Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: wrdbue5KFLqhklXPLDN6vii15aZv1jLcesRVxYTShtY=
Subject key identifier: F0:51:3D:28:40:2E:40:5F:91:18:1D:FF:F0:2F:8E:5E:20:70:D1:43
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01A0CC6C6F5E88A7763650D76A4E76CF2DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 19FB
Signing time: Wed 23 Sep 2026 04:00:53 +0000
Manifest this update: Wed 23 Sep 2026 04:00:53 +0000
Manifest next update: Thu 24 Sep 2026 04:00:53 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: vsxozCZjvPwlA9oqy5PNFdh5jXOel58e2pStLaW8di8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:6f:5e:88:a7:76:36:50:d7:6a:4e:76:cf:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Sep 23 04:00:53 2026 GMT
Not After : Sep 24 04:00:53 2026 GMT
Subject: CN=f0513d28402e405f91181dfff02f8e5e2070d143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:db:dd:73:56:2c:7a:67:f2:98:2a:4a:24:
9b:d1:b4:f2:24:17:97:36:7f:1b:fb:bc:86:24:8b:
7d:70:f2:fe:d7:7a:32:18:87:8e:c0:15:93:f1:f2:
5c:20:7e:15:98:5c:2d:0f:d0:fe:cb:d9:40:70:3d:
93:7d:51:02:94:a3:1b:a1:3c:ea:d8:97:cf:7d:ce:
76:f5:ad:96:8d:da:48:3f:af:b4:1a:f9:75:cb:da:
9c:60:ed:0b:57:34:e5:ad:10:41:4d:9a:1b:8e:f7:
f6:a7:61:8f:11:25:5b:5a:8c:3d:d8:f2:5e:7e:eb:
b0:b4:5a:ef:dd:9a:4b:bc:0b:9e:d8:54:3f:cb:18:
1c:e7:54:d7:9d:b9:92:cb:80:bf:22:13:3b:8b:59:
94:ef:4a:c8:26:38:0e:6d:b5:b2:8a:07:72:b9:b2:
59:50:36:15:cd:4f:a2:60:21:fb:05:46:e6:82:95:
cc:5c:13:9b:b7:96:90:ef:d2:39:b7:a3:73:b1:a2:
89:df:d4:fd:7b:a9:aa:c8:f8:51:f0:01:47:db:cd:
ea:d1:1c:e0:1b:60:ff:53:0d:c6:f2:f7:81:e1:f4:
e8:55:22:64:30:e8:a7:91:5c:d3:7c:08:a3:ca:7a:
28:fb:dd:73:c5:e0:c7:ce:3a:a3:48:fd:1a:96:12:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:3D:28:40:2E:40:5F:91:18:1D:FF:F0:2F:8E:5E:20:70:D1:43
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a0:4f:a5:b4:43:d6:75:1e:be:22:00:32:db:2a:c0:47:cd:
43:ff:a9:59:5d:fb:42:2c:4c:cb:b3:87:c1:72:e3:7d:24:99:
92:8e:3e:bb:48:1c:72:2a:74:30:42:29:9c:c5:87:42:1c:82:
69:fa:57:05:ae:ca:b6:19:f5:54:75:97:49:2b:9e:b8:6f:52:
82:38:dc:14:a8:4c:dc:c2:47:b5:ba:b4:ea:fd:07:9e:4c:5b:
18:3d:f4:26:08:22:c3:5c:dc:24:07:b6:5c:d6:ff:b5:d0:1f:
f2:08:9f:61:fb:04:0a:a7:d7:0b:39:b1:95:db:a1:e3:9a:ce:
6b:dd:f6:17:b2:f6:9e:3b:93:e9:d4:1c:92:28:33:8e:1b:32:
4e:e3:85:4b:d8:00:e5:a1:f2:d3:7e:1c:1d:7d:3a:1f:cd:12:
88:0d:30:2f:ee:4d:ef:2f:ff:a8:31:85:7c:50:63:40:63:63:
b1:97:c7:61:35:82:a4:42:b1:f8:72:70:9e:ae:4d:00:6e:f8:
8b:02:27:f8:a3:2e:ab:04:3c:42:8a:bb:67:3a:2a:8c:dd:26:
68:78:fd:a5:60:45:97:1e:4b:90:65:76:ae:ff:6e:ab:ce:e2:
3b:c1:5e:54:5b:ff:52:14:71:af:71:eb:08:aa:d0:98:d7:c4:
9b:af:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:42:11 2026 by rpki-client