Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: Gbz1ItaSW1LcSDt5bCjMgfUMXiYadBNZqZNFun5veRI=
Subject key identifier: 9A:1B:0C:AF:B0:70:7B:1C:B8:09:27:8A:67:84:D9:C1:DA:D9:C9:8E
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019EFA275B093B2F0873A8A965D923E6C34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 08D3
Signing time: Wed 24 Jun 2026 15:02:22 +0000
Manifest this update: Wed 24 Jun 2026 15:02:22 +0000
Manifest next update: Thu 25 Jun 2026 15:02:22 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: 66rEORh0munZDq1SFzICf+3juY7rzNVFGti5TYBUsTo=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:27:5b:09:3b:2f:08:73:a8:a9:65:d9:23:e6:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jun 24 15:02:22 2026 GMT
Not After : Jun 25 15:02:22 2026 GMT
Subject: CN=9a1b0cafb0707b1cb809278a6784d9c1dad9c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:91:1b:15:45:d7:c9:e2:21:ca:96:72:21:
bd:3e:e8:2e:a6:14:b8:a6:46:08:75:0b:50:8a:d8:
b8:fe:63:ef:0c:c9:cb:b8:88:57:30:8d:3f:4d:49:
91:07:de:5f:33:07:8f:d0:76:d5:6f:d3:09:f8:5d:
eb:86:66:dd:7c:15:e6:ba:fc:c5:ec:69:50:09:79:
a9:df:fd:0b:30:ba:e6:88:38:97:73:c7:ca:2a:ce:
c4:6a:96:5c:15:5a:01:90:8c:aa:6e:05:70:4b:43:
fe:73:71:0f:88:6c:b3:63:2d:c0:b5:03:c9:aa:31:
83:00:5e:42:95:99:b9:0a:51:43:55:9a:ed:e5:50:
f9:56:f0:ef:d3:9c:ac:29:f7:6f:5f:7c:f6:59:0e:
07:9c:ec:3a:5e:90:aa:26:0f:a8:7f:b0:6e:56:82:
7b:f8:06:7a:b5:3b:bf:65:da:63:4d:73:81:1c:a9:
e2:84:0f:48:2b:9b:ba:19:c2:12:43:35:48:24:1c:
d2:58:42:2d:e1:0c:da:d4:ec:42:7c:b2:ee:5a:ee:
c4:67:86:70:30:8b:62:09:be:f8:38:35:79:64:47:
5d:56:10:57:3b:a4:1f:cd:3f:37:21:1d:97:c1:9c:
01:33:58:fa:16:4e:24:f7:23:7d:d3:65:dd:b0:f9:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:0C:AF:B0:70:7B:1C:B8:09:27:8A:67:84:D9:C1:DA:D9:C9:8E
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:0f:7a:ef:a0:da:60:0a:be:4d:af:f5:4c:2a:32:0c:52:
ec:bc:a0:89:a4:b0:ab:41:52:44:34:6a:85:08:56:a3:95:f2:
e9:45:45:47:2f:15:3b:b6:76:2d:3e:81:01:e3:bc:1b:bf:85:
1c:c0:a3:27:96:a4:8f:7d:89:a9:d9:6f:86:e4:69:75:d3:ab:
78:bc:05:e1:ab:64:a2:04:54:95:ca:78:ab:0b:4b:7a:37:04:
c2:dc:af:e1:e0:48:c9:30:03:94:e7:ce:8b:4d:53:d4:d3:5b:
95:80:bf:68:be:c8:09:b3:98:ce:8d:e8:64:f7:bb:27:ae:f9:
7a:ae:d6:f4:e6:64:0b:be:0c:29:d3:4c:72:f3:e9:ca:7e:04:
0e:99:26:60:47:a0:f2:04:32:3a:e6:40:e0:36:2c:ca:63:15:
c6:75:5a:a5:b2:19:76:43:12:2a:82:d9:e3:3e:0c:f0:3f:c3:
b2:6c:fa:89:8c:96:fc:a4:c8:b7:71:62:ea:33:89:7c:cc:c0:
27:17:da:c1:82:3c:ff:e6:8b:05:d4:e9:ab:6e:29:cc:17:7b:
1c:32:15:e4:2d:a5:f1:89:b1:4f:b3:38:16:d0:c8:e8:35:27:
b9:61:28:4c:b6:dc:f3:13:bf:b8:42:2f:dc:1c:71:fc:c9:c6:
5d:08:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:23:30 2026 by rpki-client