Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: YZPz7kgoxIe1D7jn5b4t2FEjoK0pMcuQHIAjGT/bseY=
Subject key identifier: CC:B6:E6:BA:D3:F4:8C:AC:B7:52:98:41:DA:0C:43:F6:C8:D9:BA:49
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019CAC46AD8350735B22CA86C8C3967C8C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0C3B
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=)
2: H180kdffd3luCWDv6OkwCGcrOfc.roa (hash: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ=)
3: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: XNz5ewDOjGm8/OnoDw2RcuhGBe+JLwkO7CNt06zy0vA=)
5: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (hash: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s=)
6: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ad:83:50:73:5b:22:ca:86:c8:c3:96:7c:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=ccb6e6bad3f48cacb7529841da0c43f6c8d9ba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:81:c8:38:b8:98:73:ea:4e:67:4d:c8:7a:
42:b7:60:2a:a8:d0:02:55:f9:5d:15:63:0d:6c:4e:
eb:cb:54:9a:b7:00:d1:76:09:ad:c5:4f:82:04:d8:
28:0c:3c:7e:98:c7:97:d1:ec:99:1a:96:11:05:d6:
01:45:04:80:dd:b0:a1:c9:d6:c3:fa:7c:cc:bc:95:
29:81:d3:01:60:87:d4:42:65:69:16:00:78:ff:9e:
72:40:2a:e7:32:17:c3:e7:af:8b:c7:59:ad:5f:79:
30:b3:bf:ee:a8:26:65:13:47:7e:05:6b:a6:7f:bc:
d7:8a:6a:ee:28:90:8d:43:77:57:c2:62:d9:94:82:
68:eb:ff:f0:57:f7:d8:bc:93:08:cc:51:d7:fe:76:
1b:e4:e5:f8:5b:95:b0:71:5e:3a:ca:ca:12:0b:b1:
47:a0:22:89:43:a8:e4:0b:9d:5b:91:98:46:b0:60:
4b:13:3d:2a:ae:b7:1f:1f:2b:5a:f9:47:0f:4b:0e:
e9:59:08:c3:90:63:b3:31:3b:01:21:54:a1:a1:92:
5c:10:e8:e2:49:c1:8f:4b:df:7d:f6:a6:dd:f9:a5:
84:88:b5:d3:47:cb:c0:8e:01:5d:61:94:98:d8:70:
49:22:81:ba:27:bd:25:46:79:6f:03:23:20:3a:04:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:E6:BA:D3:F4:8C:AC:B7:52:98:41:DA:0C:43:F6:C8:D9:BA:49
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4c:9d:78:78:73:cf:97:1e:ae:34:f1:dc:4e:5b:3e:4c:6e:
d7:f0:a9:92:b6:71:e9:5c:7a:75:49:d4:1d:e9:10:55:af:d6:
1b:7c:ae:69:1c:66:30:12:57:68:c9:c5:47:dc:c3:c0:7e:ef:
8d:ca:44:d6:2b:7b:6d:9f:a3:5b:90:fa:6c:fb:cf:b5:30:7b:
e7:c3:63:cd:35:bc:24:a0:57:94:f0:d9:a5:d1:13:a8:29:32:
dd:1b:d6:43:3f:73:fc:c6:8a:8e:a8:81:59:72:3b:b2:54:47:
b4:ee:28:b5:a1:65:8a:ef:e2:48:8c:f6:a3:f6:76:33:f6:0a:
54:69:37:7f:28:e3:77:86:f8:27:4d:52:cd:45:47:44:aa:82:
9e:bc:b6:1e:50:52:ef:4a:d5:9c:e2:bd:51:3b:96:28:10:0b:
c6:7f:ca:fc:45:d7:97:d2:2a:2b:ca:d1:59:3e:ec:f0:7e:fc:
28:1d:f3:9a:df:9b:27:91:84:71:76:e4:01:b7:06:d8:4e:de:
be:a8:df:46:72:3c:6b:20:49:9c:30:84:66:1c:37:94:dc:cf:
c5:a1:66:03:3d:4c:41:8a:28:9a:98:57:55:4c:c2:95:d5:b0:
eb:a7:da:0e:e8:dc:50:fb:74:78:38:7c:f7:bd:22:d3:37:79:
7f:07:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:24 2026 by rpki-client