Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: kqrVafBnj+BYIuTp8ibjMKC+3kL97vgFz30IOggz6bc=
Subject key identifier: 79:65:69:7A:2C:E6:49:B9:EB:90:9A:0F:DB:C2:2F:2A:42:4F:8B:43
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01A0DA28B1B71643B7AB20E870E7DD6B64B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 093F
Signing time: Fri 25 Sep 2026 20:01:35 +0000
Manifest this update: Fri 25 Sep 2026 20:01:35 +0000
Manifest next update: Sat 26 Sep 2026 20:01:35 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 12xfyu9BM8GYBtVndQGoFApO3BJBmuhL/dX9GwjRQuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:b1:b7:16:43:b7:ab:20:e8:70:e7:dd:6b:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Sep 25 20:01:35 2026 GMT
Not After : Sep 26 20:01:35 2026 GMT
Subject: CN=7965697a2ce649b9eb909a0fdbc22f2a424f8b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:e4:f9:8e:7b:ec:62:ce:7a:52:d5:fb:a9:
66:09:5b:19:9a:9b:4a:88:fd:61:95:78:f7:ff:8f:
b1:66:8b:43:c9:f0:0d:5a:0c:1c:76:8e:2e:32:93:
37:39:d1:9e:44:f3:7c:1d:8e:10:63:04:99:dc:c2:
57:f2:19:56:b2:3c:de:8b:32:54:e6:6f:e0:09:07:
d4:a4:a2:3c:4b:89:53:e6:d1:d8:42:a6:4d:25:eb:
75:af:d0:81:ba:9c:9d:f5:72:ea:94:08:11:d8:db:
ca:49:63:f7:f2:13:32:58:d6:47:c2:31:52:8c:25:
6f:26:8e:ac:ee:d4:8f:ae:da:54:d3:2a:3d:a6:d8:
7a:18:9a:74:60:3e:c5:35:66:ad:52:2e:0e:80:2e:
c3:28:ea:b9:1d:6d:90:11:f6:ab:91:96:7d:ac:72:
c4:11:c1:40:88:d2:0d:a6:57:7a:f0:e7:af:3a:a1:
43:c5:09:68:c4:12:0b:5a:f7:88:27:89:0c:f1:7d:
0b:bf:3d:9b:b7:7c:72:e0:fd:8f:75:36:63:fb:b5:
15:b8:7b:7c:da:88:73:0b:97:2b:43:90:6c:dd:32:
b7:fc:b5:22:50:43:5e:dd:c1:da:31:82:ca:a2:88:
14:e3:8b:8d:a5:6d:23:80:85:55:62:23:ac:a1:21:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:69:7A:2C:E6:49:B9:EB:90:9A:0F:DB:C2:2F:2A:42:4F:8B:43
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f6:46:f3:0b:db:17:c4:83:6b:c3:71:4d:e3:ce:5d:46:15:
07:e0:58:9a:18:3b:60:37:16:01:5b:cc:49:db:32:c6:0b:4f:
99:07:e0:bf:12:06:ba:4d:b1:5b:61:12:03:54:42:14:fb:93:
ca:45:9b:23:4e:11:2c:bc:c1:47:6e:20:7a:0a:f8:e6:62:be:
f4:06:cd:4a:f7:f0:e0:5f:e0:5e:ac:26:b4:06:8c:2b:8d:53:
36:2d:c2:ee:da:7c:85:2a:74:23:1c:cb:69:9d:93:96:32:bd:
5c:c9:cd:da:15:37:4c:d6:d0:71:a3:75:71:a2:11:a0:9c:dc:
a9:8a:ba:76:83:e3:60:6f:87:3a:50:13:cb:45:d9:aa:42:ee:
31:ae:d2:7e:f4:7b:f7:3a:af:fe:5f:28:e8:99:b3:37:c6:57:
e3:e1:34:22:87:87:c9:84:9e:2a:44:da:0d:48:66:8a:7c:2a:
ff:8b:6e:c7:1e:99:81:84:17:f0:e3:ca:99:78:59:8d:51:ea:
2a:ed:31:e2:e6:99:eb:5f:e7:d1:a0:63:1a:06:70:21:7a:06:
e5:49:b7:b1:65:d4:5d:2c:a6:29:5d:2d:f0:c0:e7:6c:ce:9f:
96:38:70:d7:43:5c:5b:1b:ae:59:2a:15:f4:8b:8f:43:48:2e:
9d:1e:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:26 2026 by rpki-client