Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: Capqu8P5KzkFUzKohhc9UZzv2mhHhO3Lv+LVOfg436A=
Subject key identifier: 51:87:7C:8E:1D:C5:61:1C:97:85:45:29:8A:86:42:40:88:8D:83:43
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019CABD924444D85B44A5C2C884776C2BAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0C3F
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: 3+M75wZfO1OAPDxQLt11VgpemSW3U/yqgcNbdk3lbFA=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:24:44:4d:85:b4:4a:5c:2c:88:47:76:c2:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=51877c8e1dc5611c978545298a864240888d8343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:13:b2:16:b2:b6:25:7f:04:59:5b:04:f3:
45:aa:b1:97:5e:c2:71:1f:e5:59:f0:16:40:32:71:
ff:2e:e2:f2:23:76:8b:81:7e:4d:81:e6:9f:1c:cf:
72:c4:4b:5f:dd:97:42:c8:ac:66:fd:c3:af:60:13:
81:84:2a:1a:aa:9a:66:cc:6f:4b:1d:c5:a4:ef:a7:
09:ea:90:55:08:eb:c1:8a:d6:36:f8:01:f4:d8:f9:
13:d9:02:f8:99:33:a4:aa:c1:93:fa:23:f0:cd:64:
12:d0:51:d6:47:66:fa:10:ef:b4:b0:76:c1:9c:9f:
e7:4f:11:3d:b8:9b:e6:4e:72:68:d3:df:12:3c:d1:
f4:f4:63:46:5a:b5:96:54:d7:83:2c:48:92:2c:f0:
83:ea:aa:3f:27:56:00:0c:c0:42:3c:d3:3f:cb:50:
44:0a:4b:c6:2c:7f:c9:7e:49:1c:a1:ec:92:ed:5f:
5d:4b:96:39:2c:b2:7d:1c:80:5b:40:bd:97:86:70:
62:48:1a:24:39:41:5f:59:be:19:dd:e1:13:19:82:
02:3d:9c:5f:9e:69:a2:dc:12:c3:70:80:fc:d4:b2:
5b:9e:b7:d6:c6:c7:e6:86:f7:bf:6f:df:91:0e:8f:
1c:c3:90:8e:fe:f3:96:d4:a5:de:27:af:50:01:bf:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:7C:8E:1D:C5:61:1C:97:85:45:29:8A:86:42:40:88:8D:83:43
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:37:e2:ff:b9:e2:23:4f:1e:a3:f5:58:40:ea:19:03:a7:
97:3a:57:bf:d2:f7:a3:0e:15:2e:b6:73:21:51:55:c8:83:6b:
96:5c:98:54:4f:44:56:72:e6:53:31:ca:e6:e0:a2:e2:72:b8:
c3:68:e4:88:90:b3:f0:74:76:eb:23:3f:38:b1:5d:30:44:02:
6c:ef:a0:5b:5b:9b:8f:ca:0c:ae:ad:c9:58:9b:bd:9b:91:ca:
8c:ff:4b:68:6d:de:88:24:59:f0:fc:f2:8e:3a:3a:47:a7:3b:
c1:85:bc:f9:1d:7d:88:c0:77:85:bd:f0:ac:a6:1d:aa:43:52:
a0:59:52:d9:9e:67:28:06:b0:7f:8b:2a:b5:6a:a2:66:53:cd:
fb:ca:5c:20:c2:5f:c4:e6:00:ca:66:dc:3a:28:c2:af:02:77:
fe:7e:f6:78:15:59:44:f1:16:d3:6e:0e:b9:57:10:e3:bd:63:
0e:9a:b0:bf:da:dd:b6:8f:2f:6a:41:17:b4:db:1b:34:9b:cb:
40:8b:7d:19:e1:80:b2:8d:00:2d:04:a7:e2:3c:bc:68:c4:53:
0c:6b:81:e1:ba:28:c2:7e:c8:6b:07:02:03:1f:9f:d9:ba:e5:
1e:0e:9e:99:05:ab:a2:66:c0:d3:2b:e8:67:eb:34:3d:74:a0:
27:e5:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:23 2026 by rpki-client