Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: u+orpQzdNW3S86tdyg1SdH4HLGnVDk8eUgYkPc/+s4Q=
Subject key identifier: 2A:FF:2F:C6:BD:51:92:50:B0:F1:8F:C9:AC:CC:3B:65:4D:C5:8A:18
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019FAABE2E7AC4E32A7C16F1BDD93174DBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 22:00:17 +0000
Manifest this update: Tue 28 Jul 2026 22:00:17 +0000
Manifest next update: Wed 29 Jul 2026 22:00:17 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: TgR/bgwFEuK0mdMh1beNvg9v/jy9GC/cVeKmW48Su5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:2e:7a:c4:e3:2a:7c:16:f1:bd:d9:31:74:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jul 28 22:00:17 2026 GMT
Not After : Jul 29 22:00:17 2026 GMT
Subject: CN=2aff2fc6bd519250b0f18fc9accc3b654dc58a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:31:39:0b:7a:dd:78:3e:88:c0:16:39:6d:
d6:29:1b:d2:11:1b:08:f1:6b:7c:da:4a:ef:a6:b4:
1c:9c:c2:a2:ed:9c:bf:e9:c4:84:f6:dd:87:71:2b:
97:43:50:be:7f:c0:df:3f:34:80:c2:d7:48:c2:6d:
ef:41:2b:d8:a6:b3:61:d4:43:c6:8f:a4:6d:5b:8a:
80:87:06:25:55:87:ed:b4:dc:6d:44:26:9d:57:cb:
f4:69:42:b7:bb:33:14:fe:16:cb:84:ab:2b:b2:21:
81:b6:dd:82:b6:1e:b3:e4:d1:84:d2:89:dd:12:63:
c8:d9:87:df:89:ec:f8:ec:3a:22:31:76:a0:f4:58:
3a:cb:85:cd:b0:ef:eb:30:33:39:55:05:07:30:d3:
88:36:4e:44:86:63:18:d9:fd:9e:73:a8:df:e0:de:
98:97:ea:1a:c1:12:6d:a8:73:d2:21:c5:96:15:73:
ac:e0:d9:be:0f:3c:15:c3:33:79:61:88:f7:25:a9:
42:3e:2d:14:21:2f:3c:89:18:39:25:c5:4f:91:e0:
5d:b3:bc:33:57:43:24:67:c3:31:36:52:81:15:09:
73:2b:6f:11:f0:69:0d:48:36:8d:4e:c5:48:b6:7e:
75:96:0b:7c:89:05:e1:ce:7a:1b:46:e8:b0:7a:cc:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:2F:C6:BD:51:92:50:B0:F1:8F:C9:AC:CC:3B:65:4D:C5:8A:18
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:22:41:f8:15:1d:42:6c:7d:aa:aa:17:18:27:b5:d2:3c:fa:
6d:09:f9:fb:a8:6b:88:51:24:4c:07:1e:c1:56:fc:2b:7a:fc:
4c:8b:43:59:c9:ac:bf:32:49:6e:c1:c7:d5:ee:74:56:33:a7:
70:1a:b1:28:17:bf:db:b5:6f:60:e2:1a:4d:49:7f:63:11:b9:
4d:1e:60:ed:fc:1f:a5:aa:78:b4:47:42:e1:41:23:10:b9:bc:
7c:b8:33:7b:b0:81:c3:d3:c4:f1:96:fe:c2:17:dc:58:2c:ca:
03:aa:03:54:e9:04:50:88:5d:24:eb:38:f8:b7:db:da:d2:5a:
0b:1e:17:8e:b7:b4:44:59:a2:63:ae:68:9c:fb:9e:93:e9:4f:
ba:93:3d:43:71:e7:bb:e8:4d:e3:86:c5:f7:4c:89:81:a2:ef:
26:0f:77:9f:b8:d2:36:ef:e5:60:d2:b7:1f:9c:98:88:2e:32:
07:6f:de:e1:1e:2b:8a:c8:7c:a4:d9:a3:a3:fb:41:bd:b6:e6:
11:72:09:4f:98:79:4e:21:30:bb:a0:66:f6:9c:06:dd:b2:d4:
88:38:fb:55:e9:5b:19:95:00:34:9f:66:b9:4a:ff:af:40:21:
0e:a1:f5:77:8b:a0:7f:ce:f9:fa:9e:f8:ee:81:c5:80:9a:7b:
e2:15:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:34 2026 by rpki-client