Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: uvRJJ4WCrsJkgoJVQXu0Axxn0U3EFcQ75Z7krvafNSM=
Subject key identifier: 3A:42:2A:D3:5C:8F:0B:6B:72:67:0A:48:04:58:97:FC:F6:7C:27:DB
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01A121659C0E2559F8AF02E1713B93F502F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1A27
Signing time: Fri 09 Oct 2026 16:01:09 +0000
Manifest this update: Fri 09 Oct 2026 16:01:09 +0000
Manifest next update: Sat 10 Oct 2026 16:01:09 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: 3rVKsWFntOjGx/dHyxlxaWelj8tINFhFz/YVXGWEjek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:9c:0e:25:59:f8:af:02:e1:71:3b:93:f5:02:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Oct 9 16:01:09 2026 GMT
Not After : Oct 10 16:01:09 2026 GMT
Subject: CN=3a422ad35c8f0b6b72670a48045897fcf67c27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:fa:35:16:4b:e2:22:e6:08:f3:13:0a:df:
0d:40:62:a0:23:3b:ed:0e:d8:ea:22:c4:c6:1a:87:
b9:8f:c8:25:d7:68:66:94:3a:00:f6:b2:18:c3:30:
f4:13:79:c7:f5:9f:a0:f1:f6:df:79:1b:65:16:bd:
4c:d2:15:e7:b0:cf:10:43:78:e3:47:06:dd:5b:4a:
7b:a5:a1:89:6a:2d:1c:a8:c9:a8:9d:9d:b0:c5:77:
72:10:d0:7c:52:8d:6e:7e:18:2f:c1:69:66:b0:66:
7b:4a:c5:55:30:b6:50:47:fd:fd:59:18:be:fc:28:
e6:25:74:4b:82:1b:c5:5c:a4:53:df:9d:49:a9:0a:
9b:df:16:5d:39:8e:5b:b3:00:43:04:6d:28:62:7f:
21:e7:31:f5:30:d9:20:c7:51:b1:0b:bc:81:4d:a4:
0f:ae:c8:18:9c:fa:eb:3e:63:86:32:c7:7b:2c:98:
ce:18:bd:c3:5d:f5:bd:b7:dd:20:3b:ca:c5:5a:f3:
82:5c:dd:b3:77:57:f0:f7:85:49:92:79:52:95:b6:
b3:4a:cd:19:f7:b3:1c:84:2f:1e:38:72:f2:03:8a:
7a:00:80:ef:ab:03:ca:43:f0:af:8d:fe:91:0e:bc:
33:bd:a9:78:41:a8:c9:be:38:29:c1:46:50:e4:26:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:42:2A:D3:5C:8F:0B:6B:72:67:0A:48:04:58:97:FC:F6:7C:27:DB
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d0:25:63:49:09:af:dd:f5:18:ff:e7:63:ba:d5:5f:6e:97:
0c:87:82:3d:2e:18:e5:f2:82:4a:d3:74:01:c5:7f:d3:53:a5:
8d:33:ce:ab:bf:81:87:47:54:35:a5:45:17:3a:f4:2a:ee:c0:
a8:b3:f3:b4:53:e7:41:0c:16:2f:d2:a9:d2:ba:0c:83:78:f0:
44:12:29:7a:86:48:7c:b6:75:28:e8:e1:b9:4d:cf:49:9c:0b:
89:34:38:b1:d3:14:f7:0b:8b:66:3e:96:33:18:bb:6b:c3:0c:
b9:b2:e4:61:de:39:d1:e7:69:71:db:8b:0b:e4:f2:fe:ef:f9:
60:f5:cf:b2:a1:4f:a7:d1:d7:2d:b7:99:67:51:df:66:ff:97:
51:b3:da:93:43:c6:62:8d:09:e9:6b:e3:71:90:f5:3b:aa:99:
6f:2d:75:85:b0:80:94:ea:e1:e8:bc:ac:8d:5b:55:c4:af:b4:
9a:1d:6e:ce:bc:54:3c:d9:df:26:ae:5d:cc:58:a6:f6:d6:82:
55:fb:61:de:16:58:ae:7c:76:1f:e6:da:13:bd:31:2a:fd:79:
33:17:c8:72:34:18:45:7b:67:2b:f5:a0:38:89:d8:33:d5:07:
04:33:c5:78:12:ca:39:fb:32:20:43:be:00:e2:81:0f:b7:a1:
0c:7c:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:16:29 2026 by rpki-client