Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: IBc5ffxIbBc2/IfO4G2/Xg8cB+Zf/RUalYF4csJe3Ik=
Subject key identifier: A4:E3:A0:48:79:67:96:60:77:35:E1:A5:28:B0:18:8E:90:76:0B:7A
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019F91A41C05583BA6C66655E5C50DF1E970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 01:01:19 +0000
Manifest this update: Fri 24 Jul 2026 01:01:19 +0000
Manifest next update: Sat 25 Jul 2026 01:01:19 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: C+5PW4X3LAAMDAc3qAW6K7/ZeO/xOr2IOVfLbItALGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1c:05:58:3b:a6:c6:66:55:e5:c5:0d:f1:e9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jul 24 01:01:19 2026 GMT
Not After : Jul 25 01:01:19 2026 GMT
Subject: CN=a4e3a048796796607735e1a528b0188e90760b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:48:5e:85:54:6f:ea:8c:b3:7c:fb:4e:3e:
1d:c9:aa:7a:e4:ab:0c:d3:34:e3:4e:f6:40:05:92:
32:17:bf:bf:3a:4e:2c:40:71:81:05:05:bc:08:a5:
0a:fe:57:d5:a6:c8:9c:b4:4c:76:44:09:2d:d8:d5:
b3:24:cc:c2:82:8c:4f:28:c6:fa:a1:7f:78:ea:2e:
34:35:e4:e5:43:be:c3:6e:d0:31:fa:cd:22:a5:66:
51:51:ec:98:6d:79:44:33:c9:94:7b:75:6f:8a:e3:
b4:5b:47:94:df:7e:fd:92:07:f3:f3:75:10:b5:d0:
4e:57:d4:16:b2:c4:52:10:76:d6:07:db:bd:34:83:
b6:74:11:ac:f5:93:ae:ff:b8:01:82:b5:20:9a:e6:
53:80:23:b4:ab:94:9e:35:49:37:50:91:4e:d1:48:
3f:28:4a:39:f0:3b:12:91:a5:cd:e7:5b:98:43:7e:
3c:70:61:24:30:d5:1c:c9:53:4d:ce:6c:95:16:37:
2a:db:df:7a:0e:a9:0c:44:b8:b4:14:7c:04:33:92:
e9:59:a1:e4:e6:25:c3:94:03:ac:e0:06:87:3e:2d:
20:12:aa:02:fb:f7:ea:b3:04:73:52:06:be:ab:02:
c2:50:70:47:9a:d2:bb:15:a3:1f:c4:a1:61:90:5f:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:A0:48:79:67:96:60:77:35:E1:A5:28:B0:18:8E:90:76:0B:7A
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:45:d2:c8:5a:59:4d:bc:05:cc:26:e9:bc:b2:84:ff:58:e1:
11:04:9b:a2:a5:aa:aa:c7:8c:bb:67:39:17:de:ab:f7:0a:c4:
9a:a6:bf:5c:4d:70:84:c9:f7:3e:64:a1:bd:44:62:b8:dc:7d:
da:24:47:0e:8c:7b:dc:f9:51:2c:12:13:be:09:32:0b:e5:0a:
9b:52:c8:6e:ce:13:ff:c1:90:9e:97:bf:d2:2c:55:69:28:84:
c9:f2:6d:ce:f7:38:55:4d:2e:8b:56:7d:40:be:22:fd:75:9a:
d4:1a:41:f0:35:67:9f:dc:65:19:f0:0c:8e:07:e3:20:e6:b8:
4f:9e:c8:f6:86:9c:6c:72:f3:99:68:98:91:64:04:8b:44:0d:
dc:65:06:72:90:ae:c8:ed:84:29:ac:21:73:af:70:81:1b:10:
25:e0:eb:19:ef:39:e0:d8:6b:de:25:9b:e0:67:ed:0e:c2:3c:
92:99:d0:3e:45:a7:16:70:7b:6d:a3:f6:13:f9:fa:3a:a1:34:
46:b1:97:cb:cd:b7:c1:03:7d:e5:5c:39:72:4b:e6:ea:73:df:
e7:1b:ac:32:cc:65:3d:c0:87:71:d8:d1:c0:88:33:e7:f6:14:
ce:fc:6a:5c:4e:a4:a8:ec:31:fe:0e:64:2b:27:89:fb:75:28:
d0:14:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:37 2026 by rpki-client