Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: yOZ5/XS7mStemV26+aP4XepZFcM6k0tBrVCU/mXiH9Y=
Subject key identifier: 31:A6:FA:0A:7A:93:9B:FC:DE:DA:25:F7:CB:94:DC:10:5C:74:D0:DB
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 019FAB63FB76A830B93AFCE372CE533C9890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 08CF
Signing time: Wed 29 Jul 2026 01:01:24 +0000
Manifest this update: Wed 29 Jul 2026 01:01:24 +0000
Manifest next update: Thu 30 Jul 2026 01:01:24 +0000
Files and hashes: 1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: L1XSOhXse0IfCPMzJVgmD6aPQ/9y/9F/yAW63jQY9AE=)
2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:fb:76:a8:30:b9:3a:fc:e3:72:ce:53:3c:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Jul 29 01:01:24 2026 GMT
Not After : Jul 30 01:01:24 2026 GMT
Subject: CN=31a6fa0a7a939bfcdeda25f7cb94dc105c74d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:99:58:d3:4d:4a:39:8d:3c:c2:a4:bd:1b:
4a:46:61:f2:99:e2:15:ae:9c:da:25:32:b7:05:31:
82:9c:c1:75:45:ab:67:87:90:d0:e7:31:86:26:42:
57:41:02:71:b1:4e:df:bb:f0:97:9a:af:a0:4a:9b:
4d:4b:b2:f9:bc:7d:ad:e7:45:6b:37:66:fe:81:a4:
24:0b:09:b8:83:68:cd:f1:cd:90:f6:00:0d:02:b7:
56:56:18:2f:e8:85:54:51:fd:b5:6e:3a:91:27:46:
08:05:cc:1a:6e:b8:1d:be:eb:bb:18:17:35:14:3d:
59:9e:33:72:a5:98:38:02:9e:a5:fc:4e:c2:92:d9:
11:73:08:4a:c7:d1:00:91:91:10:0c:3b:b7:7e:10:
28:09:d6:ce:90:79:e4:ab:8d:6f:6f:41:cf:43:c6:
b7:11:93:07:9a:d9:bc:8f:30:37:03:be:83:c9:b1:
20:18:0b:a9:c5:35:c5:e7:f1:a8:24:f8:e6:0a:59:
da:18:cf:21:92:e2:cb:70:4a:7f:a5:32:41:b0:8f:
5f:d8:2f:5d:90:03:9d:08:23:df:93:02:21:4b:22:
51:54:f1:bc:61:11:f2:88:71:82:ee:60:30:60:c8:
27:8b:dd:65:99:87:20:b9:0a:d4:e9:74:46:cf:4d:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:FA:0A:7A:93:9B:FC:DE:DA:25:F7:CB:94:DC:10:5C:74:D0:DB
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:ba:83:01:c1:94:6d:2f:65:29:7c:56:84:7a:c5:59:aa:
65:87:95:05:1b:5a:3a:d3:a7:81:77:1a:01:c2:8c:89:7a:8d:
c0:7a:7f:bb:23:c0:b5:30:69:c4:27:00:87:12:4a:49:e7:0c:
61:a2:a7:1b:44:34:25:ee:ce:18:d9:3a:ba:16:17:2f:fa:a6:
f1:a7:02:71:96:9d:1f:5d:07:a4:86:66:62:87:8e:b3:b1:a6:
89:f8:8d:a8:2c:9b:93:80:16:ee:93:e7:15:0d:1f:ab:f9:0c:
19:67:51:8a:7a:86:f9:de:1a:a9:c1:c1:9e:b4:e9:46:0b:e1:
a8:d2:7b:8b:15:c1:b8:6b:cd:fc:fe:0c:3d:c7:b1:f6:8d:07:
9a:0b:3a:b6:f8:22:12:87:01:04:42:13:03:56:a6:50:5c:29:
36:92:fe:62:cf:57:47:61:ea:fa:28:7b:5c:cf:65:f4:c6:7b:
71:e6:3d:4f:40:b0:98:0e:64:28:23:6c:93:bf:42:6a:dd:f0:
b9:83:56:80:d0:1e:86:e0:4c:09:80:b3:44:68:53:ee:a5:9b:
59:59:d6:24:f9:47:f8:65:c2:21:d6:0a:12:ab:79:12:e1:83:
ed:1f:71:04:99:fc:5d:c9:c1:f2:3d:47:a0:f9:67:ae:b7:17:
87:30:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:13 2026 by rpki-client