Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: k5gt2X845H9Qk21SbJi3XuZm/KxWtwxUZVI7m3BRjec=
Subject key identifier: 67:9C:F8:EC:7F:14:2D:F8:49:42:FB:34:F1:83:CA:EA:09:A2:01:A0
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019CAC46F0785264F1842CDECA2707790B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 11A3
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: 1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (hash: 1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: t0plqRi/yQj9ZTpkpzrYI8WTm8+Md2KFWGr746VbB10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f0:78:52:64:f1:84:2c:de:ca:27:07:79:0b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=679cf8ec7f142df84942fb34f183caea09a201a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:77:e2:fa:0a:7f:da:8b:0c:bf:cd:8a:44:
6f:fe:cd:32:55:8d:c2:d7:69:99:89:11:8e:13:61:
53:d2:60:b3:f8:07:c4:96:ad:13:3e:4c:a6:a1:77:
53:aa:e6:52:3c:ae:88:52:40:d4:28:39:91:0c:cb:
8e:83:25:95:5b:3e:4e:9d:a8:72:51:c5:3e:13:76:
1f:9c:08:e9:4e:4d:66:d1:b8:25:0a:24:d6:24:d1:
6b:45:77:74:70:67:ed:d2:e5:84:6b:63:19:2f:ce:
a5:0e:66:e2:17:71:96:05:4b:af:c2:3a:2b:19:bd:
05:c5:fc:be:b5:d7:3a:3c:6a:26:c9:23:c2:ee:82:
d8:8a:d1:e8:12:f8:ba:c0:02:1c:76:71:5f:09:34:
cf:fc:24:69:3e:97:5e:89:ae:9b:7c:d0:fe:4a:9b:
62:39:ed:41:4f:80:d0:e8:ac:6c:75:63:d5:04:d6:
bc:5e:70:43:e4:f0:28:a3:bb:f2:c3:74:3a:5d:7e:
3a:b5:89:ab:f6:41:a6:e9:79:35:bb:b0:da:b5:a0:
d4:44:bc:64:2a:6d:4e:30:b2:45:d4:c4:1d:a5:49:
e7:6e:db:51:42:4e:88:a9:02:97:af:a1:4a:7d:2f:
2b:d5:17:0b:39:a3:a9:b4:47:ef:25:ad:6f:6b:3d:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9C:F8:EC:7F:14:2D:F8:49:42:FB:34:F1:83:CA:EA:09:A2:01:A0
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:31:8b:a6:d0:23:e5:92:c1:c9:c7:17:9a:68:36:73:76:12:
34:05:6d:0a:fe:b0:e4:70:8e:4a:c3:a5:ed:1c:42:34:f7:51:
d6:a6:1c:dc:3a:5c:13:a7:71:d6:65:f5:3c:6b:81:d4:61:cd:
31:7d:a2:63:a7:2a:5a:05:d4:57:f9:a0:9d:fb:64:82:f9:9b:
f1:47:c6:63:3a:44:04:69:6b:99:aa:b0:de:c0:0e:27:c7:25:
5f:e2:ad:5d:19:4a:cb:9c:3e:da:2d:a6:b2:67:5e:f4:84:44:
28:0a:99:4d:11:16:c2:da:eb:7a:69:de:fb:ad:e4:4c:2d:58:
d6:54:3c:9e:fc:0f:2a:1c:3e:40:59:b6:0a:00:1d:04:a9:a4:
9f:e6:5b:3c:23:15:29:e3:00:49:b4:54:f5:6a:1e:cf:85:0a:
20:92:69:76:51:92:26:6a:8d:3c:e5:5c:17:e8:d9:1a:b2:20:
66:17:69:dc:df:14:8c:0f:ec:d1:89:cf:c1:3f:8f:65:d2:2b:
be:fd:4d:8c:34:33:ec:8f:e8:b8:7a:c6:82:3c:7a:40:4b:2f:
3a:a2:f9:ad:9b:6d:17:8c:92:ed:44:84:d2:51:7c:ee:db:6b:
31:32:3a:d0:26:ab:8e:a6:94:d3:f8:bd:88:05:4a:23:db:6a:
2f:d2:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:15 2026 by rpki-client