Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: 5r/EoFS1vfBrbFNjdYpGp4+j/66tGN2NmFJaJ3dMBzI=
Subject key identifier: 74:AD:7B:43:4D:F1:08:46:77:0A:5C:E1:2E:35:B9:64:99:F3:7D:99
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019CAB6AC6C565A6506D6EE96605892F6031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 1095
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: IUPbGaI+cStbqaxDd/0djnzTtGU7z0o6VW9xhqHpaMM=)
2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c6:c5:65:a6:50:6d:6e:e9:66:05:89:2f:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=74ad7b434df10846770a5ce12e35b96499f37d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:51:dc:74:9b:b8:84:0c:30:e8:46:e0:87:
4a:ae:a7:c0:e8:ae:73:9a:2a:f8:42:b7:90:f2:50:
7c:cf:eb:b0:dd:01:38:01:b7:ea:6d:02:f5:c5:70:
8e:e0:8c:a6:72:3b:3e:ab:33:a3:37:7e:50:e1:16:
9e:de:98:0d:41:cd:0f:de:fc:5f:b4:69:d7:7b:31:
a4:92:eb:69:9e:e6:40:17:9d:11:64:75:1e:99:2c:
68:cc:55:c6:c4:82:36:e1:f7:85:de:f4:28:f0:f1:
85:66:bc:19:d6:98:4a:77:fb:3c:e3:97:f3:c4:83:
5c:7b:77:53:bb:5d:eb:df:54:4f:4d:6b:d7:c8:27:
cf:8b:8f:78:fe:26:4d:1f:de:54:07:41:79:7d:a0:
33:d9:41:3b:e4:75:15:3d:82:c1:0d:f8:9f:ea:6d:
f8:77:da:9e:f8:d7:3d:9f:37:b4:ce:db:b5:d6:6f:
2e:35:8a:97:d5:b2:50:ea:ca:ec:1c:0a:3f:49:ec:
4d:15:e5:f8:36:9e:f7:c6:f3:75:3b:a4:03:ed:d0:
1d:15:25:00:da:68:3d:f9:51:59:72:df:3d:68:4a:
48:7a:0a:8b:c6:50:30:df:32:f6:cc:03:b3:a5:01:
55:a5:54:81:f6:a2:09:c3:32:9f:f2:b3:cb:a9:14:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:7B:43:4D:F1:08:46:77:0A:5C:E1:2E:35:B9:64:99:F3:7D:99
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:20:d0:bf:5d:b1:92:ca:f3:23:c1:92:dc:62:98:49:30:66:
5c:d4:10:af:9e:e9:41:69:91:76:8b:fa:d5:cb:4e:ef:ab:79:
bf:59:07:8f:fd:18:33:1a:03:61:98:bd:4c:bf:62:97:ce:9c:
06:f8:9a:4a:33:df:15:18:47:77:44:73:cc:b2:a6:d1:f5:bd:
c8:08:18:be:eb:8c:9a:6c:7f:99:e7:76:d2:4c:e4:24:e7:e1:
7d:35:37:c4:04:84:a7:72:3d:38:fc:d2:49:4c:90:50:6a:25:
3e:58:ab:8e:ac:67:2d:1a:78:d1:c4:2d:f3:d2:71:98:94:4f:
ae:eb:e2:59:cc:c3:94:f0:0b:63:e9:8f:ac:cd:54:9e:98:6a:
47:24:fc:ac:08:3e:e6:36:fa:f7:b8:0f:8f:64:d9:52:b8:3b:
2c:46:63:74:0c:ef:69:72:04:b4:11:49:e9:08:45:33:ea:8e:
7d:67:76:28:4a:bc:d5:f5:4b:41:d0:b7:1b:07:a7:0b:3e:61:
0a:70:88:27:77:2e:de:2d:99:ad:fb:5a:b3:65:a6:7e:08:09:
3e:7d:51:7b:42:c8:7d:b1:7a:5b:e9:33:f5:b1:c9:8f:fa:27:
dc:d2:d8:af:55:8c:8e:93:96:03:fd:5f:30:aa:d0:aa:15:52:
0b:41:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:06 2026 by rpki-client