Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: HqDcurYHMlfdacg3NskGhJJdP9EV8iRCXSbId9bK6F4=
Subject key identifier: 47:8B:B1:94:DA:52:E0:80:9E:71:6C:0D:6B:9C:42:5F:A8:7F:37:BA
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 019F9248CA30DA67916213B9BA48DC1EE4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 08C2
Signing time: Fri 24 Jul 2026 04:01:11 +0000
Manifest this update: Fri 24 Jul 2026 04:01:11 +0000
Manifest next update: Sat 25 Jul 2026 04:01:11 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: hoouE4uh1sKxEaBshxdnIlMDMH8PX6BeOkEoNeezzKw=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ca:30:da:67:91:62:13:b9:ba:48:dc:1e:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Jul 24 04:01:11 2026 GMT
Not After : Jul 25 04:01:11 2026 GMT
Subject: CN=478bb194da52e0809e716c0d6b9c425fa87f37ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:54:cf:1b:11:25:93:1d:9b:60:44:29:5f:
24:7d:e5:5d:a7:8c:8c:ec:24:29:05:bc:aa:b8:24:
2b:06:40:e8:55:64:d3:d3:54:08:50:d7:21:29:84:
97:7e:28:86:56:b7:66:6a:da:60:45:a0:d7:a0:23:
0e:7e:7e:fe:10:c6:7c:d0:97:c1:2a:99:0b:d5:1a:
bc:25:03:12:7c:bd:9a:04:30:61:7b:12:6d:ff:5f:
ba:34:37:0b:d7:2c:01:96:af:a4:c0:8e:1c:b7:25:
6e:19:1d:13:a2:52:74:99:16:82:63:42:83:ba:8a:
72:0d:64:ab:0f:63:da:eb:22:f4:bf:63:5d:7a:e2:
4d:14:70:3e:68:71:36:89:1b:97:14:47:50:48:c5:
f5:ba:f3:21:fc:52:0e:2f:21:7c:2f:48:5a:cb:62:
d0:70:b7:ae:1f:c2:79:b0:9d:28:12:74:b9:a6:f8:
64:03:3c:54:39:b6:b0:1b:5a:f6:df:bb:4c:e1:3a:
26:d4:a5:15:1f:0f:28:1f:11:c7:53:79:a1:42:43:
33:a3:88:95:ad:f7:1f:00:8c:4f:ec:43:94:c2:e3:
80:c9:ab:da:eb:a1:4a:67:1e:33:3b:b6:41:ac:24:
5f:0d:da:36:5a:d3:5f:b1:7e:ce:5f:6c:83:e0:1c:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:B1:94:DA:52:E0:80:9E:71:6C:0D:6B:9C:42:5F:A8:7F:37:BA
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:97:55:eb:e3:d3:65:49:94:ab:7d:fd:58:e9:94:a7:f0:
23:c1:e2:48:2a:ae:ba:96:11:50:23:47:96:b1:31:ad:1c:77:
ed:31:19:15:c6:23:08:f4:7f:32:1c:73:fe:a7:08:d5:f5:ff:
f3:09:ba:01:40:b3:a5:f9:1c:7c:a3:88:02:29:24:d0:f1:f5:
32:8f:6b:20:fd:b9:04:46:65:f2:b5:15:32:5b:12:56:d5:75:
49:7c:73:2f:bb:06:cf:ab:e6:d3:d3:2c:96:97:4d:45:bc:45:
fa:02:77:d1:63:08:54:c8:e5:61:a5:6c:2a:ab:b2:48:cc:8d:
8e:80:c7:31:15:2e:42:09:0a:1c:d8:a6:dc:0e:e5:01:7d:9e:
16:2b:00:f9:37:6d:fe:87:dc:0d:2c:67:f2:53:33:67:88:fe:
8b:fc:85:b1:6d:19:13:f3:5d:92:4d:39:ec:86:fa:e8:43:d3:
e4:29:b9:86:06:99:22:b3:fe:30:85:ac:8a:32:1d:45:82:15:
83:2c:9a:43:37:fb:22:d6:4b:1d:1b:97:f5:bb:9d:84:bf:da:
a8:eb:e7:af:9a:50:b9:b5:9f:69:0b:90:61:8f:40:21:e4:02:
0c:16:52:8a:6f:6c:aa:0a:78:c6:6f:c3:85:4d:fc:b8:a6:ff:
79:b5:9d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSMow2meRYhO5ukjcHuShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzM4MGU4Yjg1MDQ1NGRiMzgxZGRkZWI5YWMyY2M4YTJm
NjI1MzEwHhcNMjYwNzI0MDQwMTExWhcNMjYwNzI1MDQwMTExWjAzMTEwLwYDVQQD
Eyg0NzhiYjE5NGRhNTJlMDgwOWU3MTZjMGQ2YjljNDI1ZmE4N2YzN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY9UzxsRJZMdm2BEKV8kfeVdp4yM
7CQpBbyquCQrBkDoVWTT01QIUNchKYSXfiiGVrdmatpgRaDXoCMOfn7+EMZ80JfB
KpkL1Rq8JQMSfL2aBDBhexJt/1+6NDcL1ywBlq+kwI4ctyVuGR0TolJ0mRaCY0KD
uopyDWSrD2Pa6yL0v2NdeuJNFHA+aHE2iRuXFEdQSMX1uvMh/FIOLyF8L0hay2LQ
cLeuH8J5sJ0oEnS5pvhkAzxUObawG1r237tM4Tom1KUVHw8oHxHHU3mhQkMzo4iV
rfcfAIxP7EOUwuOAyava66FKZx4zO7ZBrCRfDdo2WtNfsX7OX2yD4BzKvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeLsZTaUuCAnnFsDWucQl+ofze6MB8GA1UdIwQY
MBaAFJEzgOi4UEVNs4Hd3rmsLMii9iUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODIt
OTRlNzAwYmQ1NWY1LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODItOTRlNzAwYmQ1NWY1
LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNqXVevj
02VJlKt9/VjplKfwI8HiSCquupYRUCNHlrExrRx37TEZFcYjCPR/Mhxz/qcI1fX/
8wm6AUCzpfkcfKOIAikk0PH1Mo9rIP25BEZl8rUVMlsSVtV1SXxzL7sGz6vm09Ms
lpdNRbxF+gJ30WMIVMjlYaVsKquySMyNjoDHMRUuQgkKHNim3A7lAX2eFisA+Tdt
/ofcDSxn8lMzZ4j+i/yFsW0ZE/Ndkk057Ib66EPT5Cm5hgaZIrP+MIWsijIdRYIV
gyyaQzf7ItZLHRuX9budhL/aqOvnr5pQubWfaQuQYY9AIeQCDBZSim9sqgp4xm/D
hU38uKb/ebWdXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:27 2026 by rpki-client