Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: RKtLb4K3XuZlZmU/OAhDydeFsUDstbbSLeg2yKjxk7Y=
Subject key identifier: 0E:04:1E:68:38:81:AC:8D:C1:C0:51:B1:FB:A9:6C:40:F8:40:99:79
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019D9C9A6B26EC05C09BFFA8A2263324D34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 081E
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: GBFKqowiH6bgkQ7rFGISX5s6SvUlGlOpYWn8s5BRX6o=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6b:26:ec:05:c0:9b:ff:a8:a2:26:33:24:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=0e041e683881ac8dc1c051b1fba96c40f8409979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:4c:a2:13:c9:eb:1f:de:ab:02:92:2a:e1:
b4:d1:2e:9d:f0:1c:3a:81:5a:f5:c0:8e:4f:df:bd:
ac:14:ad:82:62:73:09:33:f3:7c:21:89:ae:53:73:
32:2b:05:af:19:65:42:25:37:12:9e:44:87:d1:2a:
a7:1e:c7:36:72:76:46:de:14:63:dd:f7:ed:5e:36:
30:c7:c5:a0:66:89:09:08:8a:20:cf:10:ca:30:0f:
27:d2:e7:31:9f:8e:78:c5:f8:53:7c:d2:e1:03:f3:
90:4f:d6:d1:42:b6:b8:1e:ce:45:a9:ab:a1:95:6e:
b9:38:f2:80:12:31:47:8a:59:d2:48:3b:56:09:14:
75:8c:76:7b:cc:42:1d:6b:46:93:8e:8e:86:12:ff:
5a:08:f0:a8:3c:79:92:c0:e7:9a:b6:3c:e3:42:53:
85:51:9b:63:10:e1:ed:1a:5e:28:88:9b:62:e2:02:
80:5d:29:93:a3:d7:47:ba:86:da:d8:8a:2e:e7:df:
70:5d:2c:b2:e7:57:bd:02:4b:41:87:e4:c4:03:a7:
e4:bf:f9:b2:8b:69:cd:5b:8b:21:67:47:e2:f7:f5:
f2:5f:8e:74:3e:b2:2e:21:f0:e0:aa:3f:99:b7:6c:
c2:e5:63:fa:1e:b4:88:ce:22:b9:2f:24:35:4d:ae:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:1E:68:38:81:AC:8D:C1:C0:51:B1:FB:A9:6C:40:F8:40:99:79
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:8c:35:d3:1e:1e:1b:0b:08:97:a7:06:f2:3e:5f:d3:22:
10:b2:77:83:5d:9f:c7:12:93:fe:00:39:5d:1f:04:a2:c0:40:
e0:9c:09:5d:cc:7c:57:94:18:80:26:4e:33:bb:3d:b3:82:2c:
3e:24:62:98:e3:90:c1:d8:ed:15:54:9d:a8:65:14:88:42:e4:
b1:68:c1:88:15:74:f9:6d:29:13:02:f4:b3:dd:1a:b5:a5:a3:
a3:81:38:2c:39:c5:3a:84:6c:8f:d3:b4:72:53:cb:08:5e:5a:
de:28:aa:ab:2e:11:bc:24:c6:35:72:03:84:dc:db:8f:27:7f:
9f:36:5a:d7:97:c6:88:ba:1b:ff:e4:d4:89:38:bf:0a:4d:a0:
b5:fb:48:58:04:ed:43:8d:f1:48:c0:cc:49:e2:f9:00:50:be:
35:04:c5:6b:9d:9c:df:ae:2e:25:01:9a:cd:75:50:34:8f:f7:
81:74:d3:fd:b9:0f:f0:74:c9:13:84:0a:a8:c2:55:07:50:21:
1f:da:a7:a6:71:6b:6e:5f:77:3a:6f:c6:b8:90:0c:d9:81:3c:
87:4d:f2:3f:ea:58:e9:1b:17:48:cc:6d:a4:50:80:0f:56:56:
a3:a2:55:d1:fc:38:27:54:ff:36:bf:f7:16:1e:02:ea:b3:6e:
da:08:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:55 2026 by rpki-client