Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: nSgDCgUNOYzQWkNjRamQcOaiItLH2nxSyY6zF8NCBCU=
Subject key identifier: 95:C6:C1:4F:7F:D7:99:5A:EB:0C:B0:3F:36:F8:40:8A:D7:04:A1:80
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019E1FEC8EE5C3B4B07D84BDE499B01D0D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0862
Signing time: Wed 13 May 2026 06:00:57 +0000
Manifest this update: Wed 13 May 2026 06:00:57 +0000
Manifest next update: Thu 14 May 2026 06:00:57 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: j4FoCSK6dbOJL7aSF3jE1JvwCx20LEVZE4HEyjhqo/o=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:8e:e5:c3:b4:b0:7d:84:bd:e4:99:b0:1d:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 13 06:00:57 2026 GMT
Not After : May 14 06:00:57 2026 GMT
Subject: CN=95c6c14f7fd7995aeb0cb03f36f8408ad704a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:1d:fb:f5:5e:75:d1:f1:48:ca:bf:f0:be:
0b:a0:3c:1e:f6:78:dc:67:fb:62:76:d0:a1:e0:15:
6c:12:7c:04:51:b1:60:e3:27:48:95:fd:01:0f:f0:
23:07:3d:0a:7f:09:3e:5b:67:ca:3b:29:fe:69:4d:
91:1a:41:b6:fa:0d:a3:8b:c3:8f:a4:58:72:82:54:
36:65:ae:d1:56:06:0a:ad:c5:b1:e0:f1:9d:b5:f1:
b6:5e:fb:3d:d1:4f:a6:ac:cf:40:82:5a:f1:a8:77:
db:6d:fa:5e:ed:c1:35:63:ff:18:27:9d:4c:eb:a5:
c0:34:86:6c:7e:07:34:e3:a4:1b:1e:47:dd:b4:b2:
d3:16:3c:4d:b4:11:3d:d9:34:d3:6e:9c:80:5a:d5:
af:c0:0a:54:65:b8:ab:16:b7:12:17:0a:99:46:e2:
2a:ba:55:54:f0:21:76:29:f6:32:8a:a3:f8:7f:d1:
52:d7:be:7d:d4:a6:c6:7a:4d:81:b1:92:e1:ca:1e:
61:65:e3:d0:0a:6c:a3:89:ee:fa:67:7a:97:5e:9c:
1f:04:fe:10:b3:34:2d:39:1a:57:21:82:30:4a:3b:
c9:17:3f:b7:1e:a4:f7:d2:b5:24:05:d7:c7:c1:f8:
b5:f2:c2:da:eb:67:0a:0e:18:e9:55:48:65:61:53:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:C1:4F:7F:D7:99:5A:EB:0C:B0:3F:36:F8:40:8A:D7:04:A1:80
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:26:31:67:57:9e:b8:7f:d5:ac:30:2b:41:35:eb:9f:58:
2e:f4:96:c9:a5:e2:8e:02:53:a3:f2:34:1d:ba:c4:34:24:b5:
92:a0:72:a1:84:6c:82:25:c9:d4:a6:a7:7e:32:10:d2:c8:5c:
0c:83:94:11:74:74:7c:8f:a8:b7:7a:1e:f2:52:4a:53:9a:62:
94:87:6f:9f:59:64:e9:e7:d1:7c:cf:5e:2a:a4:3a:84:78:20:
db:5a:47:d3:55:a5:61:b7:02:e2:52:de:80:e2:56:47:64:d0:
6a:0d:67:6f:bf:b2:65:31:f2:2a:5e:97:f2:26:ae:86:78:b0:
df:3c:df:7f:08:01:0a:c0:e8:eb:8b:67:88:c2:53:c0:ae:11:
15:e0:60:4f:46:68:a0:3c:14:a0:9c:46:12:ca:87:b0:cb:35:
e1:91:ff:0d:14:ab:29:0f:08:2b:1f:19:44:9c:4e:5f:f2:92:
eb:6a:2d:77:8e:56:f4:83:71:54:56:f4:58:77:9c:0b:ea:e9:
ef:f8:d1:d7:65:7d:cf:68:a7:98:a6:90:20:43:0f:cf:28:f1:
b5:8d:c1:41:69:82:ca:c1:9b:ea:56:24:62:8a:5f:72:04:08:
d4:7d:5e:8b:df:88:03:d9:db:9c:43:d6:d6:66:fc:cb:1e:3a:
cb:4f:09:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7I7lw7SwfYS95JmwHQ0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw
NTIzOWQwHhcNMjYwNTEzMDYwMDU3WhcNMjYwNTE0MDYwMDU3WjAzMTEwLwYDVQQD
Eyg5NWM2YzE0ZjdmZDc5OTVhZWIwY2IwM2YzNmY4NDA4YWQ3MDRhMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymod+/VeddHxSMq/8L4LoDwe9njc
Z/tidtCh4BVsEnwEUbFg4ydIlf0BD/AjBz0Kfwk+W2fKOyn+aU2RGkG2+g2ji8OP
pFhyglQ2Za7RVgYKrcWx4PGdtfG2Xvs90U+mrM9AglrxqHfbbfpe7cE1Y/8YJ51M
66XANIZsfgc046QbHkfdtLLTFjxNtBE92TTTbpyAWtWvwApUZbirFrcSFwqZRuIq
ulVU8CF2KfYyiqP4f9FS17591KbGek2BsZLhyh5hZePQCmyjie76Z3qXXpwfBP4Q
szQtORpXIYIwSjvJFz+3HqT30rUkBdfHwfi18sLa62cKDhjpVUhlYVNjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXGwU9/15la6wywPzb4QIrXBKGAMB8GA1UdIwQY
MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It
ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl
LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIQmMWdX
nrh/1awwK0E1659YLvSWyaXijgJTo/I0HbrENCS1kqByoYRsgiXJ1KanfjIQ0shc
DIOUEXR0fI+ot3oe8lJKU5pilIdvn1lk6efRfM9eKqQ6hHgg21pH01WlYbcC4lLe
gOJWR2TQag1nb7+yZTHyKl6X8iauhniw3zzffwgBCsDo64tniMJTwK4RFeBgT0Zo
oDwUoJxGEsqHsMs14ZH/DRSrKQ8IKx8ZRJxOX/KS62otd45W9INxVFb0WHecC+rp
7/jR12V9z2inmKaQIEMPzyjxtY3BQWmCysGb6lYkYopfcgQI1H1ei9+IA9nbnEPW
1mb8yx46y08Jqw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:55 2026 by rpki-client