Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: 3aISxwLxBTxDOx0nlSf6iKcJ1rbIoWR/HatsQDV4Wr0=
Subject key identifier: 38:4A:83:13:57:2A:70:36:AC:A4:E6:C6:53:7C:F6:31:08:96:7A:89
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019CAC103F13E514CCCD4EEAD2795EE6CC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: /hsG39lZ5HK0CMivR0uUsbKSsyVojga2nwW6Ya2Oxlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3f:13:e5:14:cc:cd:4e:ea:d2:79:5e:e6:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=384a8313572a7036aca4e6c6537cf63108967a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:11:09:c8:76:9b:56:10:7f:cb:e2:bc:7d:
8a:d1:c8:88:7e:cd:7d:13:8c:5c:c0:54:50:0f:f0:
2c:55:10:9c:b0:4b:7a:d9:90:6e:0a:6a:65:fb:88:
da:91:b2:d7:c5:0f:a8:de:b6:64:09:0b:d0:06:ae:
28:74:5c:a7:11:f2:89:b8:d1:2c:1c:18:73:0f:ab:
11:2b:55:c5:4b:00:dc:e9:09:d6:3a:82:a7:b6:7d:
2b:19:78:46:40:31:ee:5d:a3:9e:af:94:c9:e6:d3:
a9:3d:48:6a:f2:f2:4a:fd:ea:63:cf:55:ca:0c:11:
1b:e7:51:7e:11:87:27:aa:6b:40:8c:9c:3c:c8:77:
88:ce:33:e7:6f:29:15:fd:70:42:0c:e2:95:c9:a0:
cb:17:81:f9:9e:b7:50:b3:46:c3:2e:1d:8d:3e:30:
7c:31:10:88:8d:05:7e:b0:cf:c2:7c:9e:18:95:17:
f9:7a:d4:ec:a6:dc:b1:90:ad:10:5d:f8:35:17:ad:
bc:58:e9:4c:b2:60:67:1d:cd:92:d4:12:e1:1d:7e:
a5:00:42:c8:89:ee:30:30:da:f4:97:1e:67:da:22:
52:0c:65:07:72:f7:a2:46:bf:12:89:c0:07:03:12:
7d:b8:10:18:fe:eb:d0:e8:06:d4:5a:cd:d3:cb:10:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:83:13:57:2A:70:36:AC:A4:E6:C6:53:7C:F6:31:08:96:7A:89
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:97:5a:a4:ad:62:75:26:cf:b8:fa:a0:d8:fc:16:21:ad:
7a:85:f1:12:91:28:fe:02:c3:10:40:df:18:be:c0:62:6f:cd:
a3:9f:e2:cd:c4:f9:3a:0d:f8:38:2e:c1:0c:fe:1f:e1:75:b5:
cb:ad:3a:5b:c0:29:1f:75:c9:e6:32:88:ab:67:bd:d8:61:db:
7f:24:a1:a8:77:fe:f2:02:1e:62:b6:92:59:47:db:72:8a:60:
48:8c:7f:c9:cd:d9:08:da:8c:36:db:84:89:d0:5e:14:b5:90:
e9:27:c7:4a:1b:09:14:2d:8f:ad:5d:a4:f8:90:e7:2c:b3:77:
fc:27:95:68:54:cf:b7:1e:e3:c9:ac:48:1e:56:8f:ac:3f:9f:
94:2f:16:8f:4b:09:9a:6f:be:4e:57:eb:bb:2e:5b:30:3b:d3:
c8:ec:35:33:c2:21:19:bd:e8:ca:86:c1:cc:b1:5a:88:9e:61:
5f:91:3e:a6:12:3b:04:00:72:8b:d2:50:dd:08:9d:bd:5e:03:
39:a5:24:53:ab:c1:59:cd:a5:cb:fd:8a:f3:5b:0b:d4:c9:50:
ee:1d:56:bf:e1:85:b6:71:3a:a3:bb:8e:f4:12:3e:fe:86:7b:
9c:d2:77:44:27:19:9d:cb:40:7a:23:7b:0f:ab:22:02:a6:3d:
2f:18:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:24 2026 by rpki-client