Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: 72jGHonITtutCipZN4tSQz/20jXOF75Fk65kFjA3Vns=
Subject key identifier: 0F:58:E2:82:73:EA:B5:53:C5:33:41:B4:DC:5A:66:1C:49:A1:C9:54
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019D38D397BDA8BD34EE8CEC63AEBA2D7BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0C88
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: qsAsZMuO4PTv70IvKSGHNqh9MKw+yoPsqYGVU51B0GE=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:97:bd:a8:bd:34:ee:8c:ec:63:ae:ba:2d:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=0f58e28273eab553c53341b4dc5a661c49a1c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:03:85:4e:50:77:fc:07:a7:25:ce:b2:d6:
a5:c4:43:87:56:2c:f7:5a:df:ef:46:65:7a:df:56:
62:b1:0a:3c:e7:18:26:62:08:fa:87:10:87:98:2c:
9c:6a:64:90:17:8f:b5:c3:b5:27:39:4d:59:6f:92:
40:a5:8b:5c:ad:49:39:ee:3f:a4:64:5e:25:bf:42:
49:b7:e5:99:03:a7:fd:62:27:46:ea:38:d2:08:84:
2c:e4:e9:85:36:cd:8e:29:4a:cb:95:67:da:db:90:
f0:20:47:ed:b5:05:1e:a6:60:13:b2:dd:3e:05:f0:
65:6b:21:4b:37:4a:a8:ce:eb:9e:b2:4a:c6:ca:eb:
e6:c6:7d:14:b2:1b:0c:04:62:6e:fd:c7:f9:55:13:
7d:49:1c:39:ba:4c:16:c8:29:2c:6c:fe:59:f0:56:
a1:eb:87:ff:4a:fc:d1:de:03:34:ca:ee:90:67:0f:
11:3b:a4:91:66:0e:10:a0:bb:42:e8:a2:f1:6e:66:
21:78:92:14:0a:e3:5c:39:2b:bc:01:6c:b3:f4:6c:
08:46:78:49:6d:bc:0f:0b:bf:7a:c8:e2:19:00:de:
15:46:7a:19:c6:84:ce:f1:1d:d7:bb:c7:23:3a:69:
c7:4e:9f:f3:6a:34:dd:66:4b:b2:40:32:06:03:48:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:E2:82:73:EA:B5:53:C5:33:41:B4:DC:5A:66:1C:49:A1:C9:54
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2b:38:de:e4:df:f8:22:d8:51:59:9b:e7:d6:37:ec:20:99:
57:1f:77:a1:88:98:8e:39:4a:ec:49:29:85:49:87:38:ba:ce:
ca:c4:f4:d2:7e:44:83:69:87:05:6b:ac:04:c9:7c:d0:40:e8:
8d:12:f7:c3:30:5f:1b:25:78:eb:49:2b:eb:cc:d9:f8:59:10:
09:94:0f:a5:6f:41:f4:6d:9f:ff:47:9f:67:05:13:8d:3e:46:
99:11:09:52:6c:ff:73:66:7b:5e:f7:87:37:cc:30:70:a7:c0:
ce:13:b8:6a:93:a6:ec:95:9d:8f:c2:1b:6c:b2:8f:d7:06:8b:
fe:f2:a9:d7:4e:1d:62:f9:d3:17:71:da:e1:32:30:74:9c:2d:
18:23:7c:87:48:ee:1d:6b:9d:da:c7:54:51:bc:e2:f8:97:d3:
1c:f6:4c:bd:41:b3:4b:cc:7f:97:8a:a8:1f:1c:59:7e:07:51:
ac:c4:e1:cf:42:ff:50:6f:14:38:cd:3b:a5:8c:9d:63:9f:54:
01:9f:ae:d6:55:52:41:5f:ee:10:f7:da:1f:50:81:6d:d4:50:
3c:ff:72:09:d8:77:c2:cd:4e:78:be:55:54:b3:cb:de:6b:b1:
ea:80:13:45:99:4e:78:84:03:f3:76:8b:5f:98:94:d2:42:cb:
dd:18:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:04 2026 by rpki-client