Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: 54gO2U7htUN/wqTngfdhpVkN+DAqmJjzWn2CJTWVRzk=
Subject key identifier: 33:74:5F:26:64:69:DC:F0:68:9B:B9:ED:C4:79:17:73:F7:E4:73:D7
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 019E1F7F382E9CFA125DF1FE40237ADC49B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 0802
Signing time: Wed 13 May 2026 04:01:31 +0000
Manifest this update: Wed 13 May 2026 04:01:31 +0000
Manifest next update: Thu 14 May 2026 04:01:31 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: Prbzilpfgrc5XA+PqINfbDGqBzm4pq/Rw/EbyMyah10=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:38:2e:9c:fa:12:5d:f1:fe:40:23:7a:dc:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: May 13 04:01:31 2026 GMT
Not After : May 14 04:01:31 2026 GMT
Subject: CN=33745f266469dcf0689bb9edc4791773f7e473d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:c7:1e:fd:cc:3c:85:d0:da:97:fb:69:ef:
91:6c:f4:73:44:6c:66:6f:62:7b:4e:11:b4:19:fa:
78:ff:01:00:5a:65:46:bb:97:5e:22:85:d6:7e:56:
2b:a5:2c:3f:40:ae:46:ab:ed:d5:7f:17:0e:44:25:
51:17:32:5c:4c:4f:af:70:70:db:0c:4d:f1:4b:90:
38:8b:88:d7:92:a9:e9:c9:0c:0c:c6:e0:a9:68:21:
c3:a6:f0:3f:4d:c0:fe:5d:f8:f3:2d:a6:33:c9:0b:
5c:be:02:a7:4a:45:9a:6f:fe:a4:7c:ca:74:6f:20:
5b:2a:e1:67:9d:2e:c3:3c:3f:e9:ed:c8:3f:84:56:
d4:7d:9f:ad:7e:63:8c:86:1b:72:4c:16:c0:46:2d:
49:24:aa:34:3c:f8:2a:fe:2d:b3:4a:05:a3:6d:9d:
2e:74:ef:74:5e:14:ac:a8:d8:f2:05:d8:32:f9:c6:
a9:73:cb:98:e3:87:78:b3:c9:91:cd:0d:11:a5:88:
65:ba:53:53:a1:23:52:6a:15:1b:c2:cf:d8:55:13:
e9:f0:db:d2:c9:29:ac:e3:c4:f7:f5:39:aa:41:7e:
e2:74:8c:96:7b:4d:49:7d:bf:49:33:ba:1e:59:07:
96:7d:b9:66:07:c9:2c:ce:12:ea:8a:c1:41:ef:56:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:5F:26:64:69:DC:F0:68:9B:B9:ED:C4:79:17:73:F7:E4:73:D7
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c3:0a:2b:29:a7:52:eb:e0:42:79:bf:4a:ae:56:7b:1d:16:
63:73:18:41:ef:1f:2d:42:72:3d:2d:ec:a7:58:6d:67:3f:82:
22:f6:f2:7f:df:8b:df:ed:29:3a:95:99:ca:1c:ef:c7:70:68:
e8:86:7f:d7:79:3d:50:4d:eb:2b:d9:df:a9:81:1d:7e:cf:1d:
9c:c4:07:dc:13:66:70:ea:3b:18:70:c3:93:3b:d4:e2:3c:1a:
4d:bd:4e:8f:98:e7:7b:17:05:2b:f3:45:8e:67:ac:e1:65:6d:
e2:10:4e:6a:57:23:d1:bb:e2:69:5b:39:8c:84:56:75:60:cc:
a0:c4:5a:75:14:5d:79:c1:7c:87:8b:81:a6:97:1c:e5:12:33:
51:97:47:5f:a7:65:44:cc:95:fe:98:d1:eb:bd:43:6f:17:eb:
bd:05:94:4f:5a:00:a2:3e:06:2c:7a:d6:4b:d3:8e:33:04:0e:
1a:f0:0d:39:25:0e:68:d2:80:45:d7:25:f0:2b:e8:dd:e3:a1:
df:5c:18:49:45:4f:a5:67:2c:bf:86:0a:c1:dd:ce:fe:8e:82:
c2:e2:d3:1e:4d:21:dd:3f:21:90:02:6d:8d:5c:2f:a4:f3:5b:
83:13:70:a3:5d:6b:d7:ef:c6:1d:ac:e4:ea:0c:c1:c6:56:6a:
1c:26:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:15 2026 by rpki-client