Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: h7kuJjaFKStm3DLSSGhXRrfy+Jmeyz4FQZb7+wMdbiU=
Subject key identifier: 79:26:FA:1B:34:EB:AE:43:2F:89:38:84:0D:71:2B:88:92:B1:2A:C3
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 01A0CFA4413223EEE8197586A3D43445B990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 0428
Signing time: Wed 23 Sep 2026 19:00:43 +0000
Manifest this update: Wed 23 Sep 2026 19:00:43 +0000
Manifest next update: Thu 24 Sep 2026 19:00:43 +0000
Files and hashes: 1: AFumXuOXKbFW_VkGOp5C3uN9vdM.roa (hash: aE6C4dtIcbKwEv5eXKa14vptksNPYJV0xnZklbhvP6E=)
2: Y4PPIpkii_K_B3es2z2wg-o0K4g.asa (hash: E0zhRt7/fWPWPotvek7QQ9QAuuv2LHcZSkRznjzV2UQ=)
3: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: qBC8vZfQUqKz8B1+Y5CFvm0pM27grvMBXC9soqwd3xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:41:32:23:ee:e8:19:75:86:a3:d4:34:45:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Sep 23 19:00:43 2026 GMT
Not After : Sep 24 19:00:43 2026 GMT
Subject: CN=7926fa1b34ebae432f8938840d712b8892b12ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:9c:c5:25:9e:54:89:ae:78:8d:9e:b7:90:
bc:56:dc:69:fa:76:a2:51:1e:e0:01:5b:16:c5:f2:
8e:a9:e0:65:8e:dc:b4:7f:16:29:df:53:70:3c:d0:
31:f1:0e:58:c1:3f:f6:e5:ed:22:48:a4:09:61:85:
33:b8:c3:59:08:2c:16:fc:d2:c0:d8:d0:93:ed:9a:
3e:23:41:2c:00:fb:b7:6b:16:4a:7e:a6:a9:4c:a7:
48:28:2f:f4:c0:32:4c:85:92:eb:de:75:22:c2:ec:
e0:25:4e:06:94:68:e5:8b:91:62:e3:d2:98:60:29:
4d:3c:e3:10:0d:83:1b:c7:62:41:f3:e6:bc:23:60:
32:47:d0:a6:29:98:24:5d:d6:a6:11:34:57:f2:8e:
56:5a:02:f7:38:46:49:c5:05:9f:87:81:75:2a:ab:
98:cf:d4:36:ee:4f:b5:86:bc:f5:d1:bf:ff:0d:d4:
bc:af:03:b4:22:7b:41:f3:59:8d:8f:90:67:7f:9e:
0f:09:e6:ce:19:0d:f6:4a:4e:73:48:26:ae:6c:a5:
a6:2f:fc:bd:ab:1b:1b:8d:9d:55:de:b1:1f:06:9a:
90:79:83:50:73:e5:3e:0f:4a:fe:f5:ef:b7:24:ec:
54:e0:86:5c:3a:68:e3:ce:6c:a4:5e:de:18:12:2b:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:FA:1B:34:EB:AE:43:2F:89:38:84:0D:71:2B:88:92:B1:2A:C3
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:00:c8:a6:fa:c7:6d:3b:55:8e:19:3e:44:ee:31:37:f8:b7:
37:f1:d4:d6:2f:c2:29:7e:cb:1a:bd:45:b5:6b:71:71:c4:2e:
a8:d0:8d:80:ee:4e:46:03:3b:62:62:a6:8e:b3:a4:d2:25:72:
2b:c8:ec:45:35:26:44:a1:49:df:76:9b:72:66:1c:8f:47:6d:
62:9e:80:65:b3:ab:86:f2:ab:40:03:18:3b:21:40:91:26:15:
29:f6:f3:e0:f8:1e:66:23:9c:72:8b:ae:16:ff:39:90:ca:8b:
5c:35:7a:86:81:33:f1:b1:6d:a0:ed:13:5b:5a:1d:5f:bd:71:
90:1a:7d:12:89:e0:e8:75:13:5b:3a:b4:93:bd:7c:20:50:96:
86:40:56:2c:60:5d:90:89:13:1b:8f:0b:1d:b1:99:69:c2:af:
4b:5c:79:da:8f:13:17:cd:df:cd:9b:bf:c8:96:8f:f9:e8:9c:
fc:6d:45:6e:81:49:33:6b:b7:32:13:7e:d0:ef:a4:cc:78:a4:
b1:9e:fa:75:5c:a3:c1:e9:c3:8e:4d:3e:c6:05:0b:84:0c:63:
40:7b:c5:0d:7f:17:53:70:33:9b:1d:0a:a1:31:b3:83:db:64:
58:a2:65:00:1a:f6:00:99:8b:d5:d9:92:bc:ba:95:ed:4f:d1:
83:4a:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:56:32 2026 by rpki-client