Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: nPNowK3e3VhXbkSubHlBO3gZ7NLvL3ND1uaDer9iJ7U=
Subject key identifier: 62:33:55:54:FD:C9:E4:FF:9E:2E:58:7C:A3:1B:DC:25:94:54:3E:1C
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019F92EDD855429E74E5D3326D246D58482B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0C7D
Signing time: Fri 24 Jul 2026 07:01:28 +0000
Manifest this update: Fri 24 Jul 2026 07:01:28 +0000
Manifest next update: Sat 25 Jul 2026 07:01:28 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: K3Z0uq+tWjTHVQHJcNBkCVo2ufz0OrJqkuhdnEtfdWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:d8:55:42:9e:74:e5:d3:32:6d:24:6d:58:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jul 24 07:01:28 2026 GMT
Not After : Jul 25 07:01:28 2026 GMT
Subject: CN=62335554fdc9e4ff9e2e587ca31bdc2594543e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:85:f9:e6:e7:51:1b:1f:14:98:2d:af:2b:
c9:96:e8:c2:f0:4c:b6:a4:98:13:9b:02:4c:ce:73:
0b:55:c8:b7:79:f8:ab:d0:79:d3:f7:3b:20:70:78:
95:dc:4e:2c:39:b9:76:e6:87:3d:6f:47:5a:22:b9:
dd:3a:08:e1:88:c8:23:0e:d2:c9:2d:47:18:fd:6d:
18:74:db:8a:7c:32:85:58:83:51:c8:8d:0b:42:60:
5b:9e:17:46:8e:93:90:65:dd:13:52:1d:42:ca:74:
f0:a2:95:0a:a7:73:71:29:bf:c5:b3:1e:ac:46:24:
1a:54:37:6c:1b:01:21:1c:d8:d6:80:0e:74:24:93:
b9:0c:cc:5b:81:d1:9b:dc:c8:d0:3f:2c:51:e4:e8:
4e:d6:28:e2:49:29:b7:a5:61:7e:3c:a5:92:27:bb:
df:bd:fd:84:aa:66:0b:50:27:0d:65:08:9b:4b:a1:
80:0a:73:ea:a6:f3:f5:4a:7a:48:89:cb:11:d1:1a:
89:c0:f9:c9:66:85:ec:de:30:fc:34:5f:c5:6b:46:
47:5c:1e:81:72:4a:17:20:f4:44:8b:8d:da:44:ea:
9a:df:2e:d8:4a:3a:7c:02:2a:d0:4d:f5:b6:1b:ae:
c6:b0:ba:35:ad:c6:55:41:ba:08:44:7c:d6:7c:ae:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:55:54:FD:C9:E4:FF:9E:2E:58:7C:A3:1B:DC:25:94:54:3E:1C
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1c:3e:25:57:bb:33:fc:8d:91:ac:b7:4e:3b:70:3b:76:eb:
8f:40:8f:bb:30:b2:06:19:39:58:78:1b:81:42:1a:cb:a9:19:
ee:c5:1d:2b:98:53:a5:71:c4:f8:0d:b9:1b:9e:3d:0b:9b:f4:
cf:36:37:e3:b9:ac:5c:ad:61:71:7d:f7:a3:92:7f:79:16:c2:
98:11:65:94:8b:63:9b:5c:fa:96:d3:97:f5:08:7b:d0:ad:42:
2d:63:25:92:96:5a:fd:01:90:98:14:b4:cb:3a:2b:4d:da:45:
51:49:6e:42:d6:c1:76:83:73:8c:35:dd:4a:af:32:4f:3e:0a:
3b:30:0a:ea:2d:4b:85:2a:b3:3f:29:6a:89:58:4a:f3:07:62:
ea:b3:ab:dd:da:2f:be:d8:dc:bc:75:17:75:da:00:91:6c:65:
32:fd:eb:dd:63:84:95:b0:12:39:e0:8d:1e:e7:71:ac:45:b7:
18:cb:aa:83:32:87:db:69:3a:88:28:58:44:cc:5c:12:4d:ce:
15:01:47:89:8f:8f:cc:44:46:a7:b9:d1:27:8f:f4:76:0d:0e:
0c:eb:dc:2d:c2:de:dd:89:f2:92:63:42:e7:86:c0:b5:69:52:
bf:c0:e8:f2:cb:ad:0e:16:58:39:41:10:03:3b:77:2b:9e:a2:
23:ed:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:31 2026 by rpki-client