Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: fAs4jwlNSp0eyINcwZ3nDOZsHgo0YIkeujXhv1KKEVk=
Subject key identifier: 43:8B:75:BD:01:41:7D:52:C1:DA:4C:16:72:A9:79:F6:AD:78:D5:0C
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019CAB6AF117601A5541A4118F2A70A3497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 07B4
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: quov5biviYuk3XxtKI1EG6tGDY8lkLgSv9Kefnomdf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f1:17:60:1a:55:41:a4:11:8f:2a:70:a3:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=438b75bd01417d52c1da4c1672a979f6ad78d50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:23:f5:06:00:e3:fe:e6:7c:8d:1d:02:af:
55:28:dd:ca:11:13:3b:ff:3f:14:6d:65:1c:07:af:
0c:e4:cd:43:9d:89:ae:38:47:cf:f4:e5:cf:c1:44:
5d:5a:81:28:2c:e9:88:90:c6:da:ee:98:79:2b:d0:
43:da:3c:f7:e5:3a:a7:33:7b:ab:13:25:63:52:ba:
7c:17:9d:c0:c4:56:a5:41:94:a9:5f:2f:30:7f:39:
8b:82:ea:a0:20:68:64:6d:be:e4:8c:f5:70:fd:bf:
3d:10:f4:e4:f6:50:38:3f:f8:29:16:ac:4c:35:be:
f3:ea:8c:e4:d6:a7:0b:f8:62:28:4b:0b:06:94:cd:
6f:36:a2:01:56:42:72:93:ad:c4:07:55:47:a3:ac:
96:a0:60:94:07:80:62:c7:ca:c9:c4:5a:30:62:f7:
18:52:75:35:56:61:b0:90:1c:c9:ea:23:f8:82:26:
7f:27:49:82:6d:ab:3c:8b:e4:42:2b:f7:30:8f:42:
c3:fb:54:1a:d5:2e:8c:d3:c5:7c:12:a1:1a:91:77:
8a:31:c9:56:a7:1d:b6:3a:4c:2b:d5:de:46:f6:0c:
b2:b8:39:64:74:af:4a:6b:e7:9c:9b:b5:07:12:63:
63:57:16:5a:39:16:49:80:a2:3f:b6:f9:59:1a:3e:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:75:BD:01:41:7D:52:C1:DA:4C:16:72:A9:79:F6:AD:78:D5:0C
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:d4:be:b8:31:8d:81:b5:4b:59:8f:a2:42:77:e1:6b:fa:
dd:fe:f5:95:97:fa:73:5a:95:e3:6d:e7:db:8f:fe:14:8d:db:
83:5f:bf:ef:a7:9a:31:fd:55:96:bf:2e:d6:20:c0:23:9b:d8:
6c:43:56:59:4c:ef:86:f0:36:45:3a:5a:0f:2b:d7:ef:96:24:
8e:01:42:69:f7:99:43:d3:18:11:a2:31:6e:f3:ca:24:6e:63:
c7:d4:40:b5:6c:7f:41:d8:25:39:02:9e:a2:91:68:c5:28:78:
dd:8d:77:09:b7:46:b5:66:aa:95:0e:e9:2e:60:af:48:40:44:
62:9d:bb:e8:9c:cc:3f:5e:e6:b3:e3:29:e7:7f:6f:19:1f:e5:
f8:86:41:61:c5:42:18:a6:5d:77:40:18:68:65:a4:c5:ec:e2:
0c:93:9c:6f:64:46:03:5f:21:17:c5:59:ce:8a:f1:0d:2a:f9:
b9:ab:68:44:78:23:fb:76:c7:f3:1c:9e:5a:2c:e8:d6:b8:6d:
f3:3e:8f:fb:35:e7:b1:67:b9:b5:44:5c:37:9e:a8:61:f1:8b:
a7:64:5a:46:ce:d6:d8:60:c0:44:6d:4b:6b:dd:fa:d4:07:5e:
36:d4:6a:79:d6:e9:1e:5e:7a:cf:77:a6:4c:69:27:2a:65:d7:
3f:fe:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:05 2026 by rpki-client