Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: Z7yOApkk/TTIkCosNSCMaPAL2szRzL19uVtcX1zLxsg=
Subject key identifier: 84:16:F2:E1:2C:F3:B4:6A:27:F0:F4:A2:36:4B:08:C2:B1:9A:A8:6B
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 019CABA1F60F5CCC726432A81A795D4B2385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 17AE
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: QkiwDdoqGneFxhueC1tYh17gEHY.roa (hash: S+EvCH9iwtFs/o9t8OSVI9PK9t1NWkiQ5QvCjj3oEWA=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: uE4VyemWtj2FpFeiaa/eudorp9qcTtmZNKnzNMj333Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f6:0f:5c:cc:72:64:32:a8:1a:79:5d:4b:23:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=8416f2e12cf3b46a27f0f4a2364b08c2b19aa86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:00:ed:a8:19:e4:fa:76:0d:01:a6:34:89:
1e:b5:5a:8b:e7:de:3b:13:c0:22:bc:e9:1f:3a:26:
95:ea:46:02:a1:ec:0e:df:0c:0f:ed:86:60:e9:af:
4d:48:c7:a9:bc:2f:ba:2f:99:8c:58:ce:93:73:12:
9b:02:cd:97:59:b4:75:23:a0:f1:ee:2b:78:fc:8f:
8f:db:60:fa:2c:1e:d6:59:b4:ae:2a:d8:ee:36:20:
35:87:e0:8c:82:65:97:23:e5:4b:55:0e:87:ad:2e:
45:ce:0b:2d:4d:f6:0b:1e:01:9f:99:71:55:47:c1:
fc:99:e9:d2:80:db:8a:53:4c:fa:ee:68:2b:ec:12:
78:1c:45:db:1c:f5:8d:f9:18:4b:c7:c9:9c:6f:0a:
52:33:88:8f:da:d4:ce:69:15:eb:a4:0d:68:0b:d8:
44:ab:e2:9a:71:a6:b5:a3:9f:03:e4:39:a0:c7:c3:
ae:86:80:b8:a8:25:d2:b4:f5:ba:28:f1:eb:9b:c6:
27:93:b1:98:67:87:d8:a3:32:81:30:c7:16:35:39:
d4:ae:c7:df:46:57:01:ab:e5:08:95:bd:1c:c7:87:
96:7f:d9:b8:46:49:04:25:f3:2f:10:e5:c5:6c:ec:
6c:2a:48:d5:d0:d3:d3:f5:5d:5b:99:61:46:b0:bd:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:F2:E1:2C:F3:B4:6A:27:F0:F4:A2:36:4B:08:C2:B1:9A:A8:6B
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:90:4f:c3:9a:d6:97:5b:17:a5:80:f9:5e:44:1b:05:f5:
b9:b0:fe:f0:5e:52:61:95:64:74:5a:0f:da:86:fe:9c:d5:97:
2b:7e:33:ed:52:1b:05:8c:7e:e6:8b:88:a1:7f:2b:b6:ed:3d:
6c:8e:99:b3:d8:01:2a:c0:80:70:e5:3c:e1:45:6a:28:57:a9:
c3:14:8b:d1:03:c6:4d:c0:dc:e5:2d:c2:3b:aa:6e:5a:a2:f7:
fc:19:19:5e:4e:df:33:dd:50:06:55:61:e0:87:ae:cf:71:94:
e6:90:c6:01:a4:5e:a0:95:21:6f:3c:56:1f:06:5c:b8:eb:be:
5a:d8:c4:29:6d:bd:86:f5:27:b6:5f:46:ae:20:f2:61:f8:1b:
78:4b:3f:2c:53:89:8b:42:62:ea:63:5f:04:bd:22:77:07:08:
99:34:56:f8:91:95:a0:e5:25:d0:79:1c:e4:a2:b0:11:cb:0f:
a7:e8:d0:da:eb:d2:99:a2:ec:46:fb:43:91:e6:12:06:54:fe:
1f:fc:8c:7e:4f:64:41:3e:e6:a4:b9:69:8e:4c:c0:f7:99:50:
e6:e6:8e:40:9f:17:83:0e:3c:f3:95:c5:36:57:58:a2:c7:7a:
b0:eb:94:30:2a:95:14:da:e8:aa:43:99:2e:32:9a:a9:c3:f2:
aa:09:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:43 2026 by rpki-client