Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: vTcnzqy3Qe04UeEzRsOywlCSjxI0c1+avvT1QEoZYrE=
Subject key identifier: F4:D8:F2:EF:AC:45:25:99:6A:EE:91:EE:40:11:42:74:F6:8E:46:85
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019FAC7677137ABAFB53401264A0A8D642E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0DCA
Signing time: Wed 29 Jul 2026 06:01:12 +0000
Manifest this update: Wed 29 Jul 2026 06:01:12 +0000
Manifest next update: Thu 30 Jul 2026 06:01:12 +0000
Files and hashes: 1: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
2: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: 8RRaimJNqDkuq5bIDvBgKD8iEzItq714a/KJTSPMJo4=)
3: o14utqHYZFxhZfVEkq-FP4EOMBc.roa (hash: s9KvSuwsAo53TsaYUbZWoSvNDjlPZyPjIsdZ0Auhgao=)
4: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:77:13:7a:ba:fb:53:40:12:64:a0:a8:d6:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 29 06:01:12 2026 GMT
Not After : Jul 30 06:01:12 2026 GMT
Subject: CN=f4d8f2efac4525996aee91ee40114274f68e4685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:8c:65:c7:d6:ff:b1:97:d7:90:64:4f:ce:
0f:bb:25:44:b2:93:43:60:be:98:21:19:ae:3e:24:
00:58:09:10:a7:4e:6a:fb:bb:e0:8d:c3:02:2d:97:
b7:73:56:85:eb:42:63:bc:17:ba:42:e5:76:b4:b4:
92:32:b9:8d:c1:5c:30:3e:60:dc:8d:23:ca:87:67:
92:ae:6f:0f:db:95:23:3f:0d:26:69:1d:73:e3:bc:
4e:12:b8:64:44:56:1f:14:2f:48:22:fc:cb:d9:6e:
04:0e:d2:53:eb:aa:c6:ca:b3:29:8c:25:92:ea:b8:
f5:13:bc:2f:01:01:9f:cc:22:30:78:8f:6f:48:96:
34:0d:34:87:5d:b3:bb:54:20:75:28:5d:ef:93:26:
32:a6:e5:08:b4:b4:01:a1:24:09:ca:ec:70:a1:22:
8c:4d:59:7f:47:dc:c8:53:88:22:b1:eb:6e:89:f1:
f1:7a:cc:c9:cf:bb:be:54:7e:a2:48:b4:93:32:f1:
25:af:68:5e:f5:46:3b:b1:43:0c:06:0d:73:34:eb:
43:bf:37:b5:a7:51:ec:97:8a:d6:6f:cf:93:d6:47:
34:c8:e1:8f:cd:bd:79:7f:f0:85:fd:c2:01:20:6b:
35:b0:1a:40:0f:a0:f7:0e:37:5e:b6:28:7f:fc:17:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:F2:EF:AC:45:25:99:6A:EE:91:EE:40:11:42:74:F6:8E:46:85
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:09:e1:43:b5:73:ad:3a:c2:c8:90:dd:60:9f:af:2f:4f:
fd:64:2a:53:7d:5f:44:03:4c:ce:9a:cd:ae:ba:c1:2c:33:e4:
b5:d0:62:2a:9c:90:4e:a1:b3:28:36:7b:f3:25:61:d9:df:1e:
71:e9:48:c8:5c:ef:bd:4e:66:e9:f7:61:0b:5e:1f:00:9a:62:
df:c3:ad:bb:a9:90:3a:b7:40:10:37:4a:a1:b2:de:e0:b4:e0:
51:e4:e8:98:41:f7:3d:3f:98:5f:bd:d8:67:12:be:0f:16:5d:
ce:67:83:0f:dd:d6:12:90:ce:8b:6c:ae:cd:86:29:e9:24:7d:
45:23:ba:4c:ed:52:50:73:a3:8e:c0:83:ba:16:10:27:69:6b:
cb:99:eb:7b:e9:36:2c:3f:47:e9:ca:fc:cb:20:c2:3e:87:84:
2d:f4:05:b7:09:da:69:60:1f:7b:2e:27:69:30:ee:e5:f8:84:
a2:2d:c2:79:17:45:cb:99:37:d3:af:e6:1e:97:4f:41:4d:18:
3c:b4:f1:20:b4:4e:4a:06:72:3d:f0:e3:73:da:f6:cb:ac:87:
18:60:16:28:a3:85:cd:de:61:e8:6b:b5:e8:a2:98:64:27:94:
ab:fd:c1:e2:3d:ae:d6:81:9f:e2:2c:d9:52:85:bf:2c:b8:04:
1f:47:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:06 2026 by rpki-client