Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: qRfmnFETpIp4qLbXMI4zkgTdYx2c7IGmBpo4NhiPOHI=
Subject key identifier: 3C:25:42:5C:FF:0F:F4:1C:91:E9:BA:DF:73:74:CC:6F:B9:3C:26:01
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019DA41D13DDE057E48DD94D8DD7D82B0049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 09C5
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: MjgmcgnYwgzRsumKipgrpxmaJWWPJ/5BX4U003h9MV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:13:dd:e0:57:e4:8d:d9:4d:8d:d7:d8:2b:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=3c25425cff0ff41c91e9badf7374cc6fb93c2601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:3f:a5:29:f8:b4:df:01:75:0b:75:46:ce:
00:63:91:55:07:12:ec:f3:c4:9a:19:ed:3d:0a:ca:
da:bc:b2:85:0e:eb:f5:60:b4:f8:8b:1c:1d:c5:da:
fc:46:14:a2:c0:fc:8f:a2:35:89:38:27:ba:11:d5:
e6:cf:64:c9:b3:16:4a:92:fd:ca:a4:71:38:20:e2:
5c:d7:52:36:d2:6b:9c:fc:59:0e:85:16:a7:ec:e8:
0d:e4:3c:cc:09:8b:52:54:51:27:0c:74:54:c1:f2:
db:4d:23:d4:44:d6:34:1e:40:d6:a8:70:aa:5f:f9:
26:20:36:3e:ed:dd:ec:2a:bb:88:9c:2e:d6:7a:d5:
78:48:0d:bd:92:60:3e:a6:f4:78:d7:b5:d9:df:8e:
c6:82:18:db:8c:47:e6:1f:52:91:1b:20:35:95:78:
75:43:66:3a:ab:08:0f:dc:fd:7a:aa:ce:01:68:d9:
fa:3c:7c:dc:fb:30:bc:c4:28:85:60:64:cc:27:73:
9c:10:96:2b:bb:97:eb:9a:a9:a8:a2:38:76:57:fb:
54:8e:f2:30:3d:23:06:28:aa:97:6e:6c:6f:50:d9:
b1:0f:e8:08:13:09:29:b3:49:a7:4d:d6:d6:b0:cc:
d7:59:94:15:ca:15:96:af:f8:95:56:42:5a:ed:84:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:42:5C:FF:0F:F4:1C:91:E9:BA:DF:73:74:CC:6F:B9:3C:26:01
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cf:8d:b3:48:af:a3:3c:cb:d5:ba:38:c9:f1:6b:2e:a6:81:
58:ae:ae:e0:19:25:6f:6e:d7:2e:fd:df:db:19:29:21:7f:3a:
80:04:b2:b5:6d:88:91:a1:a3:f5:f0:e4:6f:bc:c4:74:d1:2e:
8f:b7:a7:00:c6:1e:e2:1d:04:99:c1:f6:55:a0:28:55:5c:8d:
a5:3c:fc:f9:ee:c9:a0:9b:85:35:64:fb:9e:e3:87:b4:e8:e8:
db:51:3f:2d:60:e2:9d:58:93:73:27:39:6b:08:f1:a5:f4:93:
cb:db:06:d2:63:a6:78:c9:94:01:35:e4:17:07:7f:07:47:64:
da:58:e9:06:93:aa:1e:46:12:13:5e:b7:7f:be:c9:2c:dd:12:
9d:a9:7f:da:e3:f4:ca:a2:89:ed:43:17:d9:b8:ab:49:05:4c:
6e:0b:55:e8:1e:a5:6d:87:00:91:27:6e:27:52:af:89:0f:f1:
cc:2c:f4:cb:54:0a:b9:f6:33:47:1a:d0:be:48:ec:eb:f3:41:
35:bb:37:ca:1a:c1:6c:55:6c:c3:45:5e:6a:fa:42:f7:a7:6d:
16:cf:d9:d7:19:23:bb:ec:25:88:5a:70:83:23:b2:e4:7f:69:
4e:fb:f1:af:50:73:0b:78:f9:06:cf:3a:b1:6e:24:8b:19:6a:
32:19:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:59 2026 by rpki-client