Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: jlJLgmYkdf2YtCs/0c13ufCg5nGhSeENvXgWvlY7EsI=
Subject key identifier: CE:D8:A4:DC:23:4B:57:A2:84:53:23:72:79:74:50:C8:1E:D6:07:3B
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019CABA1F3C0C6DE451D232D6A542073D18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1550
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: OGqd5sieW2EQiS738d47cKerTVYg4sIv4WFf5jn2/BI=)
2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f3:c0:c6:de:45:1d:23:2d:6a:54:20:73:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=ced8a4dc234b57a284532372797450c81ed6073b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:b3:d7:ad:b8:fa:0d:91:ab:08:ef:ce:d9:
43:11:04:92:64:f5:6e:a0:05:a7:1a:00:68:c5:23:
51:f2:5f:ee:f8:ee:d0:b9:03:c5:ef:a0:6c:3a:82:
fe:62:e9:92:02:49:b2:92:99:a5:90:bf:a2:4b:37:
93:d6:9c:8d:25:a8:58:a1:24:fd:03:3a:a5:30:8b:
8f:21:a2:25:98:46:e8:7a:a0:a2:fc:d5:11:69:fb:
bf:98:6f:a7:53:2c:64:74:63:8b:fe:9c:43:04:72:
6d:26:f1:00:60:1b:05:73:45:f7:cf:11:04:85:0a:
3c:81:ea:c7:d2:be:58:71:7a:78:05:f0:3a:63:f7:
59:f4:4c:e4:72:b5:a6:9b:98:31:a2:54:f7:aa:28:
12:76:b1:f6:32:01:77:6e:83:68:7f:c0:52:ee:82:
e8:f8:12:7e:74:f3:ae:40:e8:30:f2:f9:07:fc:24:
85:82:37:e3:94:f1:45:28:b9:79:0d:94:a7:a5:f1:
89:21:f4:fb:8c:2d:8f:3f:a4:b2:2e:5d:5d:7a:0f:
fa:00:d7:fb:d0:08:0c:d4:c8:1d:58:e9:d1:dd:24:
58:36:f9:2e:63:64:c2:4e:7e:64:75:af:31:5a:40:
49:4a:61:85:b1:ce:9c:eb:da:9e:98:e8:7c:f7:e1:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:A4:DC:23:4B:57:A2:84:53:23:72:79:74:50:C8:1E:D6:07:3B
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:23:38:53:d4:20:e9:44:7b:2e:a8:36:12:35:2d:a8:c9:
38:2d:77:b9:4a:93:15:1b:b1:dc:b9:3f:25:5f:2b:85:f9:a4:
14:7a:08:df:15:8b:dd:30:9f:6f:38:ec:14:55:b9:6a:26:67:
5a:8e:cc:1d:84:4a:c9:7b:71:75:6f:36:a8:a7:c9:a8:ad:ab:
90:0d:30:52:72:a9:62:15:c6:4e:d3:c9:1d:a8:2d:6d:cc:59:
c1:a2:de:89:82:c3:9e:c0:4d:91:dc:80:f4:f8:45:ed:67:70:
dc:9c:c7:99:04:36:35:ec:cb:39:44:15:b8:1f:74:78:7f:bc:
49:89:eb:a1:2b:34:1a:cb:19:9e:3f:64:df:10:ed:46:e5:1e:
a1:73:35:af:cc:94:f8:f3:73:68:11:56:89:d6:89:23:10:b7:
7c:5b:cf:fe:98:50:31:98:46:9b:54:22:89:dd:82:6f:66:e3:
49:09:02:b5:2a:5c:61:ac:64:22:93:9f:72:24:ce:70:e0:fc:
62:59:f8:fa:85:a8:c2:29:09:d6:4f:76:9f:b7:74:a7:db:db:
01:48:fa:4d:42:95:60:d5:85:4c:e3:46:39:1d:ae:ac:1a:cb:
ca:7a:59:f6:cc:9b:96:85:5d:b5:ee:b3:59:05:02:db:c7:01:
6f:8d:d4:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofPAxt5FHSMtalQgc9GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDJmZTY0NjZkMDcwOTRhNDI1NmRhMmNjODQ3MDgzYzUw
MDZiMWEwHhcNMjYwMzAxMjMwMDQzWhcNMjYwMzAyMjMwMDQzWjAzMTEwLwYDVQQD
EyhjZWQ4YTRkYzIzNGI1N2EyODQ1MzIzNzI3OTc0NTBjODFlZDYwNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDez1624+g2RqwjvztlDEQSSZPVu
oAWnGgBoxSNR8l/u+O7QuQPF76BsOoL+YumSAkmykpmlkL+iSzeT1pyNJahYoST9
AzqlMIuPIaIlmEboeqCi/NURafu/mG+nUyxkdGOL/pxDBHJtJvEAYBsFc0X3zxEE
hQo8gerH0r5YcXp4BfA6Y/dZ9EzkcrWmm5gxolT3qigSdrH2MgF3boNof8BS7oLo
+BJ+dPOuQOgw8vkH/CSFgjfjlPFFKLl5DZSnpfGJIfT7jC2PP6SyLl1deg/6ANf7
0AgM1MgdWOnR3SRYNvkuY2TCTn5kda8xWkBJSmGFsc6c69qemOh89+GlNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7YpNwjS1eihFMjcnl0UMge1gc7MB8GA1UdIwQY
MBaAFCrS/mRm0HCUpCVtosyEcIPFAGsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2It
ZmEzMWUyZGM2YWJiLzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2ItZmEzMWUyZGM2YWJi
LzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThkjOFPU
IOlEey6oNhI1LajJOC13uUqTFRux3Lk/JV8rhfmkFHoI3xWL3TCfbzjsFFW5aiZn
Wo7MHYRKyXtxdW82qKfJqK2rkA0wUnKpYhXGTtPJHagtbcxZwaLeiYLDnsBNkdyA
9PhF7Wdw3JzHmQQ2NezLOUQVuB90eH+8SYnroSs0GssZnj9k3xDtRuUeoXM1r8yU
+PNzaBFWidaJIxC3fFvP/phQMZhGm1Qiid2Cb2bjSQkCtSpcYaxkIpOfciTOcOD8
Yln4+oWowikJ1k92n7d0p9vbAUj6TUKVYNWFTONGOR2urBrLynpZ9sybloVdte6z
WQUC28cBb43UKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:08 2026 by rpki-client