
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: kehjOyLB3S6K/arIlOKclrK+4vjvSR+K9CifSeZKPz0=
Subject key identifier: 86:F9:03:78:B9:06:E6:59:57:97:1E:43:CA:1D:0A:60:F4:30:66:31
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 01A0024B6E601860B69EC709608F912FF392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 08FC
Signing time: Fri 14 Aug 2026 22:01:32 +0000
Manifest this update: Fri 14 Aug 2026 22:01:32 +0000
Manifest next update: Sat 15 Aug 2026 22:01:32 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: SlXaFDeteE9sijAj4bxeKU+Uul7LZPSSghXMYqT2Bxo=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:6e:60:18:60:b6:9e:c7:09:60:8f:91:2f:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Aug 14 22:01:32 2026 GMT
Not After : Aug 15 22:01:32 2026 GMT
Subject: CN=86f90378b906e65957971e43ca1d0a60f4306631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:99:90:14:ba:48:42:8b:98:7b:40:9b:85:
a8:07:22:d3:88:48:07:31:87:26:4e:9e:b5:58:9f:
b4:25:a4:29:ab:2c:26:4f:33:51:44:aa:09:af:14:
1f:47:bd:d1:48:e1:9c:ab:24:1d:b7:ee:7d:41:b6:
58:8e:46:35:39:99:42:b2:c3:29:4b:4a:fe:08:12:
8a:a9:ff:95:7b:dd:81:01:cf:b6:b8:47:1e:49:4b:
86:e6:76:09:3f:4a:07:65:b3:d0:76:73:c5:2a:c5:
d5:88:d5:74:99:ec:36:d8:4e:5f:fa:93:0c:57:ac:
6b:02:9b:c3:cb:46:cb:41:a6:1a:10:70:59:e7:d9:
31:ca:10:a6:77:03:36:7b:35:bd:71:ca:31:43:33:
73:85:23:c5:a2:02:99:79:4f:bc:8f:40:20:94:f2:
60:d2:c5:5a:03:0b:b1:12:ab:4f:cc:ce:8d:b3:16:
7e:8e:1e:c6:65:6f:18:ab:ae:63:59:c2:3f:33:3b:
51:74:b2:36:ec:80:c6:cd:a7:b8:7c:e4:b9:79:89:
a3:25:4e:f6:be:ba:f4:e8:a8:db:75:dd:4e:9e:4a:
07:a6:52:8a:49:3f:69:83:5e:7f:52:4d:15:65:87:
3b:6c:4c:35:4e:71:45:40:3f:44:b9:cf:b5:6e:c4:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:03:78:B9:06:E6:59:57:97:1E:43:CA:1D:0A:60:F4:30:66:31
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:3b:6d:af:46:af:2e:66:1c:a6:f6:29:3d:98:89:03:20:
01:51:62:6e:3b:57:ed:94:65:df:83:9e:04:01:9b:67:86:e8:
0d:aa:69:c3:fc:bb:bc:55:19:2a:6d:ec:5e:f6:2d:a8:bc:47:
a1:26:d1:66:2c:f6:f4:96:db:be:cf:6c:8a:1a:95:7b:6a:7a:
49:0d:73:52:88:72:b2:70:65:b1:ab:fb:72:89:99:7a:4c:23:
ce:12:5e:83:3b:f0:92:45:08:0c:2e:16:45:b5:fa:37:9d:f2:
50:0f:78:40:2c:f3:2e:a9:b7:09:29:d1:18:4e:ab:68:d7:d4:
08:ab:a6:5d:a2:62:a7:94:54:c7:d9:94:e1:89:ec:f6:de:71:
73:44:ef:d3:54:f7:f3:8a:69:78:a6:8f:a0:ca:9a:20:4c:82:
04:e4:0b:5c:93:0b:c3:07:bf:a8:92:f3:ab:f1:27:d1:9a:8f:
36:86:b7:1e:28:d0:cd:59:1a:74:f8:09:f3:3e:84:ef:42:54:
0a:b3:85:de:c1:ef:2d:76:2d:1e:25:52:79:a2:41:96:88:23:
97:c5:d5:6d:84:8e:c4:c9:01:14:9c:91:7d:ad:77:0e:f5:8e:
d6:87:af:ba:9a:8b:5b:45:ee:6b:dd:8a:79:6d:84:ed:07:c4:
73:8a:51:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS25gGGC2nscJYI+RL/OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzM4MGU4Yjg1MDQ1NGRiMzgxZGRkZWI5YWMyY2M4YTJm
NjI1MzEwHhcNMjYwODE0MjIwMTMyWhcNMjYwODE1MjIwMTMyWjAzMTEwLwYDVQQD
Eyg4NmY5MDM3OGI5MDZlNjU5NTc5NzFlNDNjYTFkMGE2MGY0MzA2NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXeZkBS6SEKLmHtAm4WoByLTiEgH
MYcmTp61WJ+0JaQpqywmTzNRRKoJrxQfR73RSOGcqyQdt+59QbZYjkY1OZlCssMp
S0r+CBKKqf+Ve92BAc+2uEceSUuG5nYJP0oHZbPQdnPFKsXViNV0mew22E5f+pMM
V6xrApvDy0bLQaYaEHBZ59kxyhCmdwM2ezW9ccoxQzNzhSPFogKZeU+8j0AglPJg
0sVaAwuxEqtPzM6NsxZ+jh7GZW8Yq65jWcI/MztRdLI27IDGzae4fOS5eYmjJU72
vrr06Kjbdd1OnkoHplKKST9pg15/Uk0VZYc7bEw1TnFFQD9Euc+1bsSUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb5A3i5BuZZV5ceQ8odCmD0MGYxMB8GA1UdIwQY
MBaAFJEzgOi4UEVNs4Hd3rmsLMii9iUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODIt
OTRlNzAwYmQ1NWY1LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODItOTRlNzAwYmQ1NWY1
LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWw7ba9G
ry5mHKb2KT2YiQMgAVFibjtX7ZRl34OeBAGbZ4boDappw/y7vFUZKm3sXvYtqLxH
oSbRZiz29Jbbvs9sihqVe2p6SQ1zUohysnBlsav7comZekwjzhJegzvwkkUIDC4W
RbX6N53yUA94QCzzLqm3CSnRGE6raNfUCKumXaJip5RUx9mU4Yns9t5xc0Tv01T3
84ppeKaPoMqaIEyCBOQLXJMLwwe/qJLzq/En0ZqPNoa3HijQzVkadPgJ8z6E70JU
CrOF3sHvLXYtHiVSeaJBlogjl8XVbYSOxMkBFJyRfa13DvWO1oevupqLW0Xua92K
eW2E7QfEc4pRhA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:34 2026 by rpki-client