Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: XbH6R7vxUxR91Yh0TXnaShmmAZZJrKP9HFg7RWmMo+A=
Subject key identifier: B2:D1:FC:63:5A:77:1F:7C:48:78:82:36:03:B7:70:F2:AE:D8:92:8A
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019DA48ADD46D0B78D295AA4B296DD815D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 1116
Signing time: Sun 19 Apr 2026 07:00:57 +0000
Manifest this update: Sun 19 Apr 2026 07:00:57 +0000
Manifest next update: Mon 20 Apr 2026 07:00:57 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: +va99bUEluuM3CNFYPKA3z3R24R+4SqBoZrh2YWSR+M=)
2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:dd:46:d0:b7:8d:29:5a:a4:b2:96:dd:81:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Apr 19 07:00:57 2026 GMT
Not After : Apr 20 07:00:57 2026 GMT
Subject: CN=b2d1fc635a771f7c4878823603b770f2aed8928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:8d:c7:37:00:79:f8:59:d3:1e:eb:9f:3e:
2d:a2:e8:99:2b:f6:95:15:5d:51:16:50:6d:2c:72:
92:70:75:cd:fe:ca:43:77:07:3a:de:c3:cd:7d:93:
fc:88:7c:35:3a:0d:fc:a9:ba:2d:21:39:4a:80:a4:
0e:7d:70:2d:a4:4e:39:f0:3d:06:47:de:2f:05:74:
99:63:13:ba:ce:11:b8:68:28:f5:ec:64:70:c3:8c:
7f:51:aa:10:9f:88:26:5f:9f:5c:5e:61:cb:17:35:
59:9e:f4:8b:38:bc:16:a6:f3:01:ce:1a:e3:1d:ac:
e7:cd:dc:48:b5:ea:d7:5a:85:95:b4:21:6a:b6:3f:
eb:b5:18:0f:a2:d8:53:bd:88:cb:4c:3c:ee:a5:57:
44:a7:4d:6e:44:51:f6:33:e6:fd:be:67:d1:88:a9:
47:81:7a:f4:e7:b3:c0:15:15:24:3e:c0:d6:57:04:
b2:7c:e9:c4:c7:c5:1d:2a:e9:bc:02:aa:3b:4e:7a:
da:58:04:55:96:12:d3:62:8c:c6:05:6e:21:44:ca:
aa:7f:05:70:5c:a4:30:4b:58:e6:6b:af:52:31:59:
e3:00:18:35:d5:dd:ec:38:13:c0:fb:b8:ab:06:87:
54:52:ae:21:a5:97:9c:00:c2:59:a4:51:dd:c2:ce:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:FC:63:5A:77:1F:7C:48:78:82:36:03:B7:70:F2:AE:D8:92:8A
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1e:42:ab:64:ba:da:1b:2a:be:44:42:d4:ce:96:d8:be:a2:
58:77:ff:ca:72:a1:e5:c2:ab:e1:27:b9:01:08:ec:7c:74:f4:
20:f2:e4:b0:b9:26:65:d4:fa:ba:fa:ec:e2:c8:68:1a:61:a1:
64:48:58:c7:61:1f:02:25:2f:cc:26:4f:8c:c1:61:60:7c:d6:
ac:d2:b2:f1:04:5d:ea:fc:dc:a1:d6:53:85:7d:cc:08:2a:15:
0f:62:ee:8d:9f:1b:bb:74:78:30:27:93:c6:73:b9:54:52:4b:
f6:09:ad:70:8b:fd:c6:c2:cf:f5:33:80:77:10:96:45:db:36:
7c:11:80:db:17:7c:23:a3:90:f4:01:14:9c:57:7e:47:92:86:
1b:a3:0b:52:91:0f:a0:46:22:22:29:bb:51:0a:0d:6c:d0:65:
f3:38:a4:ef:d4:b8:46:aa:24:1a:c3:f8:69:1c:c4:76:cb:4c:
bc:30:f3:4e:73:6e:8c:31:cd:57:9b:58:2a:7b:c6:00:01:e9:
5a:a4:fa:09:0b:f8:4a:3f:25:04:3e:02:35:48:11:76:b7:8f:
d5:94:4a:70:40:79:98:6d:d9:22:65:05:bf:20:f4:b1:dd:d6:
dd:ca:11:25:b1:87:c3:10:46:01:65:a7:28:7c:aa:5c:a7:e8:
ad:9e:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:40 2026 by rpki-client