Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: BDxVl+EXSM+Ojyf+B4OWTyUpVXGJ1r4wJrw6X9iXyLU=
Subject key identifier: F5:00:15:8C:A8:6A:C2:26:ED:0D:BD:E5:F5:DF:CC:37:76:EB:B5:50
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019CABD9089DF36C0C00DA557D1F208A512E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: K23dt+8ws/3/3rUujbEQ2/grXBR8V7ofx4Ldr6HCTUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:08:9d:f3:6c:0c:00:da:55:7d:1f:20:8a:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=f500158ca86ac226ed0dbde5f5dfcc3776ebb550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:fa:56:64:ff:3d:04:00:5a:d5:00:6d:1a:
8b:63:6d:d6:76:24:57:b0:53:0b:ab:ed:55:df:a8:
27:5d:10:ed:c4:e2:1c:e1:ac:c0:8f:48:f1:3f:35:
ed:d5:7c:0f:f6:a6:f1:05:07:89:61:8e:7a:e3:7e:
5d:e6:c1:c4:d6:3c:e1:00:ed:5f:c5:da:10:2f:e9:
43:01:31:fb:79:03:89:33:0c:7a:28:6e:27:28:4f:
95:5d:e2:35:9b:58:cf:65:16:b2:51:4e:8f:52:f5:
a4:c7:a0:3d:07:88:8c:5d:dc:13:96:e2:b6:e3:3c:
39:16:cb:4e:eb:da:cd:c8:6a:cd:c7:83:ae:3f:6f:
ec:b5:cc:68:50:01:99:04:7a:e2:30:1c:2f:80:65:
51:6e:8f:4b:5f:82:c3:07:9f:76:cc:08:3b:48:6c:
ef:01:23:1f:f9:75:ee:bf:a2:21:47:5c:ad:ed:e7:
d7:1d:7b:b7:bb:30:86:be:ed:9b:c2:94:82:8a:6f:
7a:47:e1:27:00:99:33:77:a2:dd:5d:05:28:e4:dd:
67:87:df:12:d2:0a:74:fb:a1:2d:52:32:7d:ef:be:
a3:1f:b2:d3:e4:80:99:75:e1:f5:7b:8c:ac:79:8c:
8b:8c:d4:e3:98:28:f3:5a:15:4e:de:d4:84:7f:94:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:15:8C:A8:6A:C2:26:ED:0D:BD:E5:F5:DF:CC:37:76:EB:B5:50
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:8c:5b:09:43:98:46:ee:68:e1:2f:5d:c3:7e:21:89:a0:
cc:ef:59:63:bf:d9:48:e1:8b:08:db:58:49:d3:8a:6b:dc:85:
38:cb:2c:2d:92:bd:73:22:9a:16:e4:4d:84:89:a3:e0:8d:42:
68:8c:0d:3e:13:cc:a8:c9:d9:f1:78:5c:57:bd:e2:d3:26:fa:
9c:2e:e3:ae:2b:cd:9b:43:c2:7a:70:da:ec:8f:60:f3:36:c7:
74:85:5a:f8:ec:8f:f5:10:d8:b0:89:5f:c8:b6:85:8c:cf:97:
ae:99:4b:35:25:2b:b1:a7:45:fd:cd:18:53:a9:c7:3d:d1:9d:
02:dc:9e:1c:fa:8d:0e:2e:b0:fa:ef:89:74:42:96:bf:b9:75:
1e:37:b4:c1:9d:31:2e:8a:d7:79:32:31:9c:4c:e5:23:85:3b:
a8:2b:a0:97:df:fb:4a:83:71:5f:b5:ab:ad:c4:d7:04:74:2c:
d3:62:5c:51:1a:8d:0e:8d:97:6b:41:5b:8e:6b:29:90:65:07:
e1:70:39:c6:01:95:04:9a:db:46:a3:f2:cb:3c:f9:2a:c8:56:
ad:03:68:5f:18:3d:94:e7:ef:05:41:87:49:df:be:7c:9a:ca:
39:2d:bd:e1:66:95:b4:e1:94:a9:80:42:37:a9:96:9d:d9:c1:
39:96:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:26 2026 by rpki-client