Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: 7P3QaSNxLcSA0CxiVkaK3SFZubU8zBUlM+wVJFGWqWI=
Subject key identifier: 58:7D:FA:4D:DB:95:96:31:93:74:CD:2A:B5:4F:2B:FD:42:60:1B:BE
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01A001A5FFA24C3F34339D2C57D52180BD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 19:00:51 +0000
Manifest this update: Fri 14 Aug 2026 19:00:51 +0000
Manifest next update: Sat 15 Aug 2026 19:00:51 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: BGf+frXgV1pPYWp49R93CaiM78DdMdnorK0zZZIj71M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:ff:a2:4c:3f:34:33:9d:2c:57:d5:21:80:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Aug 14 19:00:51 2026 GMT
Not After : Aug 15 19:00:51 2026 GMT
Subject: CN=587dfa4ddb9596319374cd2ab54f2bfd42601bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:2d:b5:5a:0a:07:5e:a7:1e:f2:fd:f7:88:
59:11:20:91:de:37:a0:fb:30:62:93:a5:04:ea:cb:
fd:e6:cf:88:4b:35:f4:4e:41:98:9b:e4:70:87:76:
ff:97:28:16:ba:b5:e4:a8:5c:96:d8:b9:e7:3a:6e:
3e:06:35:31:14:04:b1:22:e9:91:d9:0b:68:c4:2a:
7d:08:55:08:33:5d:2e:8d:d6:44:3c:e6:15:2c:ab:
7a:6b:b8:37:6e:fe:5c:a2:05:5b:db:24:e4:b2:9a:
48:61:07:6a:a3:53:20:04:1f:27:d2:9e:2e:c3:8a:
8f:94:e3:e3:5f:a4:d8:62:e6:24:de:ca:b5:29:2e:
1f:82:07:b6:8d:bd:a7:51:8b:ed:f1:a0:79:6f:28:
f0:2f:86:aa:9c:c8:e5:cc:60:e1:ce:7f:b8:a9:a1:
61:0d:fc:19:78:db:8a:02:a2:27:29:b0:2a:9e:b2:
36:b4:1e:03:d7:74:21:a4:a2:42:ce:b5:22:fc:49:
26:fc:4d:e9:e6:33:90:4b:9a:1f:d6:5b:d2:54:0f:
ca:0d:f5:fc:2f:f5:f3:04:06:60:7c:d0:ae:88:06:
2d:7a:86:fe:5a:ab:66:58:79:04:21:5b:de:29:0a:
53:07:36:e7:d9:61:a3:f2:4f:0a:7f:65:e6:67:48:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:FA:4D:DB:95:96:31:93:74:CD:2A:B5:4F:2B:FD:42:60:1B:BE
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:44:48:56:72:32:af:f8:e2:50:ad:d3:f0:57:ad:94:02:1b:
20:48:5f:0c:d4:13:a3:14:ac:1d:9e:4b:43:1a:29:0f:6c:8e:
25:3e:33:9c:ec:fc:0e:f3:fa:3b:16:bb:cd:cc:42:a3:bd:7f:
58:2b:85:df:78:a8:d6:c5:f6:13:1b:c8:72:ed:50:38:76:eb:
35:85:1a:11:86:f5:9b:0d:e2:30:72:a1:40:63:f3:62:e8:2e:
df:53:99:fe:58:d2:dd:3f:ae:3a:87:db:b2:0a:0e:e3:a7:9c:
6b:61:be:50:2b:a5:06:40:65:74:ff:3c:d5:ad:69:07:8f:6d:
8d:76:2c:15:30:d2:3b:da:9e:bd:0b:5b:75:8d:a7:08:94:54:
36:92:0b:a2:51:c5:15:b3:de:d8:f2:c9:96:1c:7e:60:3f:2d:
41:5f:3d:86:2a:f6:4f:00:09:62:9b:28:96:b4:29:97:f9:b4:
11:d8:22:15:00:3d:b3:e0:82:c7:4a:00:d6:ed:2c:6a:ab:2f:
2a:36:2e:90:90:c5:69:ae:cd:bc:65:2d:3c:12:d6:f8:04:a2:
50:2e:c7:e0:0a:60:46:87:27:32:d8:54:98:23:fc:c4:6e:ef:
48:46:8b:c7:ca:0a:5a:ae:a8:c9:1e:d8:9d:94:1a:04:36:1b:
41:91:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:46 2026 by rpki-client