Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: Heim9BjI6xkTY/AagEF8R1qjPv/nG9OwhYCcyWE4ITk=
Subject key identifier: 6A:C3:B5:0D:A0:61:52:5A:04:FB:38:13:93:07:27:F7:F6:48:D6:1E
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 019CAB6ADFEE6E46FD1121449B3491805275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 082A
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: 0b7MsaVxPHqcjgZ3+steGN+ZmkcS146gev3BSrz+OCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:df:ee:6e:46:fd:11:21:44:9b:34:91:80:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=6ac3b50da061525a04fb3813930727f7f648d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:1e:c1:ca:fd:3b:15:8e:d3:89:5c:ab:89:
ed:05:53:82:18:28:fa:59:68:ad:da:c7:aa:ec:d5:
45:24:73:8c:5e:15:91:f8:3e:36:da:85:d8:28:9a:
a6:87:2a:b8:f2:27:13:7d:f5:71:f2:82:50:78:7a:
69:6b:4c:fc:47:5c:e7:89:da:3e:6f:c6:1d:00:f2:
a2:13:bb:f9:59:fd:6f:42:da:b7:af:8a:df:96:ec:
b9:c5:59:2a:bf:a4:36:b0:51:25:c3:7c:23:03:2d:
cf:7d:69:57:e7:43:7a:6a:eb:cc:2f:3d:aa:76:25:
ad:96:41:60:77:1e:94:3b:0b:6f:28:1e:a5:3b:42:
3c:6e:3f:aa:0e:44:b4:45:02:89:23:b2:8d:9a:e3:
23:9c:37:7e:ec:e6:a3:fa:f5:70:f7:a7:c5:11:97:
d5:a2:2c:d7:86:4c:05:f1:48:fe:56:25:fe:f8:5a:
69:9a:d1:ff:86:a0:65:0a:59:e7:86:88:bc:ff:1a:
0c:b7:73:79:95:18:a9:7b:7f:4d:52:bb:58:3d:32:
50:46:d2:07:08:7a:37:cb:70:3c:22:3b:74:98:96:
f7:50:6f:60:99:58:9f:e9:66:00:07:9d:8c:52:06:
b3:0c:72:1b:e5:59:85:02:de:7d:ba:f4:df:2c:56:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:B5:0D:A0:61:52:5A:04:FB:38:13:93:07:27:F7:F6:48:D6:1E
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:00:39:a4:76:98:7e:c8:1c:78:8b:dc:cf:46:b4:f8:4b:9d:
2f:dc:89:56:1f:64:ee:81:cc:43:99:10:18:0a:a8:3d:03:58:
87:45:38:56:bc:a5:c6:7d:ed:e3:ef:ee:fe:52:2f:f7:0e:cc:
01:3b:cf:26:49:74:38:e5:51:84:8d:e6:5a:0f:ca:21:0d:f5:
32:5a:75:15:08:bb:b7:3c:e1:4a:dd:89:e7:13:ee:f7:2b:e1:
72:39:95:89:8b:30:40:3a:1f:a5:52:ac:07:57:f9:79:6e:0c:
b6:76:cd:70:03:c5:c2:a0:a2:96:db:43:73:bd:75:77:1e:77:
a3:7e:59:50:d4:64:1b:c6:23:a3:96:28:62:94:7b:c4:81:6b:
23:72:64:5a:1f:54:c0:b3:e4:f6:18:13:51:de:58:6e:b4:2a:
ad:86:76:9a:16:7d:e9:e0:b3:ba:d3:0f:ce:45:9f:6a:55:eb:
c6:8a:c6:35:7e:7e:99:6c:26:4f:d2:8f:0b:8d:3b:29:2e:09:
a2:d3:a0:6f:b3:e5:e8:1f:83:27:46:cd:b6:a6:e6:59:d7:63:
a9:5b:0b:4d:fc:08:df:cf:d7:81:52:b8:da:f0:04:b5:1a:55:
02:1a:78:cc:b3:93:a8:df:fc:76:6c:07:4a:0b:b6:63:42:98:
fc:7c:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:03 2026 by rpki-client