Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: ZVvZHzAziopcc46jngfyoV2YWQeyOFCpHqcaeEqKXSc=
Subject key identifier: 5C:CE:2F:04:0C:09:0C:66:E7:5C:09:AD:A5:F9:E7:74:E2:F2:96:26
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 019F927F4D994EABBCF01548584A1A8FE2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 11CE
Signing time: Fri 24 Jul 2026 05:00:44 +0000
Manifest this update: Fri 24 Jul 2026 05:00:44 +0000
Manifest next update: Sat 25 Jul 2026 05:00:44 +0000
Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=)
2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: OXbZsLteYNbHCeNSzExdlj1/SFa3VhVds29UtBuaNYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:4d:99:4e:ab:bc:f0:15:48:58:4a:1a:8f:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Jul 24 05:00:44 2026 GMT
Not After : Jul 25 05:00:44 2026 GMT
Subject: CN=5cce2f040c090c66e75c09ada5f9e774e2f29626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:f8:43:45:89:a4:08:17:ef:2b:80:82:05:
51:44:60:9f:8d:78:1a:c3:c3:39:24:84:35:19:bd:
0d:dc:97:38:34:66:11:38:e9:7c:f4:c1:c4:d8:79:
4a:e6:e3:3b:fd:7e:68:4c:a1:ac:d9:c1:2d:9e:83:
31:50:3d:57:a9:59:96:8d:48:a6:91:06:19:23:cc:
0e:11:04:9d:b5:f6:80:73:1b:2d:20:a0:e6:aa:83:
8d:f5:31:59:1e:b9:b7:0a:51:97:30:ec:10:fd:a8:
af:df:4f:be:42:35:c8:0a:10:5e:60:4d:66:0e:33:
a7:00:f0:a3:b5:97:21:c2:39:24:30:ca:e3:ab:aa:
0d:2a:8d:73:21:65:64:06:8d:36:90:f6:6b:0e:81:
d8:c3:57:28:91:bb:29:9b:c2:bf:bc:d9:8e:b3:01:
81:4f:cb:71:b2:cf:2d:7b:d9:cd:77:52:d8:9b:f1:
0d:6d:5a:c5:8d:c0:b4:b9:18:ef:72:de:73:f3:cb:
6b:aa:2c:17:c8:f4:e3:ff:37:47:00:f8:f2:32:2f:
0e:18:d2:53:c8:de:83:88:6b:d9:d5:b0:24:18:5a:
a9:20:b9:45:fe:ac:34:11:8b:ab:e6:74:71:93:da:
bb:b4:93:9d:71:44:9e:4b:c4:2b:dd:89:e2:bc:0e:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:2F:04:0C:09:0C:66:E7:5C:09:AD:A5:F9:E7:74:E2:F2:96:26
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:08:83:21:b9:cd:39:8c:2e:73:52:03:be:88:8c:c9:31:
88:17:d5:ca:d6:a5:5b:c6:14:c0:59:e5:fd:bf:2a:3d:31:9c:
03:6f:ca:18:50:d9:1d:ee:2f:85:0e:40:da:bb:24:7b:a1:6e:
d1:47:8e:11:82:1d:02:31:83:79:c4:76:58:f6:09:63:56:1a:
f3:5f:2e:d0:96:27:f8:5a:66:19:7c:bf:f2:32:c5:69:5d:79:
72:c9:3a:a8:40:ab:25:24:b6:df:b5:72:dc:e6:74:4a:3c:92:
35:6f:76:d2:9e:06:d7:f1:51:6f:5c:3d:52:d1:91:46:ca:fb:
86:ee:c1:ec:14:ec:b6:7b:b4:bb:15:fb:17:71:5f:f7:c5:41:
16:a7:07:10:d4:6d:72:5c:50:70:a1:0c:ff:65:86:f6:de:e8:
6b:c0:3a:10:87:04:e7:0c:95:9c:3f:f9:9b:5b:47:f2:26:14:
d4:29:3d:9d:b4:28:f7:bb:64:68:90:21:3a:c8:93:8a:90:41:
40:d5:f7:aa:ba:ca:54:29:08:4d:36:f3:c7:b1:16:99:b5:02:
48:d0:84:5e:75:e3:b0:bc:27:6a:03:b8:32:d4:ab:ac:46:94:
b7:df:eb:9b:45:09:c4:39:f7:39:cc:74:b7:d4:50:e5:2a:7b:
ea:58:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:31 2026 by rpki-client