Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: t3krupE2nhspt8G+M5b19Hnkjv5A0hZez4an7xI7gvY=
Subject key identifier: 33:2D:45:D3:54:03:AF:8D:6E:74:06:AE:06:D5:9F:BF:A1:C4:CB:AB
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01A0D7CBD36C496161927766B03D6E71CAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 17F4
Signing time: Fri 25 Sep 2026 09:00:54 +0000
Manifest this update: Fri 25 Sep 2026 09:00:54 +0000
Manifest next update: Sat 26 Sep 2026 09:00:54 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: zMMDeqCvZGxlCoSXA9GQP7Z9D2btLYT5gQ0nVvkLsB0=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d3:6c:49:61:61:92:77:66:b0:3d:6e:71:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Sep 25 09:00:54 2026 GMT
Not After : Sep 26 09:00:54 2026 GMT
Subject: CN=332d45d35403af8d6e7406ae06d59fbfa1c4cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:a9:87:43:cc:c3:59:95:b8:7f:b2:43:c7:
c9:28:60:39:7e:a4:0a:3e:da:1a:8f:76:35:b6:ba:
07:86:47:3e:d1:4f:cd:56:7b:0f:00:f7:15:72:18:
dd:36:93:f2:6a:14:6c:ef:9e:ea:8f:19:d5:91:ae:
a0:5b:70:eb:4e:51:76:ea:36:f0:a2:30:6c:b0:2a:
0c:ef:ec:88:a8:f0:82:ce:91:0a:a6:11:48:c7:9e:
75:90:a4:fc:5e:fe:84:ea:0f:aa:7a:7c:51:f5:f9:
3c:46:eb:d1:01:17:08:3a:25:de:71:dc:cb:78:d1:
fd:f7:6b:c4:ba:e7:fb:4c:56:c5:cd:8a:a0:e9:52:
c7:03:ab:94:03:31:ce:bc:09:bf:f7:b3:1b:25:16:
80:38:33:9b:9e:95:6d:f9:7c:e5:cd:3f:24:10:a1:
d6:21:dd:51:54:2f:b4:17:52:dd:eb:67:98:ba:d5:
af:95:37:31:66:0b:00:af:e7:a6:8d:2c:75:f0:fe:
e8:37:0a:65:52:37:8c:b6:8b:6d:77:d9:11:3e:c7:
57:2a:4e:6d:c5:02:99:24:6d:7e:a9:77:0b:90:73:
eb:f6:45:93:23:47:94:92:7e:a8:42:98:f4:c0:66:
d6:0f:d5:e4:99:33:ba:6c:5f:3e:3e:74:12:cc:62:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:45:D3:54:03:AF:8D:6E:74:06:AE:06:D5:9F:BF:A1:C4:CB:AB
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9f:1c:79:70:6c:1c:a0:14:cc:1a:a5:d9:76:d1:cc:1e:f7:
a3:47:13:e1:20:77:61:3f:47:39:9f:af:1b:dc:90:6e:8a:9d:
27:19:19:be:da:09:3e:e8:e0:96:b5:cf:94:61:2e:04:7f:65:
16:18:4e:4f:aa:13:e4:0a:1c:83:83:e3:33:59:0b:a2:cd:47:
57:53:da:9d:e6:40:0f:a3:20:50:ba:a5:5b:89:06:14:1d:1b:
5a:21:74:50:25:73:39:9a:b9:5d:6d:8b:85:7a:53:74:56:5b:
27:ea:c6:58:a7:30:85:4b:d4:b8:0d:54:ef:2f:32:0c:54:e8:
80:88:cc:30:71:71:34:f0:d1:73:6d:b2:cd:d5:17:67:5a:da:
c0:c3:80:8c:1f:4a:52:a4:de:49:6e:b8:cf:2d:aa:63:be:e3:
64:88:f4:23:ca:4a:43:94:ac:d6:b6:26:7f:17:c2:ec:4c:4a:
82:f4:19:cd:6c:1d:12:7c:c7:26:87:94:68:1f:2d:b9:23:e3:
b9:3c:83:a1:3c:2b:ef:0e:2d:e0:fe:b5:b0:72:74:51:a8:79:
a7:d1:be:bc:f2:02:f5:e0:c5:ba:aa:63:08:85:f5:78:f4:ee:
7c:28:f9:fe:64:a9:d4:a3:67:04:3f:e1:ad:06:6d:0c:72:af:
43:6c:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:17:09 2026 by rpki-client