Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json)
Hash identifier: AAsRjO6wZG6ru+jMmheh67u+78u97M8lZKbSV/WtpA8=
Subject key identifier: 9E:47:B1:F0:4F:18:10:D9:6D:77:C5:99:AD:91:FD:86:B4:89:B9:DB
Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Certificate serial: 01A0D01205D2677E4BDE9BFC5B54611C7173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
Manifest number: 0283
Signing time: Wed 23 Sep 2026 21:00:37 +0000
Manifest this update: Wed 23 Sep 2026 21:00:37 +0000
Manifest next update: Thu 24 Sep 2026 21:00:37 +0000
Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=)
2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: shpVR2fZYNLRMahwqv2k6/CEB1jqsm1l5vrcAWY4eSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:05:d2:67:7e:4b:de:9b:fc:5b:54:61:1c:71:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96
Validity
Not Before: Sep 23 21:00:37 2026 GMT
Not After : Sep 24 21:00:37 2026 GMT
Subject: CN=9e47b1f04f1810d96d77c599ad91fd86b489b9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:07:e8:b2:3b:0b:0c:86:0f:b0:41:57:5d:
20:f8:91:e7:aa:dc:74:e0:4f:fa:c3:96:eb:d2:0d:
c7:0a:25:b9:39:fc:f1:28:8a:6c:a7:b2:84:10:94:
25:0e:37:14:cb:fe:e8:04:b8:5b:37:6f:6b:f4:bc:
0f:64:78:42:b6:64:7b:0e:07:be:6a:8e:25:0b:bb:
b8:88:c0:8c:1d:e4:ab:60:a1:66:72:35:43:4b:04:
c7:2c:88:c1:8e:42:9b:75:77:a0:d1:52:8c:99:1d:
8d:c6:dc:02:8a:e9:4b:6d:cd:8e:43:de:8e:36:22:
c3:c9:ff:ba:6d:be:c1:ab:5f:0a:db:17:c2:6a:79:
0f:b1:8e:dd:ac:a1:52:97:e5:45:6a:d6:1b:34:94:
69:58:98:57:a7:b8:1a:f4:a4:35:d1:22:f6:be:2c:
f1:da:16:f4:4b:01:75:76:1e:b1:22:f1:31:2d:7a:
b2:0b:2c:83:4e:76:e8:a0:19:32:f9:d5:6b:7b:a8:
14:d2:de:a9:7f:43:54:e3:0d:a6:aa:15:47:42:93:
c5:f8:88:35:0c:3d:30:68:09:4d:2d:0a:b5:9f:e9:
98:ba:8b:6e:5f:40:a7:4d:b1:62:72:ee:14:d6:55:
18:41:f9:9f:26:e9:12:91:c7:b9:06:8d:84:cc:73:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:B1:F0:4F:18:10:D9:6D:77:C5:99:AD:91:FD:86:B4:89:B9:DB
X509v3 Authority Key Identifier:
keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:a8:db:72:ff:81:45:f8:2a:54:5a:01:4f:64:91:d8:aa:
cc:c6:8b:ff:e4:38:fe:18:9a:fe:cd:d2:06:a7:b3:a1:33:8f:
e9:e0:13:0b:11:52:4d:c4:5a:44:49:c6:1e:62:73:7d:67:47:
a2:75:d2:a6:96:64:05:a8:67:37:43:ed:94:79:51:76:a3:73:
48:40:19:9b:3f:1f:da:d3:62:38:ab:d5:c4:93:ad:48:32:7d:
17:56:c0:3e:fe:93:bb:fa:d5:54:96:df:3d:7e:e7:d8:9a:83:
8e:f7:04:7a:06:e0:e3:e8:29:20:83:0a:e1:56:e3:45:94:27:
45:b9:3b:cd:69:b3:de:9c:99:b7:ec:f2:ba:b0:df:2b:b7:3b:
ee:76:b0:20:e8:0b:fc:c6:c2:03:2d:9e:40:54:15:f7:55:df:
cc:1b:2c:d0:5c:e1:3c:71:26:ea:89:e8:63:82:f5:39:d3:1d:
1d:d5:c5:bd:81:8f:53:17:ee:f8:05:1f:f4:59:5d:03:36:d9:
9f:41:f5:f1:cf:87:e1:b8:b4:78:49:e9:82:2b:a0:20:1b:40:
16:ba:e9:e2:01:83:5f:c3:db:63:7f:1f:de:ae:6e:fa:d2:b9:
f1:4f:19:26:e8:79:8c:78:20:98:50:a4:8c:0b:a0:b2:71:6f:
37:c2:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:25:31 2026 by rpki-client