Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: chWWJe9RpPUg4xa4wVKP4+bbazzW7hf7r2MNNUba/u0=
Subject key identifier: 4A:26:9C:1F:79:6F:BC:46:4F:84:6C:6A:CB:82:29:90:28:60:E6:56
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01A11116F30AF8113DE1C62661469D4BF446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 09E8
Signing time: Tue 06 Oct 2026 12:01:18 +0000
Manifest this update: Tue 06 Oct 2026 12:01:18 +0000
Manifest next update: Wed 07 Oct 2026 12:01:18 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: /0tm49bAvPz+f9RUoCS58uoeILs0Iiizo/TbDzc0ivc=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:f3:0a:f8:11:3d:e1:c6:26:61:46:9d:4b:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Oct 6 12:01:18 2026 GMT
Not After : Oct 7 12:01:18 2026 GMT
Subject: CN=4a269c1f796fbc464f846c6acb8229902860e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:96:7d:43:3b:99:3f:15:f6:19:dd:b1:8c:
39:a8:cc:f5:6c:5d:02:86:8c:f0:16:42:eb:8d:e5:
ef:fc:ee:e0:33:58:cc:ae:63:d0:d8:ef:c4:33:4a:
83:e3:cb:dd:58:97:d9:f3:ac:ce:ff:24:cb:d7:22:
f0:db:98:f8:64:ee:8a:76:fe:3f:47:a4:43:73:42:
df:e1:31:64:e3:6b:02:fd:f8:33:30:c3:d3:fd:ad:
f6:86:eb:16:3d:45:cd:ab:17:47:ab:6d:3f:45:7c:
6f:ac:d9:90:71:d8:95:82:c8:eb:e8:82:a6:49:ba:
c7:51:e0:85:f9:38:8c:d6:c5:f8:d0:e4:35:0e:e2:
32:c2:43:7b:6a:8a:5a:f0:66:8c:5a:08:13:4c:77:
74:93:60:15:cf:45:7c:7b:a8:89:dd:06:22:f1:ab:
4f:c0:92:d7:cc:61:d2:16:e3:1a:a2:e3:e1:14:27:
5e:ce:12:b1:ff:79:ee:4e:9e:0c:c0:1d:80:ee:fa:
48:c4:99:41:93:84:04:6e:73:d1:bc:e4:2f:3d:04:
75:3d:b4:6f:f0:c5:b7:d1:15:1e:55:65:76:2b:c9:
f8:3a:57:8d:ea:16:16:5e:81:f3:6f:b3:b1:91:3b:
2e:25:a7:c0:20:18:5b:39:75:4b:be:cd:af:dd:82:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:9C:1F:79:6F:BC:46:4F:84:6C:6A:CB:82:29:90:28:60:E6:56
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:cf:36:35:b4:d1:a2:40:40:18:ee:62:20:d7:07:9a:6f:
9a:a7:d5:4e:11:15:a3:26:1a:39:03:a4:45:a8:73:fa:74:1f:
b7:45:d2:dc:96:11:d2:67:d6:85:c4:f6:98:6a:06:1a:fd:aa:
24:82:be:36:ae:12:c3:f5:c3:fb:5f:08:22:b1:34:5a:f5:15:
f8:22:30:0b:97:9f:a7:0f:76:5e:b4:b2:05:7c:8d:dd:f4:2d:
9b:5b:6e:56:ea:a5:f7:35:b8:a1:5d:5f:26:0d:f2:08:a6:9a:
17:63:35:d0:b6:0c:68:c8:bc:bd:7a:59:e6:b7:9c:8f:5c:5d:
fd:b4:6d:6c:cc:16:d5:c2:c5:d5:f1:f0:da:14:ca:57:a9:68:
b0:02:63:0d:e1:83:0e:1f:5f:ce:0a:89:b2:3f:b3:74:df:6a:
b2:51:ea:86:e2:3d:52:ee:19:ef:c9:6b:3d:8f:5c:30:95:4c:
9c:3e:72:0b:f1:76:1c:54:a1:45:a1:bd:81:2b:a8:20:c0:1a:
a9:07:f2:ae:32:f8:6a:01:8e:ac:74:c3:e8:35:d8:88:85:b6:
2f:67:cb:c7:c2:6b:0b:e5:8c:bd:8b:97:9a:32:0f:cd:28:50:
e7:6d:8d:f5:bc:aa:8a:ff:9a:3b:e4:3d:89:09:fc:9e:ea:43:
ed:41:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:17:18 2026 by rpki-client