
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: PuWRgu00OCEbtO41GUf18UVFpSuRUKD5twFX+HDVmbk=
Subject key identifier: CD:25:37:71:2F:14:9A:58:5F:2F:08:4D:8E:EF:A1:26:28:3C:04:36
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019E20C84E995E5E1310389F34DCA338D636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0A67
Signing time: Wed 13 May 2026 10:00:58 +0000
Manifest this update: Wed 13 May 2026 10:00:58 +0000
Manifest next update: Thu 14 May 2026 10:00:58 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: 6sm6q4+hqkzYMPbjxt8mhI8SnWU5f1kVNRpJWObUkwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:4e:99:5e:5e:13:10:38:9f:34:dc:a3:38:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: May 13 10:00:58 2026 GMT
Not After : May 14 10:00:58 2026 GMT
Subject: CN=cd2537712f149a585f2f084d8eefa126283c0436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:b0:16:c8:1a:6c:07:aa:bf:3e:1f:4a:d9:
4e:69:db:c1:36:19:19:a2:cc:ed:ab:8b:41:76:95:
f5:8b:62:9a:e5:5d:8c:80:aa:62:ef:47:f1:0d:66:
3d:45:d6:09:d8:d2:97:c3:4d:e4:88:72:b9:dc:2d:
f0:1c:c5:1c:76:3f:53:a6:a7:ee:4e:e4:0f:1e:1b:
3d:d5:36:f5:ab:fc:83:44:9d:21:38:14:12:19:84:
02:93:8b:3d:92:71:15:62:91:b2:eb:86:9e:fb:88:
5d:9a:20:21:24:da:4c:16:17:67:7b:82:9c:17:46:
e3:c2:9c:00:7b:ea:43:0b:e3:57:f6:09:48:85:fc:
cb:94:fb:97:10:a2:57:1e:7b:81:e5:6c:aa:4a:28:
6c:67:18:ff:ce:26:50:8d:f7:5f:49:8c:4b:b6:5f:
af:b6:46:5f:75:92:99:5f:05:94:9e:e0:ac:dc:9a:
75:f7:a4:10:5d:ab:45:31:2b:e2:91:b7:fa:3c:2c:
cc:bf:3b:eb:32:bf:8e:ea:70:9b:18:50:c1:e1:ef:
b0:7f:f9:e8:62:76:8a:c3:4e:af:f8:01:9f:0a:5b:
03:62:dd:72:be:a6:d9:27:c0:d2:3d:a3:f8:8c:e3:
b2:4b:8c:9d:25:00:0d:33:1d:82:04:5c:c9:ce:48:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:37:71:2F:14:9A:58:5F:2F:08:4D:8E:EF:A1:26:28:3C:04:36
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:eb:c9:30:41:35:d1:fd:3c:a4:58:0e:85:3b:26:11:3e:
b4:54:86:41:4f:73:77:fd:11:b2:4a:b0:12:1c:65:43:fa:70:
c9:5a:6f:f4:c5:49:ee:92:3c:e1:c7:cd:1c:d3:1c:bc:27:8f:
3d:fe:80:d0:3a:69:c9:3c:57:bf:a7:08:47:b4:bd:4b:85:48:
e3:2b:a0:ba:7f:bc:a8:54:75:54:25:d8:e6:3c:9c:ce:2c:18:
38:d2:2d:4a:2e:d8:53:76:bf:21:bd:ba:4c:ee:e8:12:f0:45:
26:bf:04:0e:51:1f:2c:04:09:c0:23:4a:2f:a0:93:5a:f8:91:
22:46:48:c8:65:40:61:5b:34:4f:89:db:e2:25:d6:fb:f2:49:
6b:82:1a:50:59:c2:bc:86:86:70:ba:67:8d:5f:fd:90:c3:19:
f2:ae:97:ff:9d:39:47:d0:9b:5c:79:ae:87:1e:ca:6f:ba:ba:
ce:55:5b:55:7c:31:d2:3f:27:a7:13:61:bd:7b:86:39:cc:10:
ac:ec:b0:eb:3a:5d:44:b5:8c:43:89:2c:a0:2f:a5:89:b9:9d:
db:55:a7:07:cc:9a:77:0c:37:93:61:b6:97:8f:ca:8c:81:1d:
e3:35:5e:0f:60:41:26:12:9f:bb:60:df:2b:1c:7d:18:f4:a3:
72:d1:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:04 2026 by rpki-client