
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: z5W8wmWU709s1Z2B00BuQn/BoZo2QLe5a0nx68axj/4=
Subject key identifier: B9:4B:E9:75:2E:20:4A:6F:CE:48:8A:FE:49:BD:11:D9:8E:C9:3F:25
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 01A04017C3CD07BFB943DC0358C1055720E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 137E
Signing time: Wed 26 Aug 2026 22:01:34 +0000
Manifest this update: Wed 26 Aug 2026 22:01:34 +0000
Manifest next update: Thu 27 Aug 2026 22:01:34 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: ym69leg7FrGS3HByXOxaWxGVbtUZ0qMQUEOp1IKrPRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:c3:cd:07:bf:b9:43:dc:03:58:c1:05:57:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Aug 26 22:01:34 2026 GMT
Not After : Aug 27 22:01:34 2026 GMT
Subject: CN=b94be9752e204a6fce488afe49bd11d98ec93f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:a1:ac:4e:cc:5a:6d:97:5c:f5:94:bc:2a:
13:ac:53:28:3c:f7:fd:0f:ac:79:8c:30:06:71:aa:
bc:a9:95:4e:63:5f:5b:7b:cb:67:0f:55:b2:5a:44:
ea:48:0b:e9:e7:13:2b:1d:c2:e1:78:ae:95:5e:40:
7f:7b:32:36:d9:24:bb:df:6a:26:13:ea:cc:d7:4c:
33:37:7a:ad:bc:9b:cc:9e:b3:06:f2:13:3a:87:f2:
74:e5:5a:95:b6:01:fb:45:ac:87:f7:ef:b4:e0:f7:
5e:a3:2f:a3:b7:b1:a1:e6:90:85:67:bb:f0:fa:6d:
59:bb:44:8b:5f:d3:09:d0:1d:cd:da:78:8e:0f:3c:
64:d5:eb:5e:1b:04:25:5e:e6:8f:9a:40:a6:7b:e5:
8c:3a:93:5c:b2:c6:3a:df:ec:68:28:0f:a2:35:30:
47:6b:e2:62:b1:67:89:de:a4:21:fc:58:80:6b:73:
6a:fe:ef:0b:97:c9:dd:06:c7:4c:0b:ac:9e:56:bf:
05:c5:9c:5f:79:82:72:87:67:81:60:78:71:da:a1:
ff:59:62:7d:47:f4:31:d8:d3:9c:85:02:4f:ef:38:
b1:4e:6b:da:f5:b3:65:18:df:fe:dc:f4:d4:88:35:
09:2f:0a:02:51:3f:f4:d0:4b:f5:0a:a9:c9:75:2a:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:E9:75:2E:20:4A:6F:CE:48:8A:FE:49:BD:11:D9:8E:C9:3F:25
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bd:82:d0:36:fc:f7:fd:15:9b:ae:4c:0f:7e:a6:f9:44:6f:
56:f8:bc:5d:1d:46:aa:f8:70:6b:f2:fa:98:2d:63:86:e1:a6:
65:29:37:c9:8f:e7:e9:6c:20:f0:bc:d2:17:9a:45:da:e9:10:
19:c5:27:fc:f3:64:11:02:f6:ab:7f:5f:5e:e4:55:ac:70:e5:
b6:0a:5c:f1:2e:9a:c5:8a:fd:6b:78:51:28:9c:14:bb:dc:7b:
f3:12:d7:01:bf:f0:be:36:f3:68:24:41:88:d4:b9:5b:30:5e:
47:51:70:95:8b:b4:ec:ce:53:aa:f8:68:b2:e4:74:cc:5c:d8:
aa:f7:4d:b6:78:98:cc:e8:2b:b1:2e:db:fc:cb:33:93:13:53:
37:9c:4d:58:cf:1d:3f:31:7f:9a:ba:89:ab:44:b7:ad:fd:62:
61:b6:9f:74:d0:c8:95:a8:80:35:97:f8:13:40:f5:5f:86:bf:
d4:3f:54:84:9a:d8:bc:a9:89:b2:65:38:06:7b:fd:46:38:a6:
ee:4c:9f:07:4c:cc:78:f9:e0:0c:49:ec:e9:b6:71:39:05:ed:
e0:d6:31:d8:d1:9e:74:d2:f0:51:9f:74:bb:61:d8:e7:6e:78:
f7:6c:d1:ad:ef:d5:e6:72:6a:82:ea:13:29:76:59:7b:b5:2f:
67:3e:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:30:50 2026 by rpki-client