Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: GQ4i2/tKVE+KHo2onnWvxUL09coCS++k3SU8YNq5dr0=
Subject key identifier: 33:07:1E:32:9F:E7:EA:20:04:42:8B:D8:AD:F4:14:76:71:AF:41:CD
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01A0C8FD113E0F510E40015829E0333419B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 12B8
Signing time: Tue 22 Sep 2026 12:00:23 +0000
Manifest this update: Tue 22 Sep 2026 12:00:23 +0000
Manifest next update: Wed 23 Sep 2026 12:00:23 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: F3gSfjG4Wp7nrVQ9Jv/A6zeXxYGLsmls4TVRd8DnKdw=)
2: NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa (hash: fQmf+0QjeWGgS66kmRBZPjLky3GL2ce/S+K3VIzYjtw=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: eFgaCfFQ4wnN2TLjUx11IbfSUic.roa (hash: PRgXnTA2HUCK93Q2oPHby6jgjDBYph2NqjlwyNitfzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:11:3e:0f:51:0e:40:01:58:29:e0:33:34:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Sep 22 12:00:23 2026 GMT
Not After : Sep 23 12:00:23 2026 GMT
Subject: CN=33071e329fe7ea2004428bd8adf4147671af41cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:5a:8a:71:48:24:c9:1e:67:16:88:cb:c2:
16:52:f0:63:30:b4:dc:c1:cf:9c:7b:b3:d9:63:19:
7d:3a:69:2a:5d:31:35:39:a0:3f:2c:71:65:0e:54:
62:c0:f9:c2:7a:87:5c:20:a0:15:a9:ac:11:17:e0:
c8:07:34:34:1c:7a:ad:8e:23:b5:4c:33:88:8c:2f:
ca:16:71:b6:52:46:84:87:a1:86:38:8b:d9:c3:c3:
ac:29:3d:84:35:dd:2a:0d:01:2f:10:58:84:dc:95:
71:30:ff:9e:14:33:c1:a1:7a:95:84:ff:7d:de:da:
9a:35:2e:8e:8f:ba:62:37:b2:e8:85:8f:94:d2:0a:
26:03:74:a9:3a:59:24:60:4e:8f:32:b2:e7:ef:03:
ba:82:af:dc:9c:08:24:c2:cf:5f:38:57:dc:30:a2:
f5:b1:62:2b:94:bb:15:75:11:f6:2e:83:75:ba:3d:
ed:cd:f9:ed:23:52:b8:ad:db:e2:2a:01:a9:be:cf:
5c:46:c0:c7:72:1a:b1:e5:a1:15:6a:da:53:95:5d:
42:69:40:93:ea:ed:db:69:00:13:82:b6:99:59:65:
c4:87:15:70:e4:0d:16:e3:48:ae:90:9f:be:2e:29:
e8:27:4f:df:a8:ec:62:63:b2:ba:7d:de:5b:d4:60:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:07:1E:32:9F:E7:EA:20:04:42:8B:D8:AD:F4:14:76:71:AF:41:CD
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:f3:2c:f9:91:5a:a2:6f:78:bb:f5:b4:4d:ce:be:be:39:
01:a6:42:70:b1:3a:dc:0c:3a:8e:c8:02:5b:51:01:77:98:65:
25:15:a0:fb:59:d0:aa:2c:0c:e6:70:78:06:c9:08:14:71:f7:
73:37:38:33:bb:53:d5:ef:48:b1:ca:89:3d:c7:dd:59:0d:0f:
37:e3:cf:18:2d:b0:9f:05:37:fd:7f:2d:c9:be:ea:ea:7a:d2:
34:f4:9a:df:0d:72:12:67:28:ae:d6:0c:03:1b:6e:b6:72:cc:
59:1f:39:95:94:9b:d0:11:06:36:75:70:57:3e:de:35:e3:75:
a5:39:73:e7:63:80:7c:b9:87:55:6c:59:77:04:ef:68:8c:72:
9a:bd:6d:c1:12:ae:8c:b5:a4:38:11:eb:1a:47:aa:c3:ec:f0:
8e:95:58:c8:b0:05:7e:12:90:0f:0d:a4:80:1e:a1:2a:20:d2:
da:08:67:a9:ad:c1:d3:9b:fb:be:73:47:56:6f:42:7b:22:28:
b7:4e:f5:fc:be:23:86:f1:b8:cb:26:ee:5b:e9:37:27:c1:f0:
48:7f:59:93:a9:b4:98:35:73:aa:ae:47:03:ec:15:1a:b5:a4:
a3:b3:cb:38:c4:7b:fd:2f:61:0c:53:1c:2a:4b:94:b0:a6:39:
c2:37:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:32 2026 by rpki-client