Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: kauqABeeOfo3TG4amz0ARtY5IZkd+0xwaqbgFod1in0=
Subject key identifier: F3:C4:98:A1:E4:18:8E:8B:A8:13:39:C9:E7:11:36:FF:54:B0:72:15
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 01A0E3630D904D3DAECE8AA424E6F6511574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:54 +0000
Manifest this update: Sun 27 Sep 2026 15:01:54 +0000
Manifest next update: Mon 28 Sep 2026 15:01:54 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: XFXSA8NyeMCuVRblRe51AP+xIVEb/bmUKPhIhhagagM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:0d:90:4d:3d:ae:ce:8a:a4:24:e6:f6:51:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Sep 27 15:01:54 2026 GMT
Not After : Sep 28 15:01:54 2026 GMT
Subject: CN=f3c498a1e4188e8ba81339c9e71136ff54b07215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:9b:92:7f:13:49:18:2f:b5:4e:bf:1c:9a:
65:8b:e6:1f:95:ec:60:4f:a6:26:84:fd:f7:97:56:
e7:f4:28:02:42:1e:7e:e7:c8:b9:a3:fa:c0:4a:18:
f2:8b:d7:aa:96:15:28:27:a0:ab:dd:b6:00:d7:00:
a3:26:03:55:af:81:3e:9d:ac:b1:51:c2:5a:f8:5b:
63:0b:bf:54:8e:56:8e:f9:83:85:2d:0e:7c:a2:6f:
41:92:61:60:a0:2f:61:5b:db:0e:90:9a:c8:2f:38:
3f:7a:f4:7e:9b:11:92:51:1a:d0:46:22:ff:7d:8c:
cb:9f:e9:e2:00:1a:dd:c9:7a:48:b5:fb:70:6a:21:
49:0d:86:f9:ff:f6:59:e2:53:9e:ed:61:6d:66:a2:
a0:09:e8:be:21:c3:53:9d:1a:9d:6a:62:ef:ac:e9:
99:e6:21:d2:95:42:c5:a4:a5:7d:52:46:2b:bc:77:
bb:97:61:c2:1e:17:c5:c6:a2:af:ba:fb:97:aa:39:
84:7b:ab:06:6b:5a:0a:29:dd:e6:ee:04:a7:81:f2:
b7:dd:2c:22:31:00:62:22:3b:06:64:86:36:ba:c7:
bf:14:2c:51:de:59:1e:ce:ea:9c:90:53:61:32:f3:
09:d9:ca:ab:57:ee:d4:a1:0b:99:b8:6e:34:6a:1d:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:98:A1:E4:18:8E:8B:A8:13:39:C9:E7:11:36:FF:54:B0:72:15
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ec:98:9a:d6:1b:c8:37:d6:11:d0:94:6c:98:5a:35:97:90:
0b:53:64:54:31:e2:15:e7:d8:00:2b:1a:ff:3d:42:75:4b:13:
3a:a7:5f:ba:8c:be:58:27:ff:ae:09:f3:b4:48:a3:b5:0e:ca:
c2:b5:f1:51:5b:d1:f5:f4:0f:2a:46:a3:a3:c9:a6:53:49:2e:
a5:6c:7b:a9:d4:46:55:81:3d:b3:9e:8a:c0:64:58:1c:95:d6:
33:fd:e8:10:08:25:ee:12:77:71:df:5d:63:0c:3e:cf:a8:30:
35:04:14:9a:46:70:76:b3:b9:b1:9c:83:21:41:9f:7d:af:3d:
03:d2:0d:24:72:2a:79:44:23:c1:a7:78:1b:93:b6:1f:3c:5e:
b3:48:d4:c4:8f:59:9a:0f:19:a7:21:79:be:99:15:50:81:2b:
7f:0a:2d:0f:e1:3a:4a:11:de:63:28:e7:4e:18:43:62:d1:7c:
7f:b4:1f:de:a4:14:6e:87:56:bc:5a:4d:a7:94:c8:ca:76:e0:
5a:12:2f:8c:f9:5d:39:13:b1:fe:62:12:e4:af:fe:1f:fb:99:
0e:e4:db:d3:57:f1:95:47:c6:b5:28:6b:65:4f:d9:34:cf:1f:
fb:57:02:20:c8:e4:79:c6:6e:61:02:bb:ef:90:98:2d:80:70:
9a:fb:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:45:45 2026 by rpki-client