW7dLi+A9HY/OVFQ7oUe7gG6Id0=)
2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:ea:99:2a:a1:d7:41:b6:03:99:62:cb:f8:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Apr 27 04:00:55 2026 GMT
Not After : Apr 28 04:00:55 2026 GMT
Subject: CN=9554b3f093a28b8d5cfd78a8635c4fb9220438c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:68:90:a7:af:f1:25:05:fd:cc:d3:91:78:
a9:62:c0:13:98:1d:de:17:2d:c0:0d:f1:d4:85:46:
36:a3:17:0b:d5:23:af:d3:f0:2e:e8:1a:59:8e:fc:
43:5a:ba:ad:c8:65:30:fb:06:8f:8d:78:ad:2c:a8:
31:b2:79:65:7d:3e:2d:d0:2b:c8:8c:6c:ee:9f:6c:
60:53:8f:89:a1:08:9c:e2:7b:16:56:8f:2c:f1:e4:
29:93:da:b4:09:49:ee:71:f8:74:78:b4:88:37:f3:
af:26:42:93:c5:12:b6:d0:5d:25:9d:61:b0:44:d0:
82:fd:29:ce:36:9a:72:ac:61:d6:23:29:17:3c:52:
e0:05:68:15:96:73:de:00:00:29:bb:0d:33:bb:e1:
b1:cc:ee:fc:e9:cc:84:b5:f0:b1:7a:f8:66:9a:5b:
02:64:95:1e:c1:1d:ba:9c:36:b5:2a:48:20:c3:00:
0a:ad:78:fc:29:81:c8:a8:48:52:95:f2:ff:43:ad:
8b:bb:15:97:9c:c5:27:1a:26:c3:76:39:cf:50:55:
cf:9c:91:97:7e:0c:9a:e0:25:09:27:74:23:ac:5f:
1e:8d:9b:f2:71:61:a5:2b:f0:10:81:e4:2c:d1:95:
9c:b6:17:5b:12:93:79:fa:46:f5:92:21:7a:9e:6f:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:B3:F0:93:A2:8B:8D:5C:FD:78:A8:63:5C:4F:B9:22:04:38:C6
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5d:0d:08:ac:ca:4a:1d:d8:d2:b3:cd:48:4d:0d:b2:18:44:
62:ef:dd:a2:84:a0:f6:ee:16:10:6a:ef:53:4e:9e:d1:99:78:
85:ae:13:06:7d:34:a0:57:8c:20:49:a1:3d:48:e7:76:64:11:
e7:76:ed:66:07:08:c0:50:f5:f6:49:9a:ad:5e:ed:81:96:62:
82:5b:1b:0c:62:e6:cb:4f:d9:a7:16:93:2a:c0:66:d6:4a:a4:
52:d9:d5:86:60:0b:8e:54:b0:23:c0:3c:a2:3f:9a:51:76:c3:
57:f2:60:d8:b6:15:b7:02:d5:a6:a1:19:86:09:bb:48:aa:48:
00:5b:d8:76:c7:3b:b4:f9:13:7d:02:33:7f:f0:fa:25:52:d2:
54:7b:a1:aa:e4:72:6f:69:f7:ca:99:9d:f8:80:29:31:f0:6b:
00:23:6f:3b:58:29:70:c2:59:e2:c8:f7:2b:81:7e:fa:b6:d3:
17:0f:98:81:b4:58:93:31:c1:cc:b9:7d:6f:21:33:4d:f2:3b:
d0:6e:58:82:6e:b3:03:b2:80:ba:59:e8:7a:9c:e9:b7:6d:90:
c6:48:93:f9:f6:cc:d3:d2:15:fa:e6:20:e1:12:49:b0:03:1d:
68:e0:35:fa:67:57:4a:e2:b4:34:72:d8:1d:d3:39:19:09:32:
ff:bc:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:05 2026 by rpki-client