Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: CwKh5em7PzKTIhwuJ7VonhYCvkj0e65EpFWNP/2SPcU=
Subject key identifier: 36:D5:1A:84:AC:D0:19:92:C9:13:F0:DC:1B:C4:4A:DE:F1:73:AD:EA
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01A0E888BFB8BE51B6D914A0D664168FF182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 09D3
Signing time: Mon 28 Sep 2026 15:01:11 +0000
Manifest this update: Mon 28 Sep 2026 15:01:11 +0000
Manifest next update: Tue 29 Sep 2026 15:01:11 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: HDnJFLoiE0v405AfDOYf0XsCk34k9Pnz5Q3lDWy7eiI=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:bf:b8:be:51:b6:d9:14:a0:d6:64:16:8f:f1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Sep 28 15:01:11 2026 GMT
Not After : Sep 29 15:01:11 2026 GMT
Subject: CN=36d51a84acd01992c913f0dc1bc44adef173adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:1f:6b:9f:ea:82:c7:f3:45:bf:29:aa:ce:
f8:eb:1e:73:58:c1:bd:cd:64:fc:1d:55:74:63:21:
89:d7:00:22:d1:a5:a8:e1:dd:79:2a:c7:43:4a:2e:
85:ee:02:35:e1:f6:6d:33:c0:32:1e:70:ed:c4:8a:
65:5c:d3:59:39:f2:03:6e:ad:21:34:1e:e4:ee:11:
d5:ba:6f:29:c5:d7:8f:f8:c0:25:c2:68:08:26:e6:
24:b2:08:4a:45:02:67:4a:3a:b4:b5:fe:b7:2a:55:
df:b6:47:36:9f:1a:62:c2:61:90:41:cb:e3:bc:11:
7a:06:de:c5:63:af:a8:4e:80:91:6e:40:80:0a:1e:
3c:26:03:2a:e2:d7:ee:b1:40:8f:b8:8c:aa:df:68:
5f:98:1a:14:fa:4d:70:29:4a:7d:e2:fb:41:1d:bf:
d0:f9:d2:e5:c0:60:d1:07:a7:2e:76:77:60:9e:7f:
32:34:8c:2d:7f:26:2b:10:b6:68:cd:d3:04:6b:28:
1f:f3:5d:a0:e1:c7:38:bb:26:d6:27:d1:64:b9:db:
c5:45:72:13:d1:88:ec:d0:26:2f:89:95:7b:90:a1:
46:7e:19:54:5f:a1:27:92:63:19:2c:d4:b1:59:af:
a9:7f:37:b5:8d:26:f5:fe:3d:95:c9:b9:1e:95:25:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:1A:84:AC:D0:19:92:C9:13:F0:DC:1B:C4:4A:DE:F1:73:AD:EA
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d4:ce:6f:40:64:6d:7d:07:89:b9:8d:7d:c6:dd:e2:52:46:
10:e8:cd:c7:d3:4b:d8:70:8e:27:42:ae:42:a2:b6:4e:0d:a6:
04:03:ef:24:98:c2:b5:d2:8e:77:4f:10:62:24:c1:96:02:96:
7a:7c:2c:5b:8c:9b:c4:07:66:75:e7:02:ff:56:cb:b0:ef:f5:
cf:61:a5:26:18:28:14:5f:bc:43:a7:35:d6:41:37:1e:3f:b1:
11:b0:74:ce:11:7b:28:7f:82:df:17:ac:59:69:0b:30:30:f4:
52:85:56:22:ef:55:90:ae:da:c1:4b:d0:4e:ae:be:0e:26:84:
9f:44:76:e3:63:fe:df:cf:84:80:97:df:1c:17:0b:67:90:40:
71:93:13:7f:90:1b:7a:a7:42:4f:08:fb:9f:5b:cb:e9:08:42:
c7:4f:28:b0:6e:3f:94:90:46:0b:a6:37:d3:41:18:5e:cf:b2:
aa:25:fa:31:45:d4:69:13:92:ab:bb:d9:85:df:0b:5c:12:26:
30:c3:2b:2b:18:b8:8c:6d:ff:8d:12:ad:73:99:43:33:4f:7d:
be:e9:92:ee:2e:46:f8:89:07:43:02:42:c1:42:56:2e:21:b6:
59:c1:05:0a:aa:3f:cf:08:04:d5:7a:92:ed:53:e8:22:c2:49:
5c:a7:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:54:29 2026 by rpki-client