Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: nKFWwDjRuHNOxKKYwAobiBUMvK3c6HdWg1PLx1SU0fo=
Subject key identifier: DC:90:67:48:61:DF:D0:DB:6D:F0:C6:E8:87:64:3E:A2:52:59:4E:B9
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 019F85D5E880D20B311E0835D36D9B1086D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:16 +0000
Manifest this update: Tue 21 Jul 2026 18:00:16 +0000
Manifest next update: Wed 22 Jul 2026 18:00:16 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: tEpnIFrJxhnx0mu4CRDtrTpcU0A2e8XfXdNu36OXaac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e8:80:d2:0b:31:1e:08:35:d3:6d:9b:10:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Jul 21 18:00:16 2026 GMT
Not After : Jul 22 18:00:16 2026 GMT
Subject: CN=dc90674861dfd0db6df0c6e887643ea252594eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:42:d5:49:32:30:f9:19:7a:b4:be:f4:94:
8d:2f:5f:c9:fb:b5:64:11:00:91:9b:77:ff:f6:65:
6f:b3:85:ad:bf:ad:b1:b0:b3:76:1d:51:7b:f3:8d:
b3:72:75:30:5f:e3:c3:d4:d2:84:23:93:2e:a8:44:
1b:58:58:4d:03:e5:11:32:56:f5:b6:f1:33:79:4b:
e5:55:25:ff:ba:e3:67:11:e2:98:58:aa:36:27:0e:
3e:59:75:12:e2:fd:a0:87:0d:9e:c2:f2:f1:7b:a2:
ca:92:22:a8:d3:4c:b2:9d:40:ce:e0:48:97:45:08:
a3:f4:63:20:55:7b:26:cf:d6:ad:c5:40:19:89:c4:
23:03:50:0f:75:f1:5a:43:1b:fb:8c:27:47:13:3a:
9e:b7:52:47:0a:27:36:04:48:0d:b1:fc:5b:66:8f:
23:c8:5a:b9:ae:c9:98:ec:72:93:42:51:f0:af:a6:
a8:05:38:ab:3f:66:4d:9d:4c:94:5f:eb:05:a5:d4:
6c:c9:7f:a3:7d:50:da:25:be:f7:b8:df:7f:30:b3:
92:8f:9e:d1:fc:aa:f1:57:5a:a3:fe:00:4b:34:fb:
c7:40:b4:2b:cc:b6:26:cc:b1:80:a7:f7:c3:15:8d:
54:a8:6c:62:99:01:88:a1:5e:5d:1a:72:a2:d7:7f:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:67:48:61:DF:D0:DB:6D:F0:C6:E8:87:64:3E:A2:52:59:4E:B9
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:c2:ff:94:e6:78:b6:e3:f7:52:b4:6b:d0:67:69:d0:1d:
67:83:08:06:1c:8c:40:4f:40:bd:76:91:16:f5:fb:c5:e4:74:
36:bd:00:d0:5d:36:95:54:08:c6:ab:de:66:f1:1f:25:6d:d6:
16:52:d4:c7:e6:7f:d5:33:f4:67:d4:e8:56:5f:a2:66:ec:aa:
97:a3:23:cd:b0:bc:44:ff:6a:aa:b0:dc:09:45:5d:4d:15:b4:
1e:b8:a1:6c:64:44:2e:4f:d6:67:03:1d:7e:5f:f2:a7:bf:1d:
bf:81:86:b9:49:fc:82:7c:2d:d9:a0:ac:25:ee:fd:09:91:6c:
51:30:b2:08:e5:3c:31:72:4c:3b:46:ca:a1:62:57:e5:e1:fd:
e8:a2:59:70:d0:c7:83:ae:d1:22:89:52:47:fb:61:12:34:9c:
26:74:cb:ef:05:9b:cb:0f:e8:2a:b2:c1:13:13:bc:90:05:fe:
10:1d:0d:81:ee:cc:c0:50:88:76:27:54:dc:a9:8f:5c:ef:ed:
2d:df:26:07:15:39:52:76:a1:54:bd:30:ee:d7:f5:a5:be:4c:
be:c0:55:3e:cb:d5:fc:ae:43:60:0a:89:78:7c:2e:7b:c2:78:
0f:ab:0c:87:f3:a8:61:0d:f2:26:78:fa:9d:47:58:2c:ba:52:
94:79:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client