Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: kWjSLlg/FvnnDkFbdO5eOpv/GVM5zasI/Lo3rdOXQb0=
Subject key identifier: AC:E8:F2:26:C6:4C:1B:F5:FB:C2:FE:0C:09:D3:02:DA:44:97:B2:6E
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019CAC477DF36B68581B683EA1440EC26FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 15ED
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: AGyP9XFxQplvir9PV4mfCCs76UVZS51rAbhbh2sAAVA=)
2: jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa (hash: zoeDpAsCDg15ZqeXjdLWt/zPvQ+0f3jQu+TzTt0DwhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7d:f3:6b:68:58:1b:68:3e:a1:44:0e:c2:6f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=ace8f226c64c1bf5fbc2fe0c09d302da4497b26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:84:87:89:9d:77:10:b4:35:a6:9a:32:58:
af:b9:2b:19:e2:fc:1f:7d:c9:08:c7:f6:a7:7a:35:
9b:81:c8:d9:86:5f:da:47:0b:a4:10:b5:e5:fd:74:
22:8c:c1:a7:60:1c:23:1e:10:24:cf:d5:b4:68:4b:
6b:57:14:4c:57:fe:9b:ba:d7:db:bd:74:cc:e4:ee:
b1:12:18:4c:d4:3d:f1:d6:ba:82:49:1d:6e:b2:2e:
5b:1b:78:ad:11:1c:c0:00:27:ca:30:13:20:b4:ee:
6e:3a:0d:05:7f:33:a6:c7:ee:8a:b0:2c:68:0b:81:
64:6d:23:c4:2e:29:e9:68:50:cf:0b:1d:04:40:f3:
5f:18:5b:2d:24:23:8e:11:75:dc:bf:d8:ba:17:c9:
b5:26:96:ab:1d:d4:82:ef:e8:ac:10:b8:74:d2:6c:
0d:0a:56:21:0c:1b:3d:e7:8e:1c:c7:3f:e1:63:3b:
f3:15:85:ca:99:75:91:0d:ed:70:b4:e7:12:15:b9:
a0:68:30:24:23:11:99:fd:6d:2b:96:e8:ec:f0:d5:
22:99:0f:3c:ea:1d:4f:55:fc:3a:65:25:36:c5:dc:
ab:e4:43:f0:90:ab:62:3f:ee:6c:71:0b:ea:ee:d1:
83:e3:86:cf:41:c3:80:a0:bc:aa:6b:60:50:c9:15:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:F2:26:C6:4C:1B:F5:FB:C2:FE:0C:09:D3:02:DA:44:97:B2:6E
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b4:f4:08:59:70:64:18:9c:c8:9e:55:ea:fc:68:d3:74:eb:
84:c7:87:70:bf:e5:02:65:4e:54:d9:b2:b8:f7:fd:8e:0e:ff:
83:54:2d:1a:70:99:09:b0:14:c8:75:10:ee:85:c7:08:e0:07:
6e:71:18:4d:17:38:b9:16:df:87:10:ff:b1:44:be:6b:67:91:
4d:4a:13:98:d7:f2:31:21:6b:15:19:7d:2f:37:2e:0f:c9:7c:
fb:e0:8d:e1:df:ce:92:69:53:07:5f:ad:3d:87:27:05:56:30:
1a:77:68:0f:0b:d0:44:e7:00:85:22:76:75:47:e0:09:8b:fd:
bd:72:7e:73:bc:9b:af:eb:9b:7b:ac:7c:a2:79:80:12:2e:98:
b0:28:4c:fa:5e:da:79:f7:be:2d:00:de:42:f9:f8:86:91:c0:
63:af:e4:eb:8b:12:b2:38:66:f8:bb:b7:bf:6e:3a:c5:63:86:
f6:f6:85:3a:eb:ad:4e:a1:c7:34:91:03:81:ac:95:91:e3:36:
dd:f1:f5:2a:d3:93:5f:6c:80:e0:fd:e2:0b:de:b2:e7:1e:c9:
9a:5f:99:ff:29:e9:3f:0e:10:f7:d9:15:a0:3b:4d:6d:61:5a:
cc:8b:5e:0e:1b:72:ab:d3:2c:32:b7:50:55:92:69:21:20:0f:
ce:b5:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:31 2026 by rpki-client