Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
File: ktIQUcppgkCljUSA7ECtdTdo3-0.mft (raw, json)
Hash identifier: jjufBPRgdgqhaGddGXiGZTqStz5rwld8U1jQBG9e1iE=
Subject key identifier: D4:99:F9:5B:78:A1:89:8F:E7:8A:EE:42:0E:D0:45:2F:EC:C5:61:8E
Authority key identifier: 92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
Certificate issuer: /CN=92d21051ca698240a58d4480ec40ad753768dfed
Certificate serial: 01A17A037D9A54D4B7B893D6A9F3DC2767E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
Manifest number: 11
Signing time: Mon 26 Oct 2026 21:00:11 +0000
Manifest this update: Mon 26 Oct 2026 21:00:11 +0000
Manifest next update: Tue 27 Oct 2026 21:00:11 +0000
Files and hashes: 1: La6QsZIkeafLMENFBqSzGD_S69w.roa (hash: g+qFjsH1SQRGpklTOUV0a2PvJjqgS783EmS1uUCSURc=)
2: ktIQUcppgkCljUSA7ECtdTdo3-0.crl (hash: /n0XvX806eNtjPibBMoQch8WZ63+YEsVSXsdXdqYAzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:7d:9a:54:d4:b7:b8:93:d6:a9:f3:dc:27:67:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d21051ca698240a58d4480ec40ad753768dfed
Validity
Not Before: Oct 26 21:00:11 2026 GMT
Not After : Oct 27 21:00:11 2026 GMT
Subject: CN=d499f95b78a1898fe78aee420ed0452fecc5618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:bf:3f:95:6c:b7:41:03:9b:ec:89:9a:9e:
77:1c:43:10:e1:6d:09:dd:56:c7:7d:c1:61:b1:82:
c6:3e:5a:fb:a6:04:fe:19:a2:59:58:e7:d8:73:3d:
2f:6a:e8:8d:a2:15:2c:21:27:65:b0:c7:05:0a:ec:
fd:1a:0d:80:b6:4e:f3:9d:13:3f:52:fe:01:01:2d:
e6:ff:58:4f:87:7a:2d:71:b2:17:2b:b2:ea:a3:e8:
15:44:4c:31:6b:20:60:c9:97:43:06:f9:45:57:f9:
8f:6b:51:ab:d9:a4:a4:8b:d8:e4:2f:b9:36:fa:9a:
1b:1f:89:92:94:46:b4:ed:aa:f7:eb:e6:59:8a:97:
8d:74:73:e2:ac:f7:df:28:c6:f9:59:4f:90:28:27:
72:b6:37:b7:15:10:bd:39:4d:b9:8b:ad:3e:b6:57:
40:b0:c9:7b:e4:48:bb:6e:98:72:a2:91:0c:48:f9:
e6:0f:dd:9e:fb:d8:dd:c5:30:79:2d:94:27:33:0b:
41:b2:70:06:66:6c:cf:85:2c:ad:7b:51:ba:81:be:
e7:a6:79:d0:b3:50:1c:f1:c4:88:7c:0b:87:14:fa:
c8:ef:ce:57:f3:e4:c1:8c:03:11:4e:be:0d:72:e8:
0a:5c:d5:ac:9b:ac:51:b0:10:7f:55:cc:69:9c:a3:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:F9:5B:78:A1:89:8F:E7:8A:EE:42:0E:D0:45:2F:EC:C5:61:8E
X509v3 Authority Key Identifier:
keyid:92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:a2:63:70:a5:d4:74:80:3d:16:b4:d2:87:1e:d5:01:ca:
e8:7f:3e:7f:83:3e:60:b9:4e:da:c8:e6:69:c6:41:bb:57:70:
9f:83:bc:27:f4:c9:b5:a8:a4:25:09:b1:3f:74:c9:0d:c7:ee:
39:05:69:9c:7e:89:7b:be:30:5e:fd:f6:66:6e:22:32:e3:54:
1e:0d:54:fd:53:f1:1b:b6:f9:fa:96:0e:d2:bd:e4:4f:57:6f:
e6:62:bf:7e:55:61:e0:7f:df:ae:b7:ba:60:f4:9e:58:d8:90:
67:6e:04:9b:cb:05:87:7f:3e:5c:85:b2:8c:7f:c6:26:96:88:
d7:5f:97:6f:82:a0:a3:35:d0:55:f2:7f:6a:75:25:f7:fa:f7:
c7:f9:9d:74:8b:50:f9:31:53:3c:35:5d:ed:c4:1e:3f:47:73:
45:71:47:0f:6c:46:52:d6:e6:a7:0f:a8:bd:57:55:e6:f6:21:
05:d9:67:23:1b:03:a3:ab:e1:11:97:38:cd:44:79:bf:db:fa:
73:25:77:1f:33:07:36:a5:5d:0c:b6:e9:fd:26:af:5e:3c:67:
b8:f8:35:ab:99:45:01:57:e1:5f:a6:13:19:af:68:13:63:3f:
6a:fd:53:2f:69:c7:5b:94:0b:b2:4f:0f:cd:6d:22:83:32:3e:
c4:4b:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:18 2026 by rpki-client