Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: fUT8tHAYAH5UnFVfqlFTgvrHvErPQGkIS6harULkVdg=
Subject key identifier: 2A:EA:3A:93:94:3B:58:4D:D1:B9:78:5E:4A:F4:E1:AD:96:C6:98:8C
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019FACAC87CE1239F50FFC3518AF3F06051D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 07:00:15 +0000
Manifest this update: Wed 29 Jul 2026 07:00:15 +0000
Manifest next update: Thu 30 Jul 2026 07:00:15 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: DCZLBt/QRx6WVk19c3pZKBr/+fJ82rLnU3M1GLdu00E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:87:ce:12:39:f5:0f:fc:35:18:af:3f:06:05:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jul 29 07:00:15 2026 GMT
Not After : Jul 30 07:00:15 2026 GMT
Subject: CN=2aea3a93943b584dd1b9785e4af4e1ad96c6988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:a3:ca:17:cf:2b:6f:f6:11:92:68:db:cd:
51:4b:90:2d:c3:55:ca:af:87:b1:5a:24:5e:26:ee:
81:cc:61:f0:af:43:d0:f1:85:08:26:cb:e1:ad:69:
7d:6b:81:6c:16:04:b2:40:f2:c8:c7:8f:6e:00:b8:
54:93:8b:28:a0:4f:f0:26:13:55:d4:e5:d7:d8:33:
fa:a0:53:ab:87:3c:32:9f:3f:3a:27:b4:e5:1b:46:
b0:09:84:21:c7:24:8e:2b:d9:c0:b9:0b:01:49:26:
ae:43:6c:26:af:fc:f0:45:ba:df:9d:51:48:f2:17:
28:eb:73:81:64:d1:d1:91:ba:3a:f6:0d:69:f4:17:
e7:8f:53:25:ba:35:3a:c4:f7:e0:e6:fb:85:6a:bc:
01:57:e8:68:a8:96:6c:c4:29:1a:a6:79:9c:d3:a6:
48:98:ab:75:e9:65:16:5e:78:ff:b3:c4:1e:62:2a:
6c:6f:b2:c8:c2:54:d3:3c:8a:2e:ce:e5:38:62:8c:
fb:74:72:92:a1:f3:cb:4c:2e:a3:17:4a:c3:42:7a:
eb:06:6c:02:55:81:ed:6c:70:df:b1:4a:85:b7:13:
56:b5:ca:91:0e:e9:e1:b3:3d:68:15:1d:bb:65:e1:
70:30:34:1e:0e:47:2c:ef:27:2f:22:e9:1c:61:14:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:3A:93:94:3B:58:4D:D1:B9:78:5E:4A:F4:E1:AD:96:C6:98:8C
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:9f:53:e0:69:00:26:63:5e:c5:ef:80:03:60:68:01:1f:
8c:cd:75:80:73:92:97:19:e1:e4:32:70:ed:68:23:64:50:80:
39:92:d2:ff:36:c1:b9:05:f4:03:3b:cf:5f:92:82:d4:4b:91:
18:34:55:62:8b:d4:f0:04:99:48:bc:7c:b8:f8:59:ad:88:19:
c4:4d:8a:8d:1b:82:65:21:07:93:32:c3:be:66:02:8a:01:89:
1b:20:0a:42:ee:33:c2:b2:27:65:ef:49:2f:ad:6d:10:1b:df:
59:35:05:76:b2:e5:ab:b9:e1:b0:34:f6:84:c7:5f:60:fa:12:
b5:c6:6e:97:63:d9:e1:96:60:d8:d8:90:a7:85:2a:89:dd:4d:
62:bf:5a:fd:74:a4:02:ff:aa:70:65:12:db:55:d0:28:ae:f1:
57:73:32:f6:67:ee:4b:43:4b:68:c5:d6:9b:44:11:84:62:a5:
ef:1f:32:f1:68:d2:d2:c5:91:99:5c:73:d6:2d:7b:1d:cc:76:
a7:be:ef:23:84:83:94:3b:27:67:83:18:a7:f4:6f:53:08:08:
b8:87:68:d0:a3:2b:29:80:bb:6a:b2:ff:c5:25:4b:e6:05:30:
e9:6f:e9:d9:62:1e:ff:53:29:9e:c6:95:69:60:ed:10:b2:ae:
fa:46:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:16:58 2026 by rpki-client