Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: pkhSK7sfHFl9hQkb6iKOvzmjnN/RFgcr3QlzST23v8o=
Subject key identifier: 9C:FE:38:98:48:FC:D6:5B:E5:50:6A:62:7B:4A:57:C6:28:59:68:83
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 01A18C41A8C18A920DE2D1BCB54F45CE2DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 09C8
Signing time: Fri 30 Oct 2026 10:01:15 +0000
Manifest this update: Fri 30 Oct 2026 10:01:15 +0000
Manifest next update: Sat 31 Oct 2026 10:01:15 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: z+8qYpoZKmUe/AbiD+wxOOzVkFm9A8cX3Vtk+LoGSEU=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:a8:c1:8a:92:0d:e2:d1:bc:b5:4f:45:ce:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Oct 30 10:01:15 2026 GMT
Not After : Oct 31 10:01:15 2026 GMT
Subject: CN=9cfe389848fcd65be5506a627b4a57c628596883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:c0:29:6e:56:3b:7c:fe:2d:bc:30:7d:01:
e7:66:e5:f1:84:e0:2c:86:4d:e9:9a:4a:05:1f:45:
75:86:f7:25:d0:33:5a:4f:7f:c3:c1:51:e6:68:c7:
01:c2:a2:55:ee:f7:19:ee:5b:cb:03:c1:dc:ec:21:
26:4b:4c:69:76:d6:6f:9b:9f:69:c1:8e:eb:09:f5:
6b:cc:7b:2b:eb:c9:2e:6e:91:22:d8:e9:5f:ed:b0:
6a:fa:a3:12:23:46:12:38:d6:af:b0:3c:f0:a3:90:
22:4a:6f:9a:18:08:93:9d:c8:b7:eb:4b:0f:32:55:
27:18:a6:9e:fb:d5:b2:e2:3a:89:69:c1:67:6f:a4:
ce:b9:ea:81:dc:8b:45:99:da:d4:b4:c7:b8:f5:81:
7a:76:3f:ad:31:c3:72:ef:3c:50:f0:4f:f8:22:c8:
1f:d2:19:0d:d0:ce:c2:27:e6:2c:74:fa:57:20:88:
c8:0e:0b:e6:93:78:ef:d0:38:f8:9a:fc:55:f4:87:
fa:18:5e:49:4f:b9:30:99:35:b2:6b:8e:74:46:28:
92:90:41:15:ae:32:24:ad:82:d5:99:03:37:a3:f0:
c3:bc:11:d1:dc:ed:bf:86:f9:a3:33:31:f4:d8:99:
b0:2b:c2:ac:5b:9b:c6:a8:e7:26:f5:16:2c:43:4e:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:38:98:48:FC:D6:5B:E5:50:6A:62:7B:4A:57:C6:28:59:68:83
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b5:68:6e:82:68:5f:9b:ca:ab:c8:bd:c7:a9:23:d4:ce:8f:
82:06:08:02:26:e7:44:7e:16:3c:8d:2a:79:12:1b:8d:3b:fe:
99:aa:76:7d:16:db:fa:54:ac:73:30:bc:8a:76:e6:4f:98:82:
f5:d9:97:de:b5:a3:23:c6:db:9a:09:2e:40:6d:f2:d8:af:fc:
84:4b:67:7e:c2:fe:03:99:c6:26:59:05:8b:d4:1f:f2:81:65:
08:df:c1:bf:f4:f6:5a:4a:3a:20:2b:f0:5c:58:4e:dd:e1:f6:
5d:23:8a:80:59:da:87:0d:1a:6c:b2:5e:4d:cb:f8:e1:2d:7e:
65:f0:3c:ea:bc:23:e3:a0:7d:44:04:79:72:e8:b5:52:d1:d2:
a2:12:7f:45:7b:c7:08:15:39:ce:98:ea:81:fd:61:f3:eb:ee:
52:3d:a2:33:a8:b5:2d:ec:34:06:03:06:e4:97:3b:ef:4a:14:
32:5a:29:c6:4c:9b:5a:96:10:2f:15:00:5d:a7:cc:fd:00:ce:
1d:e5:8c:10:96:0d:62:07:33:97:ee:e6:b3:e2:fc:70:c6:b7:
62:dc:ca:f3:e7:a6:2b:fd:55:90:84:c8:27:cd:8f:58:28:48:
54:2f:20:0a:43:f1:9d:12:93:61:7b:fc:63:ac:b1:bf:98:53:
27:46:c7:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGMQajBipIN4tG8tU9Fzi3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzM4MGU4Yjg1MDQ1NGRiMzgxZGRkZWI5YWMyY2M4YTJm
NjI1MzEwHhcNMjYxMDMwMTAwMTE1WhcNMjYxMDMxMTAwMTE1WjAzMTEwLwYDVQQD
Eyg5Y2ZlMzg5ODQ4ZmNkNjViZTU1MDZhNjI3YjRhNTdjNjI4NTk2ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkLAKW5WO3z+LbwwfQHnZuXxhOAs
hk3pmkoFH0V1hvcl0DNaT3/DwVHmaMcBwqJV7vcZ7lvLA8Hc7CEmS0xpdtZvm59p
wY7rCfVrzHsr68kubpEi2Olf7bBq+qMSI0YSONavsDzwo5AiSm+aGAiTnci360sP
MlUnGKae+9Wy4jqJacFnb6TOueqB3ItFmdrUtMe49YF6dj+tMcNy7zxQ8E/4Isgf
0hkN0M7CJ+YsdPpXIIjIDgvmk3jv0Dj4mvxV9If6GF5JT7kwmTWya450RiiSkEEV
rjIkrYLVmQM3o/DDvBHR3O2/hvmjMzH02JmwK8KsW5vGqOcm9RYsQ04W+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz+OJhI/NZb5VBqYntKV8YoWWiDMB8GA1UdIwQY
MBaAFJEzgOi4UEVNs4Hd3rmsLMii9iUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODIt
OTRlNzAwYmQ1NWY1LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODItOTRlNzAwYmQ1NWY1
LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorVoboJo
X5vKq8i9x6kj1M6PggYIAibnRH4WPI0qeRIbjTv+map2fRbb+lSsczC8inbmT5iC
9dmX3rWjI8bbmgkuQG3y2K/8hEtnfsL+A5nGJlkFi9Qf8oFlCN/Bv/T2Wko6ICvw
XFhO3eH2XSOKgFnahw0abLJeTcv44S1+ZfA86rwj46B9RAR5cui1UtHSohJ/RXvH
CBU5zpjqgf1h8+vuUj2iM6i1Lew0BgMG5Jc770oUMlopxkybWpYQLxUAXafM/QDO
HeWMEJYNYgczl+7ms+L8cMa3YtzK8+emK/1VkITIJ82PWChIVC8gCkPxnRKTYXv8
Y6yxv5hTJ0bHfg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:48 2026 by rpki-client