Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: wtP11cHq48XgcswjPf5PuuKyUxVNrv4Ve73pWFe+fjA=
Subject key identifier: 60:75:FE:82:18:89:4D:C4:3E:79:9A:87:4A:19:D8:B3:3F:81:CA:96
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019FAA508B4B27C7ED0200E374C54B7EB896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 16DD
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: owS2fZNJq5cCUTNXjaUfLghNlMFcEmwdTC1Ad14Nyhc=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:8b:4b:27:c7:ed:02:00:e3:74:c5:4b:7e:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=6075fe8218894dc43e799a874a19d8b33f81ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:9f:2c:de:a0:04:33:85:b4:ab:6a:75:e4:
c7:df:da:78:f6:b3:f5:34:0a:f3:b9:8d:02:79:63:
36:2f:21:68:79:e7:58:97:16:6e:5d:d6:82:2c:48:
6f:81:12:ff:77:5f:80:49:9b:4a:c4:3b:97:8f:f7:
17:f9:96:52:7e:40:ec:1a:31:7e:6a:d2:db:bb:69:
48:b5:02:5d:3e:f2:e4:fb:34:2f:23:02:34:5a:48:
2d:9f:bd:fe:3e:7c:b7:00:cf:e8:e3:a2:4b:8d:9b:
64:4d:de:01:a5:70:f2:eb:e9:bc:7c:be:b7:0a:5b:
42:3d:7c:a6:e0:cc:a4:67:c1:49:ec:28:a8:60:79:
a5:67:21:57:ca:80:9b:db:fd:00:01:44:b7:fc:98:
c9:98:0e:a8:a5:b0:07:b3:a3:70:9a:f4:a5:2a:7b:
0b:4a:9e:0b:5c:1a:7f:78:3c:db:79:cb:41:2c:78:
74:d3:c8:9f:cc:ef:6f:42:81:e2:d3:40:0c:7b:a9:
32:e7:6f:54:ad:36:2e:c8:79:5f:26:7a:5f:2b:b3:
f0:c6:f9:e1:b8:12:ac:ef:98:89:0b:d0:55:0f:e4:
27:ab:3e:62:ad:d5:e3:c7:6a:c1:91:e3:a5:df:e4:
7d:88:01:ed:a8:83:e3:8f:b5:37:e9:f6:9e:0c:46:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:FE:82:18:89:4D:C4:3E:79:9A:87:4A:19:D8:B3:3F:81:CA:96
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:0c:ee:1f:6f:06:2a:e7:e9:7f:a9:76:e4:29:76:17:61:
cd:28:63:8a:85:a6:7a:25:6e:39:60:3c:da:0f:22:d4:ae:5a:
b4:7f:ad:15:f4:cc:d3:95:dd:33:cf:14:5f:8e:e0:e0:75:d3:
ad:3a:d2:7b:9f:01:a1:e3:9d:ba:de:24:51:53:d4:ea:50:66:
8a:04:ce:93:af:48:62:ef:a2:f7:3f:aa:ea:76:44:6c:cf:df:
31:ba:50:ee:0d:e9:7f:41:8c:01:b9:04:8c:7d:a8:65:32:25:
f4:93:80:f3:8b:91:07:29:5d:34:51:e3:c4:ac:4a:89:9f:1a:
8a:8a:a5:a2:25:1a:d0:f0:a8:53:74:f8:5c:b2:c9:b9:22:bb:
1e:45:27:f2:bf:8d:18:8f:f9:77:29:d4:a1:f6:4a:27:e8:13:
00:87:f7:e7:7b:73:44:e1:cb:e4:ea:0f:dd:43:31:8f:de:c2:
b2:26:c4:49:b8:ca:62:3e:46:4f:a9:97:a4:d5:23:7c:2b:af:
b8:1b:b5:fa:19:b4:54:fa:31:af:a3:bf:cf:60:d4:2c:c5:9b:
cb:7f:e7:7f:76:94:e5:18:c7:44:73:4b:79:61:7d:55:57:37:
3e:bf:a3:c0:bf:ec:9d:23:f7:12:a4:21:48:b7:33:56:26:ff:
c4:95:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:27 2026 by rpki-client