Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: qfFkllh1JVNKTvhO3nUxdnr0jHBXQ9ihrA7+k8RBxLs=
Subject key identifier: 08:77:37:93:F9:55:BD:12:40:BB:93:93:A3:E8:70:C3:B8:D8:91:0E
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019FAA87DFD2A3C84572B52F88AE8593B5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 21:00:59 +0000
Manifest this update: Tue 28 Jul 2026 21:00:59 +0000
Manifest next update: Wed 29 Jul 2026 21:00:59 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: SsjefB44WkFc2KXVnk7KDEnyyu1o9sKOS4GYkfy68PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:df:d2:a3:c8:45:72:b5:2f:88:ae:85:93:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Jul 28 21:00:59 2026 GMT
Not After : Jul 29 21:00:59 2026 GMT
Subject: CN=08773793f955bd1240bb9393a3e870c3b8d8910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:01:d3:b7:45:b5:d8:bb:2a:71:0a:86:2c:
2b:2c:b3:67:65:97:cf:33:4b:29:b0:e0:2e:9f:a9:
20:a1:81:f9:b3:29:88:e3:50:51:b6:69:19:0a:ee:
3a:92:25:26:58:6f:95:95:9b:de:2f:ee:00:d9:cb:
07:6b:7f:1a:a2:2d:45:51:f2:e6:bc:5e:65:e7:37:
8b:26:ea:32:92:10:fe:56:c0:99:d6:16:5c:fc:c5:
0e:60:f2:0d:af:89:e9:6a:51:19:0a:1a:c0:58:34:
11:61:b3:62:bf:41:7b:95:68:33:77:34:e7:90:89:
f7:17:f5:cc:bd:3d:45:0f:43:4d:87:92:96:7e:02:
85:04:ad:37:19:92:15:e1:06:4d:55:8f:1b:3e:ab:
c9:26:10:59:43:85:38:38:cc:cc:e4:c4:2f:0b:26:
10:8b:bc:d5:28:e4:58:5a:49:28:47:50:4a:a2:db:
fb:9c:76:5f:b8:76:c6:f9:9b:50:32:a4:1a:28:6a:
ef:95:d5:c7:30:98:ca:b7:39:93:07:47:b4:82:66:
80:08:3e:ca:0a:f1:db:fc:96:44:bd:a7:6a:a6:79:
8c:38:2f:36:f2:4b:eb:f2:63:e9:6b:66:87:4e:12:
6f:c0:dc:95:a1:03:a9:42:06:58:88:df:0f:22:5e:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:37:93:F9:55:BD:12:40:BB:93:93:A3:E8:70:C3:B8:D8:91:0E
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:17:8c:8f:c8:d9:58:31:34:6d:6a:9f:88:fd:bc:6f:5e:
7e:47:fe:62:d2:ab:87:6f:66:6c:ae:6f:f6:27:d0:74:f7:cd:
a8:cd:2d:69:b9:2a:32:07:ee:d8:b6:a8:da:a6:6d:fb:ed:9d:
89:17:17:97:3e:ab:01:f8:6f:3a:73:ac:b9:d6:83:b9:d3:e9:
23:65:10:b6:f0:3d:a9:8f:e1:57:ab:64:87:46:d5:a0:4c:52:
24:46:03:4e:06:d7:25:a2:a1:75:8a:48:5d:d0:25:e2:b8:7a:
30:8d:61:97:6a:29:76:4f:55:28:88:18:3b:b1:92:5b:65:8b:
15:60:1f:70:4b:0b:a5:0e:0a:48:cf:0b:d3:c6:47:f4:10:63:
c8:68:85:89:f8:4a:a8:15:e2:77:39:63:2c:b2:e2:f9:1f:10:
27:6a:97:0b:94:3d:3a:38:9a:b9:b9:4f:ce:89:97:d0:8d:ce:
dc:21:2f:95:74:6e:63:0c:10:49:3a:b4:81:8e:8f:af:1a:96:
6c:23:b2:5f:0c:7f:ed:8c:90:7f:42:0e:29:cf:70:ad:4f:6c:
01:6e:8f:62:99:79:d8:38:c3:b1:4e:b9:f2:a7:6a:2e:54:00:
82:ad:e4:60:5f:b7:f6:10:a3:5f:d3:d2:34:92:04:95:db:d1:
c7:70:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:34 2026 by rpki-client