Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: vcWMzOkhAmHUbVekOQWqxWJhjKOEWHZVisL92e3VDTw=
Subject key identifier: 6D:55:0B:46:C5:F0:10:B6:C2:56:B0:54:E2:98:6E:CE:34:F2:8A:80
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019FA9E2EBBB4BD94403451F81916FF1AB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 092E
Signing time: Tue 28 Jul 2026 18:00:48 +0000
Manifest this update: Tue 28 Jul 2026 18:00:48 +0000
Manifest next update: Wed 29 Jul 2026 18:00:48 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: h8+LmKtpLtGl7ndUa/hPfToYXC4pOnHnFqsElYbPEPU=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:eb:bb:4b:d9:44:03:45:1f:81:91:6f:f1:ab:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jul 28 18:00:48 2026 GMT
Not After : Jul 29 18:00:48 2026 GMT
Subject: CN=6d550b46c5f010b6c256b054e2986ece34f28a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:c7:f1:84:65:5e:f1:ce:b4:d3:ad:a2:07:
8b:7b:86:bd:2a:d8:50:e1:d4:1d:c8:e9:5e:73:51:
92:61:00:dc:08:ba:60:c0:5a:e8:e9:22:41:db:1a:
02:40:3b:57:ec:6f:b1:53:30:d4:52:ce:82:82:ac:
71:dc:1a:56:9b:ba:f5:5c:c0:f0:1d:ee:53:c4:22:
a3:7e:ef:97:95:c6:ca:20:96:15:71:2d:d1:f9:23:
ef:5f:d6:a7:15:16:df:99:c7:c5:53:e8:05:5a:e1:
17:cc:c5:45:ba:1f:ed:cd:7d:63:38:b8:af:26:1c:
02:5a:f3:54:d3:dc:e0:b8:64:fa:99:86:2f:ca:57:
70:2c:7c:86:c4:ee:81:7d:0b:a4:d9:e3:f0:df:f2:
a0:40:02:30:e8:6f:48:2b:b8:b7:42:ed:a8:f1:88:
ef:34:90:89:24:13:a8:49:43:4f:f3:14:58:01:84:
4e:c0:30:72:5c:35:98:8f:06:7c:34:01:63:de:f3:
99:66:82:b3:2a:38:c3:d8:f5:81:ec:63:c9:6e:b8:
31:73:b2:48:78:08:19:16:46:a0:86:ee:63:8d:4f:
28:96:aa:ed:47:31:5b:5d:73:8d:74:b6:13:52:41:
b0:52:93:7e:eb:b2:8e:49:f9:db:72:e4:46:48:5f:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:0B:46:C5:F0:10:B6:C2:56:B0:54:E2:98:6E:CE:34:F2:8A:80
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5a:27:25:3d:03:ef:2e:10:38:62:c9:c9:55:78:ed:ac:ca:
9e:61:bb:f4:ec:9a:7e:e5:34:45:25:65:0b:fd:f4:41:50:eb:
41:44:a0:d9:cb:6c:f1:36:4d:f1:ed:8b:c9:66:74:40:ed:a8:
2e:57:fe:e9:ca:0e:0d:b7:e3:91:05:9a:f0:fd:c5:36:60:f3:
0e:2c:bd:f9:4a:77:aa:c1:90:7e:8e:7d:07:4c:14:ad:ce:96:
b9:3b:80:5b:76:60:d2:c6:43:c4:72:d5:56:9a:59:56:f5:e3:
f7:a0:5c:5c:47:6d:de:0f:f8:12:a5:73:5c:48:6f:71:0b:a1:
ec:97:d7:9a:4b:3a:cf:7f:f2:7d:05:33:8d:eb:99:01:31:6e:
58:68:0c:e1:38:27:03:21:8f:8c:12:c1:d2:69:a3:9c:92:28:
7d:85:0a:b1:58:c7:ea:d0:0e:3f:ca:51:5f:86:29:52:3f:72:
28:8f:39:7b:52:71:85:af:ec:f7:7d:f8:23:d5:86:76:25:b9:
d7:ac:31:0d:4d:13:d7:54:e1:ac:a6:d7:6a:57:f4:af:a8:25:
ee:b9:eb:35:b4:f9:cb:d4:5f:5a:98:3a:bc:07:25:ad:b3:00:
a2:87:18:ad:1d:87:e5:83:a4:94:ff:25:b2:56:66:69:4d:c9:
8f:6c:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:43 2026 by rpki-client