Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: kcBsqtUN3eYuqJWwLcAl+MkUeu34WDKlwiogqe+DyhE=
Subject key identifier: 57:3D:09:B1:2F:E7:75:07:DA:EB:C6:7C:D8:E7:DC:B7:9F:0A:EA:7D
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019F92B64CA01837E5AFDF866DB22BEA2C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0922
Signing time: Fri 24 Jul 2026 06:00:48 +0000
Manifest this update: Fri 24 Jul 2026 06:00:48 +0000
Manifest next update: Sat 25 Jul 2026 06:00:48 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: Fbrju3tIvRsPMBZgEaq1UINMIYLUUhupjj+U6Oselvc=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:4c:a0:18:37:e5:af:df:86:6d:b2:2b:ea:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jul 24 06:00:48 2026 GMT
Not After : Jul 25 06:00:48 2026 GMT
Subject: CN=573d09b12fe77507daebc67cd8e7dcb79f0aea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:1b:2e:d5:70:8a:f4:61:d1:b5:75:6b:26:
93:d6:0d:f1:33:6c:21:9e:56:32:d2:5c:49:6a:80:
a5:2a:f7:94:ee:af:81:e0:ba:8d:0e:72:cf:2a:68:
af:d2:dd:ca:92:f8:27:0e:25:3e:d2:64:88:ee:df:
70:3f:37:ff:01:91:44:64:1d:91:71:9e:97:4d:b4:
d9:b0:92:da:de:bc:a2:48:ff:54:77:9f:50:19:3f:
07:db:bb:54:ec:aa:ea:15:31:09:a4:ee:e8:a2:f3:
11:59:51:7e:22:28:86:69:cb:d4:02:28:d0:b8:78:
c4:3a:49:23:4c:3c:6d:66:3e:3f:c9:7f:ad:a7:f0:
a4:dc:90:53:7b:ce:8b:f8:58:3b:13:53:a0:4a:79:
d2:13:95:d5:e2:ca:fd:98:a6:71:59:5e:00:c5:68:
c9:d3:cc:19:95:ed:3c:af:92:55:db:38:50:02:e7:
3b:00:81:80:d9:98:da:3d:56:97:44:bb:35:6e:fe:
bf:e1:f2:3a:30:96:e2:ce:3b:67:bf:e5:80:26:11:
26:1e:66:55:f1:b7:ef:53:27:5d:99:d0:3b:05:d1:
19:a0:4b:39:30:4b:db:ee:da:11:10:0f:f4:21:33:
91:44:04:29:13:ed:57:d8:3c:fa:c3:a4:48:1d:e1:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:09:B1:2F:E7:75:07:DA:EB:C6:7C:D8:E7:DC:B7:9F:0A:EA:7D
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5e:a8:28:ea:f4:a8:f1:d4:b8:a2:c9:0a:e2:fd:2f:f7:56:
5f:83:85:a0:bd:5e:96:bd:3d:d6:c3:fb:33:8f:f3:9c:69:97:
54:96:d7:54:fb:4b:4e:25:d8:b1:00:be:c8:90:88:10:04:c5:
5f:54:ff:70:a4:13:d4:55:11:62:77:e6:7c:8e:1c:81:35:99:
f8:38:8f:ca:df:c5:04:01:73:f4:59:01:f4:6e:db:9c:94:a1:
d4:fe:04:cd:58:1b:81:3f:9c:5a:95:a7:81:43:09:f2:43:8d:
c3:44:f0:da:af:a6:02:ed:16:aa:4c:42:09:93:e3:54:d0:a4:
fc:0c:0f:f7:30:5a:a7:92:5c:46:95:d0:76:0b:65:5e:42:46:
eb:47:26:59:1e:db:e1:c3:e7:95:f7:09:cf:66:d2:32:38:19:
27:f5:ba:0b:05:07:94:9d:cc:1a:c2:5e:e8:94:46:17:8e:bc:
c2:04:76:d3:55:61:e4:9c:cf:d5:a6:5d:87:31:1a:38:2c:73:
73:8a:75:44:4a:ac:02:15:db:a1:bc:4d:a1:15:0c:d2:ef:5f:
0d:c3:0c:be:2c:9a:53:e0:b8:dd:60:05:54:31:6e:ca:ec:51:
50:78:35:68:61:26:f3:61:f2:d9:ef:6e:36:4c:0a:7f:0d:76:
e3:ca:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:47 2026 by rpki-client