Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: OTkuIhfCohVTEagnyR1o02sMs5jgF0gwJ7bkKuSQYPQ=
Subject key identifier: F3:FD:F5:4C:63:35:BC:5F:16:F5:59:7C:37:94:45:11:C8:59:59:7C
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 01A0E43EDBAE86223EE0DE2C3681B9CC0CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 0971
Signing time: Sun 27 Sep 2026 19:01:59 +0000
Manifest this update: Sun 27 Sep 2026 19:01:59 +0000
Manifest next update: Mon 28 Sep 2026 19:01:59 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: uPkUI+8scv4eKSmaQ6O1wjeGMUpUxnLsEfMohXC+2sY=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:db:ae:86:22:3e:e0:de:2c:36:81:b9:cc:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Sep 27 19:01:59 2026 GMT
Not After : Sep 28 19:01:59 2026 GMT
Subject: CN=f3fdf54c6335bc5f16f5597c37944511c859597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:d8:a1:cd:b8:3e:b1:40:20:f2:56:a8:28:
e7:cb:e0:22:34:52:ba:59:e0:64:6a:db:21:ed:fd:
88:6c:05:6f:af:35:54:c3:9a:96:08:3e:cb:6e:2e:
9c:5b:4b:47:0d:fc:ea:41:86:35:87:d9:3e:4d:fe:
b8:80:f1:82:19:7f:ba:cc:8e:b5:f1:36:9f:42:03:
4c:6c:25:b5:e1:7b:0d:e9:1e:9a:f4:09:ac:b0:a0:
b9:ec:34:96:77:46:28:8d:32:c5:18:f0:f0:7f:4d:
f6:01:34:9f:c6:0a:36:49:90:65:cb:3a:93:d3:98:
55:21:6e:95:df:47:51:d0:a5:a5:e7:6b:3e:07:17:
b3:54:d5:60:92:ea:75:8c:25:2e:6f:67:08:97:fc:
0b:bf:b3:c3:4a:16:53:a5:14:89:fb:6a:b3:28:1d:
5b:0a:38:a1:1f:54:a0:e9:e2:1d:ab:32:2a:24:da:
18:ce:4c:fa:dd:73:a8:22:b9:45:23:f3:b5:25:96:
a1:7b:b0:ce:18:ac:ea:0d:bf:bd:00:7f:44:4f:3f:
fe:4b:67:9c:3f:ae:8f:db:ee:fc:44:f6:fb:f4:c5:
9b:f2:4e:f8:17:77:57:58:d7:3c:9f:6e:96:9b:e7:
88:36:11:ce:17:ab:50:25:6c:f7:74:77:01:54:56:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:F5:4C:63:35:BC:5F:16:F5:59:7C:37:94:45:11:C8:59:59:7C
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:0c:8b:c8:99:1d:dc:72:90:12:e0:4d:0b:61:d6:4c:db:
07:4b:59:d9:6a:82:84:4b:14:5b:47:d4:f4:e2:f3:1d:e4:dd:
31:62:1e:9f:22:cf:d5:26:72:c3:b1:01:ae:d5:86:82:2d:1b:
cc:84:36:a7:57:62:9d:b5:21:cb:e1:ab:57:cb:cf:0e:fe:76:
cc:19:cb:88:c3:17:b5:f4:9b:61:0c:d2:06:da:d6:84:b9:48:
7a:92:c0:f5:be:f0:cc:71:99:85:a0:f5:6b:27:35:81:34:2b:
0d:24:c5:81:3e:fe:a4:9d:3b:c2:89:e5:db:3c:f6:2e:ad:58:
01:27:eb:1c:14:fb:21:8e:a0:ef:dc:ea:4b:43:57:d2:33:ce:
c7:c3:03:a2:71:13:47:86:96:bb:ce:a5:9c:2b:bc:0c:93:22:
6d:7b:3d:97:92:2d:81:bd:8f:67:00:bb:36:4f:d1:36:3e:13:
4d:50:e4:9d:68:46:35:b9:ba:d8:6a:ea:5c:1a:77:9e:90:32:
21:45:43:81:2f:30:95:e5:b1:b0:17:29:de:37:44:15:26:f9:
cc:8c:62:ba:be:b1:b2:4c:2c:6a:29:9b:e5:55:fd:be:49:2a:
f9:67:16:81:aa:d2:39:78:b1:f7:6e:f7:03:86:48:8f:51:dc:
05:34:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:14:14 2026 by rpki-client