Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: 9oH5gzE55piLNTERvVvYTx/qhQdQcRDzHh5+CQauceo=
Subject key identifier: 1A:03:8F:B6:70:CF:9D:E5:8A:04:79:66:67:AA:1E:16:91:8D:B7:95
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019CABD95D51B26CC7E259F7392077B9DF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 5E
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: cTrsRzu1b3mIQQsxvETLXUo4eB3KccGfQypDodxwZIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5d:51:b2:6c:c7:e2:59:f7:39:20:77:b9:df:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=1a038fb670cf9de58a04796667aa1e16918db795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:d3:51:4e:f5:6b:81:76:4d:ca:36:81:ec:
7f:63:9a:08:0d:20:ee:93:56:d8:47:e3:f0:00:5a:
8f:13:28:05:f0:4b:4e:c7:81:64:26:f4:3f:f1:02:
d1:f7:81:15:97:a5:d4:23:35:92:24:48:42:a3:6d:
f6:29:d8:29:84:ca:2c:e4:d9:6c:a0:5a:02:b4:b3:
c8:eb:6d:12:52:e7:7b:b4:1b:bf:b4:b5:09:fe:38:
27:64:df:a4:5a:5e:c6:fc:a6:a2:8c:a7:b8:3f:1c:
6c:ae:f8:73:e5:93:b5:bd:fc:fc:29:1a:9c:16:de:
ea:d7:d5:c2:73:13:97:08:ef:a2:b1:ec:c7:3d:f6:
40:13:dc:cd:1b:e0:60:18:7f:9b:22:67:17:20:69:
f9:b7:fe:38:84:b5:c9:e6:c1:0a:8d:13:e2:38:cd:
14:ae:9d:a8:ba:80:c5:6c:c0:c3:38:b3:46:4e:4d:
94:3e:ee:d3:98:90:e2:b0:d5:46:23:3b:99:7c:89:
1c:c3:86:c0:ae:43:e1:b6:b6:d1:d0:18:e5:3a:e3:
85:04:5a:95:f0:23:29:aa:38:79:03:b7:1d:e1:d5:
f3:a9:98:68:d0:c8:3c:ca:c2:38:1f:ec:f6:1c:a0:
bc:1f:6e:6d:21:6f:e8:23:e0:69:ad:86:24:6b:71:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:8F:B6:70:CF:9D:E5:8A:04:79:66:67:AA:1E:16:91:8D:B7:95
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:6f:72:b7:26:23:10:21:67:b4:39:62:50:3c:ba:38:08:
d8:c1:9d:4d:8b:d9:e5:66:5d:92:d4:22:64:65:92:42:f0:3f:
19:3c:96:fe:80:a8:4e:86:1e:a9:a7:b3:d3:dd:2f:b0:46:99:
e5:95:28:48:f3:93:be:34:87:b9:d3:13:46:04:a4:02:08:62:
93:48:df:da:bb:a1:17:f6:00:15:d3:67:c8:02:d0:13:b6:7b:
35:8a:f8:a5:c6:13:f9:11:92:61:4a:4c:94:27:36:cf:f8:5c:
7a:88:a7:aa:d8:a4:81:64:c5:18:5d:4d:85:ce:a7:c7:a8:2d:
6e:89:69:9e:9d:73:37:c5:99:b2:f5:8f:68:8b:c9:db:78:e7:
00:08:db:89:60:a0:40:7f:f3:23:e1:8a:1c:6e:5b:21:7f:99:
67:a5:0d:7d:1b:67:fb:0d:cb:d8:6e:45:b7:ff:18:d7:97:ad:
8a:d0:21:f0:6f:0d:c2:66:b0:1a:89:41:e8:ee:a8:1c:93:63:
33:4c:af:1b:89:df:d9:5d:3b:fd:df:70:38:6d:c6:86:ac:69:
b2:50:1b:43:02:0b:f2:a9:19:58:4f:cd:47:c5:a3:c9:db:17:
fc:da:46:1b:56:10:f7:1d:cb:c3:20:6d:4c:4e:d2:98:9b:30:
dc:04:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:38 2026 by rpki-client