Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: ooi46jcD/1medayuoMnS7O3T9g9LpQl9lzGnM/zQrEE=
Subject key identifier: 4F:C2:5E:E9:BA:28:79:90:26:61:EE:F6:8B:B4:EE:B7:84:1B:2E:6B
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019D38D2BCAE68A79295B7C48107193E4FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: jex2ap7F52xSLT+gAzWO1up1dyNbbt/Yyg8C6MwFJ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bc:ae:68:a7:92:95:b7:c4:81:07:19:3e:4f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=4fc25ee9ba2879902661eef68bb4eeb7841b2e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:b1:43:08:bc:30:e9:ce:26:ab:b0:ce:28:
58:05:6d:8c:41:03:9a:72:2f:0d:ee:c3:36:36:e5:
6b:a9:58:46:21:69:2b:39:1e:40:0b:b0:5c:dd:d2:
58:c3:47:c4:cb:00:79:01:37:6f:77:03:86:86:f1:
f2:6a:ce:1a:d7:26:65:79:44:61:d5:30:ca:bc:7e:
84:05:bd:6f:54:6d:c9:37:5c:d1:9a:8f:ea:e7:c2:
47:bb:54:21:2c:58:a8:7b:57:53:9f:fe:50:83:3d:
3d:f6:d2:0d:4e:98:01:01:b9:21:d8:d2:f6:00:f2:
90:83:94:47:aa:ab:7c:d2:80:5f:8f:1b:39:bb:f7:
ec:47:ab:7e:21:53:73:7a:6b:97:7e:b9:f4:12:89:
70:10:b4:fe:3e:66:3f:63:38:c3:da:df:e6:91:e3:
eb:60:2f:a4:a3:f2:87:7f:fa:ab:fe:ec:23:f4:8c:
52:be:b3:e6:b4:d9:b3:c3:08:df:27:c5:82:07:8b:
d6:11:a6:7f:6a:58:27:20:59:ee:a4:e1:16:c2:0f:
d7:5c:9d:8a:b0:33:bc:18:e5:6a:57:86:0e:65:20:
55:1b:6f:ce:13:a4:dd:af:8c:06:02:db:69:94:f8:
52:42:5e:f0:82:90:6c:4b:62:9b:ee:4f:0a:2a:9b:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:5E:E9:BA:28:79:90:26:61:EE:F6:8B:B4:EE:B7:84:1B:2E:6B
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8d:00:6b:08:a8:39:48:b4:4e:c0:59:10:b5:c4:42:12:92:
c6:6c:39:69:85:cb:3f:7d:2b:69:5f:fd:f5:c1:2a:fd:49:00:
72:62:30:2e:8c:e6:2e:66:fd:ec:72:3f:ae:94:ce:ea:96:2c:
15:29:24:6d:5f:dd:92:40:86:0a:47:01:ab:d7:4f:5f:c3:8f:
38:59:b1:3d:02:c0:da:23:2a:d8:4a:65:3e:a7:f3:cf:72:4c:
32:e1:e7:d3:b2:7d:16:33:c2:00:f5:15:ed:b8:a6:0c:f3:cd:
c2:08:0e:57:8f:5d:82:ce:1f:ee:ac:9c:ab:3d:35:12:7a:f2:
23:c3:2e:19:7a:18:56:46:7f:8d:22:6c:5c:0a:22:0f:c0:52:
15:0b:85:5d:a1:47:e6:2f:e3:52:cc:1c:c0:dd:b2:72:1f:25:
41:3b:fa:1b:81:4b:02:5d:a8:1e:35:1b:3b:0f:82:40:dd:9e:
15:62:c9:01:e4:ad:cf:f2:2c:d2:8d:8f:84:c9:fb:c8:1f:7c:
6b:ac:28:00:b3:d9:67:16:d0:7f:bd:6e:8e:33:72:b8:73:f2:
16:75:fb:a2:24:cc:55:b5:55:79:58:c2:ed:df:f9:2b:eb:2e:
81:56:d8:34:f6:88:ba:eb:2e:8a:64:57:a5:53:38:4b:7a:8a:
fb:c3:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:32 2026 by rpki-client