Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: IizgWGrbZmekay+weGzhdFQ9FpPnBD01OXEGjwCpKeg=
Subject key identifier: 11:CF:04:8D:0C:CB:0B:DA:FD:6A:12:28:A4:F4:E4:98:8D:E7:63:BC
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01A0C96B6B6B5910B172CF13479AF54650E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0B66
Signing time: Tue 22 Sep 2026 14:00:55 +0000
Manifest this update: Tue 22 Sep 2026 14:00:55 +0000
Manifest next update: Wed 23 Sep 2026 14:00:55 +0000
Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: waJJkSuTSjRcPnk9XCE5eRkPaByHEI60L1LXZmHEibk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:6b:6b:59:10:b1:72:cf:13:47:9a:f5:46:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Sep 22 14:00:55 2026 GMT
Not After : Sep 23 14:00:55 2026 GMT
Subject: CN=11cf048d0ccb0bdafd6a1228a4f4e4988de763bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:f7:85:24:94:b4:7d:7c:c9:8a:a3:50:ad:
e2:cf:7c:b8:ee:3c:b4:82:d6:e5:a1:9f:88:01:ae:
b2:70:ab:5e:7a:e8:ce:68:34:43:a4:88:16:a0:c5:
96:c4:1d:c6:8f:57:dd:06:13:e4:2e:c9:bd:ff:d8:
5e:23:48:8c:27:65:4e:2a:0c:42:43:8b:18:2f:c4:
1a:92:62:ff:68:11:11:2f:c0:16:ed:7e:3e:37:36:
6c:9e:f3:66:0e:d9:4d:fe:b9:60:7a:53:2f:54:46:
89:20:a9:a0:1e:5d:9f:04:83:6d:d4:75:60:f2:df:
42:23:d4:0f:4e:89:59:92:d5:0a:bc:74:a8:bf:de:
50:60:48:d9:1f:fa:ea:49:0a:14:a1:bb:44:d5:dd:
e7:a0:da:75:9d:a3:6a:d3:5e:5d:0d:c1:9b:e0:a4:
1a:a7:d6:6b:27:24:f3:a3:34:05:93:4a:3c:39:b3:
21:ca:d4:23:eb:33:a6:48:6c:b7:06:4b:ce:53:e1:
3b:e9:12:e9:c9:8d:a7:88:9f:a2:d8:fa:58:03:c1:
0a:54:96:f6:a8:3a:e3:2f:ef:9f:84:09:89:5d:84:
56:22:7e:df:58:f5:88:ab:c4:f4:b6:2f:aa:34:6f:
a0:26:96:b6:f9:dd:67:a6:04:fd:a0:73:c0:a0:20:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:04:8D:0C:CB:0B:DA:FD:6A:12:28:A4:F4:E4:98:8D:E7:63:BC
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:e7:53:d3:37:19:5a:4e:0a:b3:70:b5:b2:14:b5:90:22:
65:45:f9:74:5b:6a:20:41:61:1f:10:33:03:7e:6b:70:b6:f1:
7d:5e:11:d0:56:a1:e4:82:67:80:76:d5:3e:b1:1f:c6:ff:02:
f3:b5:b8:09:42:e5:21:00:80:94:1a:33:0f:2b:11:f1:87:47:
6b:ce:46:2d:c9:00:48:dc:b6:4e:ba:2b:f7:5d:c7:3c:00:a8:
0b:9e:1c:0f:70:8a:9b:18:f5:48:03:80:0d:cf:9e:ff:d0:a0:
41:1d:bc:f1:2e:0e:55:fe:26:df:f8:7d:6e:f9:16:18:34:98:
8b:ab:c8:5a:5f:3b:24:28:71:f9:3b:85:1a:49:76:3e:51:67:
78:1d:1a:cc:56:1d:54:f6:3d:d0:c0:6f:ab:96:84:a7:22:46:
8e:ea:5f:21:71:24:2e:a6:2c:3c:e0:4a:58:d3:4e:fa:30:70:
44:7d:c8:14:4d:96:91:30:7d:81:e9:a2:2c:51:ec:81:ea:ef:
11:26:11:fe:f0:0f:b9:ea:db:3d:6a:2a:60:50:df:2b:f3:12:
ad:5f:85:58:0d:bc:06:36:e7:fc:63:8a:19:6d:ca:a7:56:7a:
61:4e:6a:81:98:31:a3:aa:7e:80:b1:81:4b:ec:22:3a:8e:a6:
c6:a4:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:28:22 2026 by rpki-client