Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: G4BIWc6knwd6VDUWKkbu/52CVXxBESyoXOurUyxtqBc=
Subject key identifier: 36:EA:4C:88:08:D6:B1:EE:91:19:0F:EB:9C:1A:2F:9E:E5:16:AD:50
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 019D9B512D14A7F7B13A7B4C0F4FF2787D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 12:01:21 +0000
Manifest this update: Fri 17 Apr 2026 12:01:21 +0000
Manifest next update: Sat 18 Apr 2026 12:01:21 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: OwFluqmApSQiRL1xwkSe6TysJlB3q2hPVQX5oTAvZJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:2d:14:a7:f7:b1:3a:7b:4c:0f:4f:f2:78:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Apr 17 12:01:21 2026 GMT
Not After : Apr 18 12:01:21 2026 GMT
Subject: CN=36ea4c8808d6b1ee91190feb9c1a2f9ee516ad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:fe:e4:e6:bf:73:93:87:94:5e:5b:3c:02:
9e:69:c9:97:5f:5c:9d:e2:a2:e0:9e:3f:dc:15:d7:
d3:94:e2:5d:07:8b:36:43:c5:9e:dc:69:15:0e:9a:
75:e4:ac:a1:3d:0d:4d:15:d6:ea:e8:f6:c4:22:58:
9a:6f:61:0f:30:7f:df:46:f0:ae:3b:59:e7:db:2e:
0f:36:18:fe:ad:d3:b9:20:27:9a:08:3c:d1:e1:68:
48:01:72:af:50:e4:dc:d0:f4:a2:3b:98:d9:91:35:
23:85:95:bd:88:1d:22:4c:cc:08:fb:05:5f:27:88:
25:0c:be:b2:49:d2:7e:b6:c9:1b:29:7d:67:3e:41:
d6:3e:3c:0e:fd:32:b7:6e:42:44:63:f1:2b:4e:c1:
63:5b:28:19:b8:74:b6:d6:ef:d9:6c:d3:05:09:4f:
a0:78:00:5a:fa:69:5b:f7:2b:09:6b:d5:f7:65:d9:
c9:a5:48:c8:83:8b:8e:43:67:30:e4:bd:a4:4e:32:
f9:df:77:d5:18:25:3f:ce:95:37:87:c9:e0:35:2e:
01:fe:53:42:d4:b5:60:42:ce:61:a4:ae:8e:68:29:
4a:35:31:ae:c3:dc:39:50:19:87:7f:cd:cd:76:86:
b7:fa:77:88:3f:3b:33:bd:72:17:e2:e4:b7:ee:f9:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:4C:88:08:D6:B1:EE:91:19:0F:EB:9C:1A:2F:9E:E5:16:AD:50
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:76:a7:b8:af:24:3d:b0:c5:0c:d4:c7:36:57:79:c2:34:
d0:b4:a4:20:33:3a:c8:50:39:0c:2d:d5:41:8a:19:e5:f6:8f:
a6:f9:4a:2a:ae:99:47:c2:ae:d4:9a:1d:5f:2a:72:74:34:24:
24:11:b4:0d:1f:0d:87:8a:92:77:85:9d:e5:39:94:32:ba:05:
4c:fe:c5:ae:66:8c:07:fb:c2:62:0c:fd:c5:78:b3:76:51:4f:
3d:40:df:11:9b:ca:51:4d:db:5e:98:07:51:fd:e2:b3:4e:0d:
37:29:47:50:3f:cf:0f:f1:75:f2:50:fb:f9:91:d4:69:26:cd:
72:9b:2d:be:e9:51:98:7d:6e:90:18:57:b2:cc:c9:b2:a1:e8:
5f:39:34:13:86:6d:bd:15:d0:10:e6:5f:35:e4:2f:ce:e0:7c:
da:6f:b4:96:f5:93:de:f3:28:e1:8b:08:a4:b5:19:bd:c8:68:
02:f5:84:f6:95:41:4b:f5:e3:67:2c:8e:dd:59:6c:49:10:6d:
58:a1:db:3e:16:a0:d9:62:0d:cd:27:07:21:bd:cb:58:8d:8c:
02:a5:06:9c:38:d9:36:c7:3d:c5:f3:4d:b2:c5:b9:ee:05:36:
48:ae:ae:be:bd:01:0f:f2:9e:a8:c3:d8:1d:d6:1e:14:ee:a1:
f3:dc:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:19 2026 by rpki-client