Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: euJ1OpZthURVNk6XS/aIB1FUV+F7m7ca/cpzXJm3ofo=
Subject key identifier: 0D:B9:C7:85:29:A8:76:BE:67:03:37:5A:BC:85:1B:A2:BE:03:44:E6
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019DEDB742931692F8BFA5133B8DF4CEB6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0848
Signing time: Sun 03 May 2026 12:01:43 +0000
Manifest this update: Sun 03 May 2026 12:01:43 +0000
Manifest next update: Mon 04 May 2026 12:01:43 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: am2QN5iVlvdlQEToK9IXSBbiMoCWYnYcVKcQ0haqPS0=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:b7:42:93:16:92:f8:bf:a5:13:3b:8d:f4:ce:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 3 12:01:43 2026 GMT
Not After : May 4 12:01:43 2026 GMT
Subject: CN=0db9c78529a876be6703375abc851ba2be0344e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:41:77:fb:b7:0a:9c:6a:a6:50:31:62:16:
9f:1f:2e:f6:64:c7:6c:dc:26:68:2f:90:9c:9f:d9:
98:e0:bf:fe:0c:fd:10:57:01:41:ba:8c:21:bb:f6:
e8:0b:8f:6e:88:77:d9:a1:67:2d:46:a3:94:75:48:
34:38:c0:1e:ad:66:f0:26:58:19:14:6c:f9:3a:bc:
c7:ee:1c:38:ba:a4:22:b9:ec:30:2e:c0:21:1a:a0:
02:74:8c:8d:75:4c:bb:3f:14:cf:15:81:83:82:77:
b3:c7:5c:a3:09:00:3b:d9:3c:d7:74:de:23:55:03:
58:d0:3c:3f:ec:bf:94:d8:87:c3:7d:41:08:27:ff:
3c:3c:92:1a:0c:fe:91:36:a6:14:43:98:5b:5f:62:
43:1f:fc:6c:4b:13:a5:c6:32:65:91:86:02:cb:d5:
03:21:8a:8f:3a:c3:ce:c3:e3:7b:ee:49:f8:5a:61:
7d:fa:ba:41:51:b7:fc:5f:ca:c8:0a:89:3a:c6:97:
20:39:72:b8:9b:13:16:aa:31:6e:fd:20:73:7d:54:
b9:d3:29:34:53:50:9d:64:2b:51:f5:70:db:48:7a:
36:8b:b9:87:a4:72:bc:62:92:aa:88:fc:9f:d4:d3:
10:34:29:fb:76:71:5c:d1:6c:e6:fd:ea:c3:91:57:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:C7:85:29:A8:76:BE:67:03:37:5A:BC:85:1B:A2:BE:03:44:E6
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:37:2a:21:7d:45:18:f1:37:1b:b4:a7:fd:1d:19:6d:43:13:
ba:11:71:05:a8:80:be:79:82:19:d6:37:e3:b5:67:9f:c1:9e:
81:37:22:d9:68:b7:33:8c:24:fa:92:80:ff:a8:76:4f:f5:b8:
be:4f:7e:ac:f4:e0:94:63:3e:6f:d6:50:7e:ec:dd:d6:d6:80:
00:4d:1a:70:aa:cb:9d:f9:08:c1:ce:df:f0:1f:15:f8:5c:0e:
76:c6:91:fe:e4:c3:06:fd:74:e8:3a:f2:34:fa:67:7c:8d:8d:
f6:ce:fb:c8:3b:9e:03:4c:15:a6:a1:68:98:88:06:b2:d1:88:
15:34:d0:fa:13:05:59:06:82:ca:f0:2a:63:a7:c7:30:e8:c7:
bc:75:52:8f:a5:c0:e2:ed:8e:87:c1:af:4d:19:7d:18:ae:29:
15:d4:92:ed:07:3e:84:18:69:e2:56:0c:22:f6:68:c5:ec:3d:
26:ad:37:80:35:e2:f2:3f:52:ae:ee:21:d1:44:6c:3a:0b:a5:
64:dc:6e:f0:c0:aa:a2:07:fa:9a:16:09:1d:e6:13:72:34:72:
23:93:68:c7:29:70:64:c5:10:a1:d9:b7:9c:7b:2f:18:ba:19:
df:09:1e:95:0c:5a:47:64:ff:00:7a:05:6b:8a:a5:d0:ab:0d:
9d:5d:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:10:29 2026 by rpki-client