Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: YMTaQ/oMassfnMDjeCSOCNttULN++l+V9ycbGVrAm2g=
Subject key identifier: 95:58:61:C3:4A:12:CA:87:C1:84:7D:AA:14:AB:18:B9:53:86:F3:4C
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 019FAC768847690BCE8A3308926A7305C7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:16 +0000
Manifest this update: Wed 29 Jul 2026 06:01:16 +0000
Manifest next update: Thu 30 Jul 2026 06:01:16 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: sfDE8GDz/rUo9YuXPPlX3LH9Hzp01/R56GKaH3GXrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:88:47:69:0b:ce:8a:33:08:92:6a:73:05:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Jul 29 06:01:16 2026 GMT
Not After : Jul 30 06:01:16 2026 GMT
Subject: CN=955861c34a12ca87c1847daa14ab18b95386f34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:ed:68:e9:3a:37:04:cb:e8:c1:5d:f7:51:
4d:0c:c2:ef:da:84:cb:a9:8b:ff:ec:ee:27:d3:fb:
7e:c3:c6:7a:03:aa:f9:ee:40:ca:eb:13:12:3a:45:
54:8d:d4:e5:7f:7f:8b:7f:ff:0c:ad:7b:33:ca:72:
6e:eb:c8:1e:c3:fc:56:c4:2b:3f:86:b9:10:b3:e4:
9d:0f:92:3c:c3:9d:4a:07:d0:89:06:d8:d0:07:64:
cd:b1:85:8d:a9:37:c1:f7:9c:e8:67:58:06:f7:7e:
00:94:44:0c:64:e5:7c:4f:52:45:0f:9c:12:78:d8:
e7:7a:ea:a6:ef:bb:c5:87:55:c0:49:c4:e2:75:c2:
05:8e:47:b7:62:2f:37:4f:15:00:2b:93:cc:82:6f:
2d:db:e9:5c:25:72:37:73:81:5e:d3:44:1b:d1:ea:
36:dd:24:35:ef:ff:a6:73:40:53:26:65:5e:3a:ce:
72:92:ce:84:2e:64:07:81:78:7b:20:42:9b:48:ae:
86:49:2c:38:41:c4:8e:d5:31:f7:c2:f1:6a:d3:0c:
ea:77:f9:36:f1:5b:07:bd:bc:05:ed:0e:fa:78:18:
c1:bf:ba:2d:3c:c8:ef:57:03:79:46:f5:19:36:f1:
df:8f:cb:be:55:af:06:c6:8a:ca:6f:ba:58:b8:79:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:61:C3:4A:12:CA:87:C1:84:7D:AA:14:AB:18:B9:53:86:F3:4C
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:60:25:90:d0:6e:0d:56:a3:34:7a:e8:6f:1f:95:8d:d1:
39:0b:95:2a:a5:fd:83:11:63:30:d9:a9:2e:03:04:ef:67:ef:
0f:9a:8e:60:6a:74:ff:98:e0:3f:16:5c:dc:32:0c:6a:1c:4a:
09:a1:fd:65:cc:48:69:ad:8f:1a:a9:a6:9d:48:1d:85:9d:a7:
7b:d1:7d:20:9f:74:c3:7e:69:72:f4:7a:33:87:6f:10:aa:c0:
d1:9a:5b:f9:a3:42:2e:c8:01:33:0a:53:3b:2d:a6:10:3c:8f:
b2:72:fc:d2:91:c0:2b:c8:72:12:d3:07:db:b2:d2:60:e2:1d:
c5:7c:2b:cb:ab:8b:10:d0:c5:03:7c:89:db:f7:45:f7:23:28:
95:03:8c:96:94:7e:59:d7:05:ec:8e:ad:30:7c:3a:e0:6a:fd:
7f:c4:7c:51:9a:48:b3:c2:cb:a8:8d:fd:ff:93:3d:4c:ff:d8:
88:51:76:5f:35:48:35:52:97:15:13:d7:f7:cf:0f:42:d5:ad:
70:44:3e:e2:9a:dd:82:ad:84:e1:91:08:29:7a:72:fb:c2:aa:
a4:19:10:86:73:41:f5:b5:2b:75:78:f6:a9:ac:4b:1c:4a:32:
94:4c:87:0a:62:20:2b:e5:5c:0c:3f:0f:58:bb:f6:c7:e4:10:
4b:df:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:45 2026 by rpki-client