Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: jiaOp72VQotvMZBBKQKxFLn5+ZIlT8sWidqz9dWb8bQ=
Subject key identifier: 52:51:4C:24:B3:2D:38:C7:15:5C:2B:52:8A:E7:6F:8E:7B:12:DD:50
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 019F935B07EB781746DC61420DC213C238EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:44 +0000
Manifest this update: Fri 24 Jul 2026 09:00:44 +0000
Manifest next update: Sat 25 Jul 2026 09:00:44 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: 9nJn4Nq2ic0dXKFKfRU7owrmvnMz5qOMP+fOa5RRYtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:07:eb:78:17:46:dc:61:42:0d:c2:13:c2:38:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Jul 24 09:00:44 2026 GMT
Not After : Jul 25 09:00:44 2026 GMT
Subject: CN=52514c24b32d38c7155c2b528ae76f8e7b12dd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:4c:f2:4c:0e:5f:ea:e0:a2:80:78:c0:bd:
d0:74:db:33:dc:7f:11:dc:10:60:32:22:10:0f:32:
e8:1f:ea:a2:ba:63:2c:27:7e:08:a6:c4:31:72:27:
3c:e8:e1:ae:20:aa:41:9b:c3:83:fe:d0:dc:dc:be:
3e:38:28:9d:f2:37:9d:7e:61:fb:5e:56:dc:c6:d2:
7a:ad:e2:67:43:e0:8f:2d:47:34:75:7f:b2:2e:0b:
fa:0d:e2:63:c7:59:06:9c:bb:b6:50:1a:0a:2f:a1:
7e:a1:60:d1:51:1a:04:3c:76:a5:3b:0d:55:4f:80:
f3:0c:07:3c:d6:79:ae:e4:80:d0:80:5c:9c:7b:6b:
52:1b:5f:8a:30:a9:7f:ad:22:46:4e:ae:f1:53:ae:
0b:9e:65:c7:b9:63:35:56:1d:3e:39:74:76:c4:ac:
30:36:33:51:ea:fd:fd:89:f3:37:7a:f3:ec:6a:1f:
d0:9a:81:ec:d5:85:d7:bc:3c:5b:38:f7:4b:ec:ab:
da:9a:ca:bd:3e:60:8d:43:05:11:ea:d1:76:d8:81:
ef:5d:ed:eb:36:00:bd:d0:20:ef:cf:f1:12:a0:61:
2b:ad:a6:a7:66:16:13:4a:1c:c2:f5:a1:3b:e0:1f:
14:22:29:ba:4e:85:35:68:85:e5:c1:ec:15:a3:cb:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:4C:24:B3:2D:38:C7:15:5C:2B:52:8A:E7:6F:8E:7B:12:DD:50
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:e3:9a:3e:49:bc:83:4f:26:63:3d:34:45:20:06:8d:50:
4e:81:d2:2d:42:bb:ee:9e:0b:66:8c:88:20:c1:7a:a9:11:ef:
92:a3:55:a9:1d:54:3e:5c:1f:55:26:a4:57:6e:98:eb:ce:9e:
df:26:ff:e5:88:d5:02:2b:2d:86:6a:d0:0f:bf:f1:33:22:35:
ff:6a:2a:99:dd:ab:dd:03:ed:60:87:fe:27:98:cc:75:d9:67:
fd:32:dc:cf:9d:2f:ec:32:af:c0:b2:61:de:2a:44:56:e6:08:
94:ee:5b:a1:0b:15:25:b0:3d:f9:1b:d2:82:83:25:e1:04:be:
5c:20:e5:b3:7f:14:cb:11:d2:39:08:f4:77:64:e2:f7:e1:71:
45:44:c4:e6:0c:bb:74:93:16:6a:a7:75:5d:a2:ab:2f:66:6c:
9d:9a:5d:8c:2a:df:fa:69:47:e2:fe:f3:43:e4:f4:3e:cf:2b:
9c:5a:28:c1:22:d9:3b:c2:71:f0:82:09:61:31:0a:67:ec:15:
d8:af:5b:c5:4e:c7:32:bb:b8:67:2a:15:bb:7c:56:96:97:c6:
93:b8:31:6f:f6:c6:d3:65:20:fe:36:bd:e5:9b:20:49:75:22:
83:8f:17:38:01:e3:4a:8b:30:f1:fa:42:4f:02:d6:04:d5:89:
4d:6a:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:29 2026 by rpki-client