Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
File: kTlODKXYCQA4GSXPQT-DnovLO08.mft (raw, json)
Hash identifier: gXHf6dvfQsfubOU06X0U0tu/3cVNOzSJbm2EQg4AyNM=
Subject key identifier: B0:C8:B9:02:07:F2:A4:F0:A6:AC:E9:20:B1:ED:8C:86:5A:EB:33:1C
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 01A0C28DA25DF5484BD96784B0843BA3413F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:57 +0000
Manifest this update: Mon 21 Sep 2026 06:00:57 +0000
Manifest next update: Tue 22 Sep 2026 06:00:57 +0000
Files and hashes: 1: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (hash: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=)
2: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (hash: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=)
3: kTlODKXYCQA4GSXPQT-DnovLO08.crl (hash: XCNqTboC9W2H5bbgNoFkBmnS488Qlm7OadaR7g9ZFBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:a2:5d:f5:48:4b:d9:67:84:b0:84:3b:a3:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Sep 21 06:00:57 2026 GMT
Not After : Sep 22 06:00:57 2026 GMT
Subject: CN=b0c8b90207f2a4f0a6ace920b1ed8c865aeb331c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:e1:c9:8f:dc:9a:2c:5d:77:33:61:1e:b9:
9e:dd:ab:59:a5:2d:f2:20:5c:25:70:b9:2d:8d:ef:
14:98:e7:20:ee:ec:89:5e:4e:b6:9e:69:81:cf:97:
5a:a9:31:03:f1:c2:1a:f6:f3:a7:f5:f5:83:be:f7:
a7:bf:1c:28:69:e1:5e:bb:23:dd:ab:84:ff:9b:d3:
43:36:c5:7b:99:42:3e:62:18:cd:77:12:40:35:c4:
97:71:a4:4e:a8:66:bc:bc:d6:18:f9:44:92:73:06:
e2:7f:16:ae:56:78:15:23:fe:9b:55:03:b7:c9:40:
4d:f5:c8:97:4d:06:fb:19:fe:cb:8b:ed:22:98:a5:
39:56:83:77:14:c4:3f:ad:8d:9b:54:1e:28:80:78:
f4:d6:e9:44:9f:bf:2f:f3:38:21:75:da:86:9f:2e:
b0:31:74:68:89:9a:1e:0a:2c:01:d1:c2:35:10:3e:
63:a4:71:ba:68:81:be:4e:93:76:d9:85:ab:a3:22:
e2:12:60:01:6a:29:a3:d7:5b:a4:5b:d7:4e:c1:8e:
c6:22:71:b1:60:fb:e0:d8:af:5a:9c:09:ef:36:10:
34:f4:9c:1d:c9:d2:b3:31:0c:2d:c9:27:03:14:d4:
fd:4a:a9:0d:17:2d:39:d9:c9:82:54:63:a1:dc:97:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:B9:02:07:F2:A4:F0:A6:AC:E9:20:B1:ED:8C:86:5A:EB:33:1C
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8c:50:c9:9b:88:9c:a8:f3:0d:0d:4a:bf:65:bf:00:12:f2:
ce:7e:78:a9:7a:d3:8a:aa:6f:f2:b0:8e:91:86:1e:9b:49:bb:
84:90:75:6b:3d:78:8b:7d:11:c8:26:59:f7:87:d1:b8:0f:db:
c2:a2:24:d6:e9:cd:53:40:3a:4a:0a:82:d6:d2:27:b9:38:b7:
7b:df:67:ba:1a:ba:91:ee:9d:fe:70:f3:ce:16:da:ee:54:37:
d0:48:7b:ef:49:04:8c:bf:8c:25:cf:cb:71:b9:d7:3c:2c:07:
f0:1a:c2:5c:cf:a3:6f:ad:e8:29:f0:56:b0:76:c9:ac:1e:1b:
4a:c3:f7:e5:ca:fd:6c:24:84:3d:e9:3d:01:f5:36:6e:b4:ec:
87:1f:2b:0c:4c:c3:b8:81:3c:96:97:3c:9e:a2:43:8f:61:67:
7f:b6:d1:d7:6b:09:97:68:b3:18:d5:3f:d2:00:d0:ae:46:a4:
eb:a9:bb:a6:42:b8:a3:7b:9d:58:fb:e7:8f:ee:9c:b3:e1:9b:
f5:c6:24:9f:65:6d:b2:e5:f8:00:37:ef:78:2c:0b:9b:e0:a5:
ae:36:21:8a:64:ab:82:f1:6d:29:d9:14:0e:9f:e1:89:39:b1:
65:a0:13:79:1a:43:df:40:1f:47:5c:fe:4e:75:cd:58:7b:0c:
6e:52:4a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjaJd9UhL2WeEsIQ7o0E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzk0ZTBjYTVkODA5MDAzODE5MjVjZjQxM2Y4MzllOGJj
YjNiNGYwHhcNMjYwOTIxMDYwMDU3WhcNMjYwOTIyMDYwMDU3WjAzMTEwLwYDVQQD
EyhiMGM4YjkwMjA3ZjJhNGYwYTZhY2U5MjBiMWVkOGM4NjVhZWIzMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvhyY/cmixddzNhHrme3atZpS3y
IFwlcLktje8UmOcg7uyJXk62nmmBz5daqTED8cIa9vOn9fWDvvenvxwoaeFeuyPd
q4T/m9NDNsV7mUI+YhjNdxJANcSXcaROqGa8vNYY+USScwbifxauVngVI/6bVQO3
yUBN9ciXTQb7Gf7Li+0imKU5VoN3FMQ/rY2bVB4ogHj01ulEn78v8zghddqGny6w
MXRoiZoeCiwB0cI1ED5jpHG6aIG+TpN22YWroyLiEmABaimj11ukW9dOwY7GInGx
YPvg2K9anAnvNhA09JwdydKzMQwtyScDFNT9SqkNFy052cmCVGOh3JexEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDIuQIH8qTwpqzpILHtjIZa6zMcMB8GA1UdIwQY
MBaAFJE5Tgyl2AkAOBklz0E/g56LyztPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RsT0RLWFlDUUE0R1NYUFFULURub3ZMTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYt
ZTcxNzY3ODZmNzRhLzEva1RsT0RLWFlDUUE0R1NYUFFULURub3ZMTzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYtZTcxNzY3ODZmNzRh
LzEva1RsT0RLWFlDUUE0R1NYUFFULURub3ZMTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4xQyZuI
nKjzDQ1Kv2W/ABLyzn54qXrTiqpv8rCOkYYem0m7hJB1az14i30RyCZZ94fRuA/b
wqIk1unNU0A6SgqC1tInuTi3e99nuhq6ke6d/nDzzhba7lQ30Eh770kEjL+MJc/L
cbnXPCwH8BrCXM+jb63oKfBWsHbJrB4bSsP35cr9bCSEPek9AfU2brTshx8rDEzD
uIE8lpc8nqJDj2Fnf7bR12sJl2izGNU/0gDQrkak66m7pkK4o3udWPvnj+6cs+Gb
9cYkn2VtsuX4ADfveCwLm+ClrjYhimSrgvFtKdkUDp/hiTmxZaATeRpD30AfR1z+
TnXNWHsMblJKFg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:01 2026 by rpki-client