Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: LV6yPDhCSJ5UcQBx1sRhWOj2fby0S0eDbydZ3Qf3gkc=
Subject key identifier: D9:72:32:8D:CB:D0:CF:16:BB:C2:03:81:95:34:72:78:94:3B:02:6A
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019FF7FE68A1A92226A4E6E14E76533D97B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0DF8
Signing time: Wed 12 Aug 2026 22:01:13 +0000
Manifest this update: Wed 12 Aug 2026 22:01:13 +0000
Manifest next update: Thu 13 Aug 2026 22:01:13 +0000
Files and hashes: 1: BL4Vtry3hEpte5DWArEP18F1cE0.roa (hash: gofiyS9syREpyRSAEswnOrvXK3X11R7n1mcI61HsmZo=)
2: De10BA3lyb6wC65o9g_3Z3Rq9oE.roa (hash: n2SRcsi6LtLV6qCMUUDWO/sW9w7HRsZQAdCEZ81fiO8=)
3: cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa (hash: J8fumuS9RwLV1jOdIP4cqRgqwBElG3GCVerOnC7YBBM=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: g12hxgvwRQngH4F64FoN3fG8fCU1Q8aBYjEsEjf8SmM=)
5: o14utqHYZFxhZfVEkq-FP4EOMBc.roa (hash: s9KvSuwsAo53TsaYUbZWoSvNDjlPZyPjIsdZ0Auhgao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:68:a1:a9:22:26:a4:e6:e1:4e:76:53:3d:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Aug 12 22:01:13 2026 GMT
Not After : Aug 13 22:01:13 2026 GMT
Subject: CN=d972328dcbd0cf16bbc2038195347278943b026a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:7c:04:f0:aa:a7:c2:e0:3f:41:02:a6:ff:
7f:b9:62:e1:31:a9:9f:85:1e:37:fa:2e:92:e3:e0:
f9:52:1c:87:62:5b:d9:8c:f6:a2:c9:a4:9b:05:0f:
72:06:3a:79:30:a0:cf:6d:0f:db:55:d0:71:ae:b5:
f6:27:c1:10:e2:6c:7d:a9:b3:5d:80:8f:59:b5:81:
bf:b5:21:d9:b6:91:61:9c:68:7a:8d:68:55:f2:67:
25:dc:d7:75:08:8d:95:58:a9:e4:a0:6c:2b:37:ab:
0e:34:5e:a7:00:4f:e2:ed:f1:0d:fc:aa:d2:6a:c2:
b4:ec:d1:76:aa:5e:a3:87:8e:9f:af:8d:cb:97:87:
22:f9:5b:c5:43:17:21:7d:88:bc:44:11:b3:c3:fd:
6b:16:f9:22:0b:8d:97:b6:b1:3f:3f:3c:28:6f:76:
c2:31:4a:c5:b7:76:fd:c7:27:36:08:81:2c:4a:e4:
30:04:3b:aa:a4:4f:e4:3c:74:6f:09:4e:0c:cf:ec:
52:f6:f9:dc:ad:da:ef:f7:18:38:0d:4e:0e:80:42:
02:3c:33:64:00:98:ed:f6:b4:c5:5d:4d:5a:88:a3:
87:ae:c6:48:7a:64:ae:39:04:1a:06:cd:81:f2:9c:
6b:88:d0:e9:86:84:dd:fc:dc:a8:09:ac:43:f7:86:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:32:8D:CB:D0:CF:16:BB:C2:03:81:95:34:72:78:94:3B:02:6A
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:76:78:71:d5:72:a1:ad:97:f0:3b:97:6a:ff:04:31:ec:c0:
84:3c:fb:1d:b5:e6:bb:82:d3:bc:a4:3e:77:5a:6f:96:90:b8:
b7:fa:c9:32:a0:e0:91:9a:65:c9:f2:c6:1a:55:f7:68:3c:56:
e0:d2:70:8b:c3:36:5d:25:55:e0:44:44:48:8a:8b:96:10:fe:
c1:17:1a:70:ff:0c:e4:be:87:f5:7c:4d:70:9e:69:b2:56:94:
da:c8:4d:a2:6f:bf:11:62:d3:b9:b2:49:62:a3:60:9c:d5:58:
90:be:af:8b:da:44:7a:6c:54:fe:00:a7:63:9d:08:56:ec:5e:
57:83:9b:4b:76:d9:6a:38:5f:8f:17:51:f1:df:dc:84:e9:5d:
5c:10:79:98:45:b1:ae:fe:fa:f5:3d:3c:9f:70:92:2e:d9:55:
0c:ce:0a:e3:cc:59:a0:73:cc:92:71:91:b1:43:12:14:48:a5:
b7:71:63:fe:75:c9:16:af:70:c8:82:5a:69:09:df:a4:d7:94:
48:93:41:b2:96:cb:a4:c4:e4:53:f0:d3:ea:73:71:83:f8:04:
5d:53:68:9b:fc:2f:8b:b8:9b:79:7d:88:fc:d7:f1:98:7a:87:
5b:73:77:b9:5e:34:00:08:ac:00:f9:91:ac:13:cf:19:72:fa:
c7:d6:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:49:14 2026 by rpki-client