Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: xT5KUOm0EuM8zh09xULunCWVHJSiAryGXn/iszafNK8=
Subject key identifier: 16:57:54:76:CD:58:F8:F9:66:DD:6F:0E:39:A5:58:1D:0A:80:D0:05
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 01A06D9538281851A3D3A3F0F358432E6267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:30 +0000
Manifest this update: Fri 04 Sep 2026 18:01:30 +0000
Manifest next update: Sat 05 Sep 2026 18:01:30 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: DjrQoUF7LKWVTmSkK9FWVc5ayZthDAe12uRSMmUL2Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:38:28:18:51:a3:d3:a3:f0:f3:58:43:2e:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Sep 4 18:01:30 2026 GMT
Not After : Sep 5 18:01:30 2026 GMT
Subject: CN=16575476cd58f8f966dd6f0e39a5581d0a80d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:28:49:c9:e4:f0:61:df:a2:be:d5:99:25:
da:37:09:bd:a3:9f:50:79:9e:db:2b:1f:10:54:0c:
5d:6d:9e:24:e0:00:83:9c:d7:7e:20:7e:47:ab:f3:
b8:f3:3d:3a:02:00:60:da:63:63:5b:fc:5d:3d:18:
9a:8f:6b:c4:da:38:1a:88:60:59:e7:9e:a4:46:09:
9f:2c:2b:c3:34:51:b5:17:a0:f0:65:36:a7:e7:4a:
bc:a1:44:f1:3c:ec:6c:de:85:cf:d6:3b:cc:1c:99:
62:4c:15:0e:ee:a2:4a:58:b1:f9:79:c8:ce:d9:2e:
78:d7:16:48:e0:e9:4e:68:4a:28:00:19:88:a1:1b:
2f:47:25:11:f3:77:21:6b:cd:81:9f:bc:d4:8c:9a:
8e:93:3e:d7:2a:da:2e:a7:c8:af:45:27:0f:45:ff:
28:ae:41:7a:d1:96:8f:8b:e7:dd:8d:da:aa:cf:33:
fd:91:5d:87:98:fd:ec:77:71:03:45:f2:23:2a:01:
2b:14:06:67:d6:ea:96:49:c6:bd:e2:30:09:53:bb:
ea:6e:48:76:b3:25:a2:de:8c:a9:53:ce:34:15:c8:
28:79:c8:d7:c2:c5:e3:52:ee:4e:8e:26:24:14:ab:
d9:ea:12:73:62:a7:cb:66:3c:f7:a3:36:3c:eb:ce:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:54:76:CD:58:F8:F9:66:DD:6F:0E:39:A5:58:1D:0A:80:D0:05
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:5e:2c:de:c9:66:2f:6b:26:8c:9b:9c:dc:c8:68:2e:49:
ca:fc:a7:a9:9c:c0:0a:3a:ba:9b:32:73:e1:1b:61:3e:3e:26:
a6:91:ac:e5:dc:a7:e4:ed:ac:ce:04:75:4a:8f:34:68:35:44:
b9:ab:a5:63:0e:ce:3d:ee:38:2c:07:04:17:71:67:b3:10:d3:
27:92:5c:3e:de:34:2b:b5:b3:8a:59:14:4e:57:0f:24:63:21:
b6:11:1d:1b:7c:8b:29:52:93:35:41:85:21:96:f6:ae:8d:83:
ee:7e:5f:b9:14:c4:16:40:27:c8:f5:8b:73:b3:f5:5a:bc:d8:
c4:09:36:8b:7b:ee:b1:36:09:81:71:12:87:d9:73:c8:c9:36:
5b:2e:91:36:31:0b:c8:b9:68:e9:d6:5a:84:bf:41:cc:ae:0b:
46:8e:da:67:c9:bb:e3:03:64:67:ee:89:09:9b:3a:44:2b:10:
15:3b:dc:ac:f9:8c:bf:16:4a:c5:81:10:43:90:f5:e4:9c:2a:
00:57:b2:db:9c:6a:07:d9:2c:d7:82:14:ba:80:c6:aa:a8:97:
86:42:7c:ad:71:f9:0c:11:7d:a4:b4:61:e0:2d:9e:a5:df:4b:
50:5a:3c:3e:be:f2:36:ca:05:df:f2:80:b6:f8:f3:24:e2:eb:
ce:b3:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:15 2026 by rpki-client