Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: dGwfbtp1Oz1Q9W5pScpUcDe8AlbnVifu/iw0qdcuMK4=
Subject key identifier: A8:DC:76:14:4B:6B:98:F3:A7:72:FD:1A:5F:E0:58:0F:44:D3:B8:A9
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 01A0E62D30C61F648FA8B52332AA719841B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 04:01:56 +0000
Manifest this update: Mon 28 Sep 2026 04:01:56 +0000
Manifest next update: Tue 29 Sep 2026 04:01:56 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: yokXUssxX947P1YPTqnCSqA/eekitMYbu6ZMw7+Ee9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:30:c6:1f:64:8f:a8:b5:23:32:aa:71:98:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Sep 28 04:01:56 2026 GMT
Not After : Sep 29 04:01:56 2026 GMT
Subject: CN=a8dc76144b6b98f3a772fd1a5fe0580f44d3b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:44:c0:57:01:87:c9:aa:9a:4e:35:f9:1e:
44:09:52:ab:dc:4f:63:4a:b0:c0:52:75:f6:71:57:
3f:f6:26:17:d8:11:d8:f2:56:e8:24:3f:4e:f6:8a:
16:32:07:58:6e:5a:b9:69:d7:8d:91:2f:cb:94:13:
cb:7e:bd:36:c7:5a:6a:ca:5e:55:cd:48:a0:6c:ef:
65:d0:a1:69:4c:4d:3a:f8:13:14:12:e7:de:72:2f:
ab:09:c8:6c:b1:bd:cd:8a:a6:e8:fe:78:ce:a4:26:
b2:1e:35:3e:f7:00:72:ab:f5:8a:1d:c9:7d:cd:3d:
d8:e5:06:76:19:71:c6:c3:0e:70:86:d4:ec:e5:0d:
ac:70:4c:32:38:59:61:73:3c:41:6d:3d:33:ba:71:
a3:3f:2e:02:8d:2b:29:6b:11:d5:ff:eb:ca:73:a3:
85:0b:1b:3c:3f:81:ae:aa:71:72:35:6b:ed:2c:cc:
32:04:78:77:fd:7a:8f:ae:48:ee:fb:02:34:e5:cf:
5e:ed:9f:07:dd:8d:6a:dd:2a:d2:d7:45:be:8e:b9:
be:c3:2b:14:ae:be:43:5e:34:52:9f:06:d3:f6:f6:
fa:57:46:16:c5:31:b8:53:a6:5b:9b:17:a9:d5:c2:
3d:4b:a2:7a:18:a6:6a:fb:e9:f2:f7:c3:dc:e9:c5:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:76:14:4B:6B:98:F3:A7:72:FD:1A:5F:E0:58:0F:44:D3:B8:A9
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:27:ee:8e:ca:aa:7c:d8:39:da:b6:2c:cd:66:30:5a:7a:
30:b4:b7:a0:04:d2:91:56:96:e4:81:76:74:e0:b7:3f:ab:90:
62:87:2b:0d:55:2e:d7:39:21:e6:23:15:93:6b:7a:5b:0a:08:
31:50:8b:c7:76:82:b5:db:14:b0:72:5d:45:b6:8d:72:75:1a:
3d:f3:64:bb:fb:74:04:13:87:7e:c1:a0:59:ec:b2:f5:58:2e:
51:62:e6:83:52:7e:02:48:14:b8:af:eb:0b:17:64:7e:79:3e:
51:d1:f8:c7:e8:81:af:3e:f6:21:ed:0e:00:dc:bc:a2:95:3b:
61:92:a7:03:9f:c0:20:4e:10:0e:91:5a:ac:f9:51:f2:aa:2a:
61:fd:7e:a0:ae:a4:fc:b2:e5:69:c8:07:b4:3b:38:f4:e6:20:
73:12:b9:5b:1e:24:13:c6:76:73:fe:4d:d9:58:e3:13:21:90:
ca:d6:ef:dd:ca:20:49:cd:20:95:4e:80:52:4d:07:1d:83:67:
0d:96:4b:f5:2a:fe:8b:b0:c4:5a:bb:a2:80:aa:38:83:5c:9a:
6a:e9:b3:aa:e5:cc:a5:f3:3c:e3:9b:d7:a5:a6:fe:d2:c5:e3:
6a:a8:af:9c:d8:76:1a:1a:58:c0:1d:0a:eb:94:9d:bf:17:3a:
23:7d:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:35:12 2026 by rpki-client