Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: O0djR2UX9zkUE4OHgb5WxrvNGyydhxlF9a8sbhrtNcc=
Subject key identifier: A6:CC:94:68:47:48:B3:08:3E:31:ED:95:DE:3B:C0:74:05:3F:B1:36
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 019CAAC5FC0274F6F4EDB4DD149D1F844DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 0720
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: L+64Po34tLO27jvItdidc5s7nrXKILj4AbyGGGacihY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fc:02:74:f6:f4:ed:b4:dd:14:9d:1f:84:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=a6cc94684748b3083e31ed95de3bc074053fb136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:c3:87:a1:20:72:46:a2:1e:c6:7f:f3:3d:
b9:ee:f3:62:f6:18:4c:a6:bf:11:7d:44:bd:cc:17:
5e:c5:a6:7b:90:9a:f4:86:16:22:ce:20:b5:8b:12:
55:b4:00:7e:50:81:95:cb:89:23:ef:64:5e:30:8e:
86:e0:96:b0:ae:e1:df:0e:e3:3a:67:66:cb:de:84:
a0:2c:ae:9c:b1:40:77:87:65:15:79:7c:21:17:76:
c8:8e:a4:90:bf:3d:1e:d8:45:42:36:55:3c:e7:6c:
70:c0:17:67:7b:e4:90:25:d3:6c:84:eb:25:09:5d:
08:f6:60:ca:b5:95:f5:1c:32:23:7f:63:40:42:24:
b0:8d:f8:44:dd:f2:74:64:a3:65:be:ee:98:45:2e:
4a:4f:69:9f:08:39:70:9d:11:2b:f3:1c:5f:a9:1b:
7c:04:18:52:15:fa:58:3b:57:c8:49:17:44:a8:01:
85:ca:53:20:1f:01:e3:58:5b:78:8d:d2:8f:a7:9c:
aa:14:72:9d:da:c5:2a:15:aa:f0:0e:18:e7:d4:43:
3b:f8:ea:cb:65:6d:2c:2d:cb:ab:b1:3a:e4:66:46:
6f:ef:fa:4e:4b:e3:0f:ba:6c:69:a3:45:42:9d:f4:
9d:12:c7:1e:1c:d8:5e:6b:7e:1e:e4:00:46:1f:67:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:94:68:47:48:B3:08:3E:31:ED:95:DE:3B:C0:74:05:3F:B1:36
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:35:78:5b:42:91:d5:96:0c:72:c2:4c:0a:17:80:1f:20:
75:ff:98:27:e3:fd:cb:17:98:09:a2:ed:cb:f5:51:e8:5b:69:
56:b3:10:9e:8c:e4:61:13:d2:b5:a8:1e:0a:96:dc:80:cf:69:
fd:89:5a:bb:35:4b:d9:dc:8d:03:ce:ed:26:02:00:7f:8f:44:
07:30:24:47:04:eb:ca:e4:0f:55:2d:b9:0c:53:34:15:59:9c:
f2:c0:ee:1b:b2:91:ef:8b:b2:a5:20:16:93:19:5b:25:e4:41:
f8:66:b3:2a:cd:1b:b9:62:3d:a2:d5:9d:d5:f4:82:e6:51:f5:
14:fd:46:30:f4:10:8f:cc:4a:34:53:52:5a:23:47:46:aa:89:
91:3b:b4:57:ba:33:4c:4f:17:ed:07:33:a1:7a:63:9c:c8:aa:
8d:2b:a1:de:d6:8d:02:12:ca:52:d9:26:0d:e8:c3:e2:cf:7a:
44:be:75:a6:74:88:eb:db:80:2f:63:24:d9:ac:d1:b2:d2:e7:
20:b3:3c:86:06:aa:42:3a:56:c7:82:d5:21:66:f0:fc:5e:ae:
70:ab:f3:04:7d:1c:ba:1d:05:43:f5:38:47:b4:24:53:1f:24:
ce:cd:d2:b6:83:0b:40:8b:31:56:1a:1a:42:6c:04:4e:c9:cd:
44:1a:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:42 2026 by rpki-client