Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: S3ZEDMIuOhezfRz8XGivPi9x0132Gijjm1Lny7mangU=
Subject key identifier: 6A:79:85:88:59:C7:8D:15:21:A6:0A:01:0C:4F:01:AD:4C:76:0B:33
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019CAB6AFA7C2E40F4675BD3CC080E3273AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 171F
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: 4wIx4LJ1dWJbjrhRswSMZ/Kxicwgj7SECLzHlYy1Q9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fa:7c:2e:40:f4:67:5b:d3:cc:08:0e:32:73:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=6a79858859c78d1521a60a010c4f01ad4c760b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:db:c2:ea:24:8c:2d:26:1e:a6:f4:97:df:
18:02:1d:79:b5:d5:ff:32:aa:60:9e:8e:5a:7c:91:
88:29:f5:22:b0:d5:49:af:63:5c:35:e6:07:5c:6a:
3c:f4:51:de:58:a0:a3:f7:f4:3f:e8:83:61:2f:66:
68:8a:a0:20:c2:b8:bf:57:58:c3:cb:67:5a:b0:26:
ba:c0:17:48:36:31:77:d6:5a:c5:64:a6:dd:99:15:
b5:5a:80:cb:4c:ba:66:8b:3e:aa:ef:4a:5c:00:c4:
2c:f2:8a:29:7f:53:ec:af:70:57:b1:c8:c7:0b:9d:
a2:fc:b6:82:d4:a4:10:12:14:05:16:86:4a:fa:93:
71:58:eb:bf:23:12:ef:f7:76:5d:29:76:35:73:9c:
83:0e:33:2a:36:bf:45:0c:35:c6:95:72:35:65:07:
1b:35:00:97:95:9c:78:c6:1f:8c:41:e0:37:0e:7e:
ec:16:97:90:6c:6c:bb:0c:57:11:57:12:d6:fa:e0:
1f:a5:f0:61:ba:da:a0:99:d7:cf:0a:03:ea:44:21:
de:18:89:89:d3:43:6f:80:f5:af:ae:a3:12:80:97:
a0:44:c1:99:76:cc:fc:a0:6e:97:2b:c6:cc:3a:37:
9a:4a:e4:4e:1d:e9:90:46:1f:88:ce:c3:3a:5e:b3:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:85:88:59:C7:8D:15:21:A6:0A:01:0C:4F:01:AD:4C:76:0B:33
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:a8:e9:f0:34:86:66:22:68:46:fa:8b:14:73:f7:eb:d1:
87:a3:74:5f:1e:f4:1f:9e:72:df:51:69:58:19:02:e7:20:5e:
99:94:ee:6f:ab:70:40:b1:6a:b7:7c:18:24:8d:93:10:7c:f6:
0e:ed:88:13:1c:cd:54:a5:dc:f3:34:34:ff:ab:37:d7:74:95:
51:62:72:d8:52:c2:9f:8d:5e:84:30:24:6f:d7:17:f7:4f:d6:
85:0a:61:83:06:0c:df:08:0e:22:fb:b1:64:c7:05:6c:e2:5b:
ee:be:a6:10:b6:2c:ac:08:66:af:6c:0a:5a:1a:2c:2b:5f:4b:
d7:0d:9a:77:01:63:29:48:db:2b:79:85:37:fa:2a:5f:63:38:
bc:f1:82:db:b7:e8:56:bb:21:ff:72:8f:93:5b:48:47:5a:13:
99:ff:cf:e4:ff:8d:c6:9c:b5:c0:56:13:be:8f:b1:d2:72:2f:
26:53:23:6e:e7:a3:bd:cb:94:93:68:f3:16:18:a3:56:c1:da:
25:70:60:2d:2c:1d:11:df:90:0f:5a:7a:8b:93:8e:a7:6c:c1:
24:8e:a5:e3:1e:89:ca:c9:3a:98:5c:09:06:e5:5c:f6:1f:8e:
b9:10:82:23:82:c6:ab:32:99:0b:ad:05:fa:bc:90:90:83:82:
ab:c9:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:34 2026 by rpki-client