Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: dkEfIZjUUs6MKx+quAQIWRPP1XRoncTveQ2bZHlKzss=
Subject key identifier: BA:F9:ED:80:78:5C:A0:59:5E:07:00:FD:0C:14:0C:5D:72:36:29:83
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01A01FB0DF67BEB7D59B443FF7274C082FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 096B
Signing time: Thu 20 Aug 2026 15:01:20 +0000
Manifest this update: Thu 20 Aug 2026 15:01:20 +0000
Manifest next update: Fri 21 Aug 2026 15:01:20 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: i0ImTjG7X/6tWtszSkWLYpxxOJ+W8Y0/IwSxsz+AoQ8=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:df:67:be:b7:d5:9b:44:3f:f7:27:4c:08:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Aug 20 15:01:20 2026 GMT
Not After : Aug 21 15:01:20 2026 GMT
Subject: CN=baf9ed80785ca0595e0700fd0c140c5d72362983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:dc:4c:7c:ca:bb:bf:da:3d:d4:3d:78:32:
40:29:6d:92:98:82:20:01:0f:5e:9c:9b:be:41:14:
d0:a6:cb:64:b9:54:df:50:c8:8c:46:cb:92:35:e9:
e6:a9:94:c0:63:f0:a0:87:b8:f7:1e:68:e0:ae:66:
e0:aa:3a:e8:c2:fb:18:30:9a:c7:e2:fa:e5:38:36:
0e:20:5a:45:8f:3c:e6:71:13:aa:61:24:e1:06:f2:
61:f8:a3:26:79:0d:a1:bf:94:29:75:06:32:cd:c5:
a4:ec:ff:bb:a6:17:f2:6c:5f:31:ec:1b:ba:3c:51:
6b:9f:72:44:75:44:65:b1:f6:26:6d:d4:01:b8:53:
2d:ce:aa:ba:96:98:1c:08:1f:1a:b8:03:e3:59:f6:
53:5a:de:b9:54:6f:d8:79:96:82:c9:dc:5f:47:c5:
0d:7e:c2:92:36:7e:23:0e:68:fa:d3:f2:06:aa:e2:
f2:3e:88:23:3b:80:40:9c:c8:36:f9:5a:b3:28:82:
d7:d1:07:c0:79:d4:52:76:3d:90:fc:d9:14:39:cc:
17:d6:20:b3:df:48:5f:9f:84:e5:b6:48:4b:03:55:
f5:04:a7:2d:f0:d2:03:4b:e1:d8:db:63:c7:a6:8c:
a8:4a:a1:52:9d:7e:ac:ce:24:8b:88:75:5a:59:34:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:ED:80:78:5C:A0:59:5E:07:00:FD:0C:14:0C:5D:72:36:29:83
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:85:b0:7c:7c:45:24:6f:8a:58:d1:cc:68:d1:80:6b:b5:b8:
05:38:ef:9f:a4:4b:ca:d3:54:1a:d5:d7:b1:43:e6:3e:6f:79:
ef:f1:e9:38:9a:b3:a0:d6:95:84:57:06:52:38:64:01:04:c1:
9b:8d:82:03:6a:d1:05:c7:7d:7b:c4:3c:d3:fb:fa:6e:71:51:
b3:47:88:24:75:12:41:fd:9c:6d:92:ed:e9:d3:8a:7f:28:71:
25:e4:25:a8:94:ce:a7:f3:39:63:eb:c8:bc:4a:6d:a8:e8:a3:
08:8c:32:d0:4d:8c:a9:d1:d7:66:9e:a6:8c:db:ec:fe:e9:21:
52:c2:5c:fe:9b:a2:ff:de:e5:87:bf:9e:47:65:87:4e:1c:24:
5f:30:40:cd:58:4a:8b:36:a5:60:d8:16:ac:9a:96:06:78:11:
55:b4:47:c4:d8:0c:30:46:d4:39:ff:b8:aa:61:6f:c1:2f:06:
b1:d2:be:b3:2d:2e:10:f4:e9:99:ad:9c:4f:85:6e:86:0d:de:
a8:33:96:f4:24:25:5a:99:b5:1b:97:3f:e5:40:04:26:f6:6f:
5b:a9:40:d4:22:7e:a5:a6:d6:c9:09:c3:c3:ec:9c:bc:ea:8e:
65:13:4e:47:af:39:ac:6e:27:60:5b:a9:10:05:75:3b:57:65:
a7:12:36:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAfsN9nvrfVm0Q/9ydMCC/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw
NTIzOWQwHhcNMjYwODIwMTUwMTIwWhcNMjYwODIxMTUwMTIwWjAzMTEwLwYDVQQD
EyhiYWY5ZWQ4MDc4NWNhMDU5NWUwNzAwZmQwYzE0MGM1ZDcyMzYyOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK7cTHzKu7/aPdQ9eDJAKW2SmIIg
AQ9enJu+QRTQpstkuVTfUMiMRsuSNenmqZTAY/Cgh7j3HmjgrmbgqjrowvsYMJrH
4vrlODYOIFpFjzzmcROqYSThBvJh+KMmeQ2hv5QpdQYyzcWk7P+7phfybF8x7Bu6
PFFrn3JEdURlsfYmbdQBuFMtzqq6lpgcCB8auAPjWfZTWt65VG/YeZaCydxfR8UN
fsKSNn4jDmj60/IGquLyPogjO4BAnMg2+VqzKILX0QfAedRSdj2Q/NkUOcwX1iCz
30hfn4TltkhLA1X1BKct8NIDS+HY22PHpoyoSqFSnX6sziSLiHVaWTQnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr57YB4XKBZXgcA/QwUDF1yNimDMB8GA1UdIwQY
MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It
ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl
LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoWwfHxF
JG+KWNHMaNGAa7W4BTjvn6RLytNUGtXXsUPmPm957/HpOJqzoNaVhFcGUjhkAQTB
m42CA2rRBcd9e8Q80/v6bnFRs0eIJHUSQf2cbZLt6dOKfyhxJeQlqJTOp/M5Y+vI
vEptqOijCIwy0E2MqdHXZp6mjNvs/ukhUsJc/pui/97lh7+eR2WHThwkXzBAzVhK
izalYNgWrJqWBngRVbRHxNgMMEbUOf+4qmFvwS8GsdK+sy0uEPTpma2cT4Vuhg3e
qDOW9CQlWpm1G5c/5UAEJvZvW6lA1CJ+pabWyQnDw+ycvOqOZRNOR685rG4nYFup
EAV1O1dlpxI2pQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:53 2026 by rpki-client