Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: 2RFH5l4MuTP2tIjhJZexh+u9HK7QpN6onMqgGY2NibE=
Subject key identifier: 91:9D:0B:FF:F7:FD:30:74:59:5E:79:2F:94:FD:E7:EA:B1:66:55:A3
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 01A003CB19131862351148983DBC8D10C0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0EA6
Signing time: Sat 15 Aug 2026 05:00:36 +0000
Manifest this update: Sat 15 Aug 2026 05:00:36 +0000
Manifest next update: Sun 16 Aug 2026 05:00:36 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: H6cTc9vnosFdR5r8T+yntpYJv68ZoLKhaaYpNJb2tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:19:13:18:62:35:11:48:98:3d:bc:8d:10:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Aug 15 05:00:36 2026 GMT
Not After : Aug 16 05:00:36 2026 GMT
Subject: CN=919d0bfff7fd3074595e792f94fde7eab16655a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:3a:1c:f6:7c:79:22:69:d5:4e:69:0d:97:
08:60:1e:56:ad:2a:bd:a4:dc:3b:d2:68:0c:22:47:
58:61:1e:6d:75:25:55:20:df:07:1a:75:03:58:e0:
ea:65:a1:b1:45:b0:8a:57:8e:b9:ae:ba:ec:b6:5f:
ae:a7:79:4d:10:a0:1d:82:4f:5a:6c:cb:a3:f5:79:
45:32:1c:c9:f2:35:e6:54:77:d5:91:8d:43:38:28:
ab:0b:f9:90:8e:f6:af:18:7b:fd:6f:62:d3:bb:df:
36:43:0c:b2:be:59:61:df:e8:15:6b:e8:e0:9d:2d:
32:e0:88:a6:03:cc:a6:62:3f:55:9f:73:c8:03:1e:
0b:b3:c7:86:ed:75:54:98:d9:9c:5a:7c:f0:6c:6c:
82:fd:fd:ab:a1:51:a0:08:f1:61:4b:4e:7a:8c:e0:
0d:9f:08:13:4f:a2:cf:e8:f9:70:8d:bc:b7:16:77:
ee:77:c3:10:39:07:04:ec:7c:de:70:e3:45:f9:22:
b7:db:3a:30:f3:5e:84:0e:1d:0f:94:ac:1a:b1:c2:
11:4c:4a:4e:67:6d:77:e3:da:b4:97:4f:fe:5e:7c:
8a:c6:5f:20:d5:ea:7b:57:54:b0:80:fd:b2:a3:eb:
4e:31:17:f8:b5:83:6c:d9:e5:f5:55:2f:75:81:70:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:0B:FF:F7:FD:30:74:59:5E:79:2F:94:FD:E7:EA:B1:66:55:A3
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b2:76:91:7c:5d:dc:db:f4:db:e0:94:60:4c:a3:34:5c:6a:
4d:b3:ce:fe:c1:2b:12:84:ff:af:62:d4:7e:70:c3:c9:f8:9d:
48:51:38:8c:70:ec:27:37:21:7c:23:0a:b3:32:27:20:fa:d7:
83:7c:f1:91:a7:61:7c:60:22:96:23:14:d3:94:e6:9b:48:04:
1c:09:45:b1:d3:3b:c2:59:21:9c:d9:20:e1:da:29:1e:a9:02:
29:6e:b1:c2:f2:36:10:8a:f9:a9:23:f7:16:14:50:99:03:71:
10:a7:07:d3:4f:72:e1:70:29:a4:4c:1b:72:26:99:90:00:93:
05:66:b6:7e:86:48:8d:26:e2:03:42:51:1e:a0:1c:ba:76:84:
54:dc:b9:93:47:78:60:9d:2e:d5:57:25:88:a0:53:d6:56:be:
d8:b9:10:1f:05:f0:72:37:56:21:43:1f:86:a6:a6:04:9d:c6:
b9:a4:80:db:91:12:dc:5a:aa:82:0d:e0:9d:d7:39:83:58:b8:
ee:7b:3b:71:3e:6e:e5:25:68:c6:e1:05:34:4e:44:7a:1b:45:
8e:e2:93:f3:40:8f:5d:33:9c:7d:25:86:29:46:09:d7:e6:ce:
a4:5f:62:22:19:a0:d4:07:06:d0:cf:ae:d1:84:e7:08:87:30:
f8:54:a2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADyxkTGGI1EUiYPbyNEMD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2
ODA0MTgwHhcNMjYwODE1MDUwMDM2WhcNMjYwODE2MDUwMDM2WjAzMTEwLwYDVQQD
Eyg5MTlkMGJmZmY3ZmQzMDc0NTk1ZTc5MmY5NGZkZTdlYWIxNjY1NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06E6HPZ8eSJp1U5pDZcIYB5WrSq9
pNw70mgMIkdYYR5tdSVVIN8HGnUDWODqZaGxRbCKV465rrrstl+up3lNEKAdgk9a
bMuj9XlFMhzJ8jXmVHfVkY1DOCirC/mQjvavGHv9b2LTu982Qwyyvllh3+gVa+jg
nS0y4IimA8ymYj9Vn3PIAx4Ls8eG7XVUmNmcWnzwbGyC/f2roVGgCPFhS056jOAN
nwgTT6LP6Plwjby3Fnfud8MQOQcE7HzecONF+SK32zow816EDh0PlKwascIRTEpO
Z21349q0l0/+XnyKxl8g1ep7V1SwgP2yo+tOMRf4tYNs2eX1VS91gXBLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGdC//3/TB0WV55L5T95+qxZlWjMB8GA1UdIwQY
MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt
NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk
LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbJ2kXxd
3Nv02+CUYEyjNFxqTbPO/sErEoT/r2LUfnDDyfidSFE4jHDsJzchfCMKszInIPrX
g3zxkadhfGAiliMU05Tmm0gEHAlFsdM7wlkhnNkg4dopHqkCKW6xwvI2EIr5qSP3
FhRQmQNxEKcH009y4XAppEwbciaZkACTBWa2foZIjSbiA0JRHqAcunaEVNy5k0d4
YJ0u1VcliKBT1la+2LkQHwXwcjdWIUMfhqamBJ3GuaSA25ES3Fqqgg3gndc5g1i4
7ns7cT5u5SVoxuEFNE5EehtFjuKT80CPXTOcfSWGKUYJ1+bOpF9iIhmg1AcG0M+u
0YTnCIcw+FSiUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:04:25 2026 by rpki-client