Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: NOWTJ/gtMghtyKVCmIMVExDl8q3yWHIw2BlirXAucDM=
Subject key identifier: A8:67:15:49:42:03:F8:EC:4D:1F:9E:6D:1D:3D:1E:FF:EE:0F:AD:B1
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019D05F81C7A7BA0A324E8CF24A99470AD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 07D0
Signing time: Thu 19 Mar 2026 12:00:39 +0000
Manifest this update: Thu 19 Mar 2026 12:00:39 +0000
Manifest next update: Fri 20 Mar 2026 12:00:39 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: 5H95yM2p2AZeAKDncFDL4601xSn5NVu82PTCJix2IAc=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:f8:1c:7a:7b:a0:a3:24:e8:cf:24:a9:94:70:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Mar 19 12:00:39 2026 GMT
Not After : Mar 20 12:00:39 2026 GMT
Subject: CN=a86715494203f8ec4d1f9e6d1d3d1effee0fadb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:84:d8:ee:90:c4:ea:fa:23:41:1c:3a:fe:
55:1a:e2:a2:01:1a:d9:65:ab:9a:48:41:dc:d7:7c:
88:14:34:5f:fb:9d:c7:64:bf:2a:ec:3b:e3:5c:37:
ce:1e:4f:b6:53:9c:a0:83:9d:37:a7:7e:b8:38:2e:
17:62:5e:76:be:53:37:7b:52:5b:a6:e5:78:99:9d:
b1:31:e7:af:19:e6:1c:26:88:d0:80:f2:dd:e4:78:
9b:f7:57:cf:d4:bb:c8:3c:1c:d5:c4:41:ff:d4:61:
3d:b2:bd:3a:3c:71:53:21:34:e5:f8:36:d8:9b:f3:
47:b1:c4:4b:50:33:5d:82:35:02:89:34:fa:56:74:
89:de:df:d0:60:a3:00:b1:30:26:76:c5:26:2a:f1:
58:c3:68:cd:29:e3:ae:3e:86:fb:af:5a:a4:36:d7:
bb:e4:44:d1:59:ff:f8:a7:83:b3:fe:c6:6c:fc:37:
c2:6d:6c:da:50:0a:7d:d5:3d:61:59:79:e0:ee:24:
14:2f:4a:e1:ba:39:ed:6f:df:19:7e:9f:46:1f:36:
3d:54:cf:13:2d:d4:c1:ec:57:f2:7b:fc:23:d7:5b:
6d:f9:00:d4:ed:5c:d0:47:78:67:16:2f:96:70:01:
15:d4:43:67:c8:c8:22:59:9e:fd:5c:81:22:af:2a:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:15:49:42:03:F8:EC:4D:1F:9E:6D:1D:3D:1E:FF:EE:0F:AD:B1
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:72:08:e0:97:c0:2d:ce:d1:03:c0:01:86:aa:77:57:ce:da:
1e:1b:07:46:58:10:a1:f1:59:01:7a:43:e1:8d:74:5e:f3:41:
cb:fb:a4:32:6e:f0:60:fc:42:93:a1:7f:e7:e6:05:e7:64:68:
ee:a5:4a:5c:0d:a3:0e:d8:c1:d5:81:c5:f9:e9:26:e4:f5:8a:
3c:64:ac:d8:b2:05:52:00:97:57:7f:78:c0:fe:f1:0e:06:4f:
60:92:86:0b:57:22:8d:25:de:50:37:d0:45:90:44:99:a3:31:
fa:dd:f0:e5:08:90:f2:03:cd:ce:02:08:10:bc:82:cf:c4:2c:
4f:a0:e1:75:87:b5:27:f8:5c:03:d5:c3:e7:bc:e5:60:10:33:
47:db:6b:6f:80:02:c3:2d:da:0b:27:18:ce:72:58:47:db:c1:
3b:89:e2:04:22:f5:32:18:4d:14:8f:9e:fd:19:58:42:24:b2:
de:f8:89:20:61:f3:b9:d2:9f:6e:f3:fa:f2:1e:52:29:b9:42:
41:e4:f5:40:38:48:c9:cd:b4:fe:04:c1:8a:d6:39:84:e6:64:
f2:4f:1a:d3:13:5a:5b:88:64:25:0b:cf:65:cb:5d:69:7f:0c:
88:df:cb:bb:a4:22:8b:d6:43:7c:14:20:8c:f7:16:aa:99:37:
4f:47:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:54:29 2026 by rpki-client