
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: LB6Az6R+gO/HMp8aTHBMvQEvPvPA1AEsishA4mgzLvI=
Subject key identifier: FB:8A:56:40:4D:F4:AF:B5:C3:2F:56:39:EC:57:23:E2:D1:80:3F:5E
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019FA974B1D33470BEF557240D48B45D61D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 1330
Signing time: Tue 28 Jul 2026 16:00:24 +0000
Manifest this update: Tue 28 Jul 2026 16:00:24 +0000
Manifest next update: Wed 29 Jul 2026 16:00:24 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: ewiCF5CsI8ahvbGDhunNM/xHxj9ac6YldY6JtvLS7sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b1:d3:34:70:be:f5:57:24:0d:48:b4:5d:61:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Jul 28 16:00:24 2026 GMT
Not After : Jul 29 16:00:24 2026 GMT
Subject: CN=fb8a56404df4afb5c32f5639ec5723e2d1803f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:cc:0e:d3:0e:a1:6e:b3:76:7e:89:d0:cd:
67:07:75:e8:ce:65:b8:68:13:1c:67:d9:f8:3d:c8:
7b:3b:30:52:b4:66:21:14:48:53:19:0b:8e:66:0d:
66:ae:63:0c:bc:47:19:d2:fb:6c:e4:2b:f6:9b:26:
a0:39:82:6b:69:d7:df:17:d2:e9:c6:37:a7:00:39:
ee:1b:48:d7:56:98:d1:fc:f0:ad:f0:c2:34:d8:43:
59:c1:d1:bc:48:27:55:e4:ac:37:e4:05:3d:6a:48:
7c:ac:e8:8b:48:5d:78:71:7f:da:31:61:43:65:39:
52:e0:3d:b1:6b:37:cc:eb:8c:da:9f:79:1e:c0:77:
76:23:2f:8d:7b:ea:ce:46:be:22:b5:f7:5a:5e:a0:
b2:76:73:0a:5f:65:0a:b7:59:72:42:40:80:ef:96:
2d:60:ba:6f:6e:59:3d:82:be:c4:ff:38:01:9e:3d:
81:13:88:40:0d:e1:0c:fa:47:22:1c:25:69:78:b2:
a4:f5:9e:dc:19:42:f1:71:9d:59:83:ca:ed:45:a4:
d5:db:b1:b3:34:26:78:62:cc:ed:08:1a:cf:4d:27:
29:02:84:e3:c6:75:d0:ba:49:30:e9:b4:04:e0:c5:
69:e7:66:c4:3f:67:c1:f6:f1:35:ba:70:06:bc:0e:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:56:40:4D:F4:AF:B5:C3:2F:56:39:EC:57:23:E2:D1:80:3F:5E
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:d4:b6:0c:da:9a:ab:10:14:d6:32:e8:1d:03:5f:90:33:
dd:f1:72:32:5a:89:1e:a6:d8:0c:11:f7:50:6b:bf:95:a4:5b:
37:cd:1b:fb:c2:0a:e3:90:c9:1f:a0:51:67:e1:d6:07:f4:31:
aa:d2:c6:11:d6:24:7b:8d:e1:27:56:9f:45:62:4b:fc:f7:95:
a9:c3:d6:5e:dc:fc:9b:c5:9c:7a:5f:20:3f:4b:5b:e2:29:56:
72:68:c2:13:d4:e8:de:8d:04:8f:0e:72:dd:e8:1b:46:80:cd:
a5:43:52:2a:30:9d:e6:85:8e:1b:33:6c:42:72:a7:59:8c:3e:
3d:57:31:cf:a3:49:b3:8d:16:88:97:c6:ba:0d:7d:89:3f:40:
ef:4e:15:cc:1c:66:8d:0d:6e:f8:71:df:0f:21:4d:7f:28:74:
0b:5e:68:f2:5c:a8:5a:50:90:b4:39:df:c6:e3:91:a8:25:6d:
d4:95:05:f7:b8:39:c8:e7:56:5d:e3:44:95:22:94:30:e9:be:
c0:f4:7d:59:7c:fb:48:51:42:0c:77:8f:12:cd:5c:29:b4:34:
f1:87:7f:84:b3:0c:94:3c:92:4c:ee:04:21:be:b8:5d:98:53:
e8:42:c1:a2:ef:13:35:67:cf:b0:5f:ff:41:47:29:6b:b1:e9:
c4:63:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:58 2026 by rpki-client