Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: cZoRX9S7ZhfuLrYtY43CiDvqPglw6fBoZgf0KHsHbWI=
Subject key identifier: 09:B2:DA:8B:83:95:90:49:17:7E:DA:A6:15:5E:2D:09:21:4B:60:FF
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 01A1DD5E66B92E8A7B30EFE726C1DCB4CC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 1454
Signing time: Sun 15 Nov 2026 04:01:53 +0000
Manifest this update: Sun 15 Nov 2026 04:01:53 +0000
Manifest next update: Mon 16 Nov 2026 04:01:53 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: KL3rQSUbwsYXBGl3NyUKe2f/xU6puc+NKA4ORlXea1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:66:b9:2e:8a:7b:30:ef:e7:26:c1:dc:b4:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Nov 15 04:01:53 2026 GMT
Not After : Nov 16 04:01:53 2026 GMT
Subject: CN=09b2da8b83959049177edaa6155e2d09214b60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:fd:60:55:e2:e6:6d:eb:30:da:6e:f8:9e:
b2:99:4d:bc:96:d0:fc:af:c2:27:47:90:04:6e:2e:
7d:db:a2:5c:9e:c0:8f:ac:d7:ce:a6:2e:3b:ce:91:
59:51:ff:9d:f7:84:f5:4b:81:ea:86:af:30:a2:fa:
89:a2:16:46:56:fb:5e:33:31:71:d7:cb:19:93:0b:
c0:5d:7d:29:f4:77:89:12:b9:16:a1:e4:76:39:45:
e1:d5:02:a9:fc:3a:2e:0c:39:5e:2f:ad:b2:a2:b7:
20:e5:00:fa:22:41:d0:55:e8:9e:bd:42:64:2e:10:
12:5e:53:ba:c9:59:03:46:0a:18:6b:fe:2b:f3:fc:
24:ae:06:40:c2:87:51:93:0d:ce:5a:ae:f4:62:8c:
73:ea:6b:cd:dc:3f:22:db:45:ce:a0:e6:6d:e4:b0:
02:df:34:c6:67:d7:5f:72:cc:c4:19:1d:0f:5f:da:
12:04:11:95:78:96:f2:4f:ee:5a:58:ac:cd:04:9c:
e4:43:fc:cd:54:f4:d0:d5:a1:15:7c:27:4c:99:28:
b3:9d:86:eb:aa:41:7b:85:5a:b5:24:38:fd:ea:89:
e5:63:07:fc:32:96:30:df:43:d1:37:1e:36:f3:d9:
09:cc:8e:d7:d9:65:e2:e8:39:68:e6:ee:0e:5c:4a:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:DA:8B:83:95:90:49:17:7E:DA:A6:15:5E:2D:09:21:4B:60:FF
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:db:bd:12:a7:97:a5:d9:b0:69:44:44:a6:e9:51:03:af:
bd:78:46:2b:d7:dc:2e:03:a6:ed:cf:39:90:be:2f:01:b0:20:
96:9a:71:ed:d0:8c:48:6d:94:bb:ea:c3:c2:e0:87:27:8d:8b:
d7:6b:46:19:9e:11:20:52:01:7f:3e:31:49:a8:b0:bd:b7:64:
02:3c:ce:e2:13:96:b5:b1:1f:fa:75:de:da:16:fb:b6:fc:ba:
98:b3:17:13:a4:de:ba:6c:09:0d:aa:02:18:18:ad:ba:1e:51:
b1:1d:31:df:72:4d:42:d4:6e:5f:d5:49:23:be:9b:82:f7:2b:
9c:ca:e6:82:11:0e:83:65:f8:5e:73:d2:3b:d6:24:78:05:b5:
d4:1c:b4:f7:83:73:32:8f:ef:40:75:96:11:00:0e:1a:9c:fb:
3e:a2:b1:74:fe:7c:76:81:fe:67:4d:92:a9:71:56:be:73:e7:
1f:eb:8d:de:21:0e:af:b6:15:84:e8:c7:f3:29:e9:fd:af:1e:
f0:e6:91:47:2c:85:d8:9d:7a:9b:4c:81:67:97:a9:82:6f:b9:
c3:4e:7f:22:bd:f2:45:f7:c8:1d:8c:7c:d6:83:4f:ef:4e:20:
8d:7e:72:19:96:33:86:7b:c1:5d:29:b8:d4:63:5d:31:46:42:
30:7b:f5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXma5Lop7MO/nJsHctMxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0
ZGIzNWUwHhcNMjYxMTE1MDQwMTUzWhcNMjYxMTE2MDQwMTUzWjAzMTEwLwYDVQQD
EygwOWIyZGE4YjgzOTU5MDQ5MTc3ZWRhYTYxNTVlMmQwOTIxNGI2MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnX9YFXi5m3rMNpu+J6ymU28ltD8
r8InR5AEbi5926JcnsCPrNfOpi47zpFZUf+d94T1S4Hqhq8wovqJohZGVvteMzFx
18sZkwvAXX0p9HeJErkWoeR2OUXh1QKp/DouDDleL62yorcg5QD6IkHQVeievUJk
LhASXlO6yVkDRgoYa/4r8/wkrgZAwodRkw3OWq70Yoxz6mvN3D8i20XOoOZt5LAC
3zTGZ9dfcszEGR0PX9oSBBGVeJbyT+5aWKzNBJzkQ/zNVPTQ1aEVfCdMmSiznYbr
qkF7hVq1JDj96onlYwf8MpYw30PRNx4289kJzI7X2WXi6Dlo5u4OXEoGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmy2ouDlZBJF37aphVeLQkhS2D/MB8GA1UdIwQY
MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt
NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz
LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR27bvRKn
l6XZsGlERKbpUQOvvXhGK9fcLgOm7c85kL4vAbAglppx7dCMSG2Uu+rDwuCHJ42L
12tGGZ4RIFIBfz4xSaiwvbdkAjzO4hOWtbEf+nXe2hb7tvy6mLMXE6TeumwJDaoC
GBituh5RsR0x33JNQtRuX9VJI76bgvcrnMrmghEOg2X4XnPSO9YkeAW11By094Nz
Mo/vQHWWEQAOGpz7PqKxdP58doH+Z02SqXFWvnPnH+uN3iEOr7YVhOjH8ynp/a8e
8OaRRyyF2J16m0yBZ5epgm+5w05/Ir3yRffIHYx81oNP704gjX5yGZYzhnvBXSm4
1GNdMUZCMHv1iQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:24 2026 by rpki-client