Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: Lbsv+mO15glCyVL2KoTta2awJhYpDPfzyI7iCDLiab8=
Subject key identifier: 79:EF:73:DB:14:3D:E6:4E:7C:F5:D8:12:C1:3D:4C:9B:D2:09:65:F4
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01A10692E99990E73118A597C63F6C1A42A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1A1A
Signing time: Sun 04 Oct 2026 11:00:53 +0000
Manifest this update: Sun 04 Oct 2026 11:00:53 +0000
Manifest next update: Mon 05 Oct 2026 11:00:53 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: w9jLvLURnDJfOw2p634BnAOZOJAs4t6cViSIqKoDU4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:92:e9:99:90:e7:31:18:a5:97:c6:3f:6c:1a:42:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Oct 4 11:00:53 2026 GMT
Not After : Oct 5 11:00:53 2026 GMT
Subject: CN=79ef73db143de64e7cf5d812c13d4c9bd20965f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:29:65:76:ea:c4:30:16:2d:e9:29:cc:25:
f0:f8:68:66:dd:ec:03:5b:af:f1:85:7f:e3:24:7c:
36:6f:24:f7:59:c5:c7:00:b6:c7:5d:65:d1:b2:20:
99:21:ac:6a:4f:60:59:69:11:59:0c:90:55:73:69:
d1:2a:fd:b9:65:46:79:c2:0e:fd:71:df:4b:f0:42:
df:0a:b2:77:78:49:71:e9:f2:6e:b9:94:01:b4:16:
65:e0:c6:bb:cb:d1:c6:80:41:fc:a4:cb:d9:f8:09:
78:96:18:f8:ef:85:e2:c1:99:38:39:09:7d:69:de:
5e:ca:50:fa:81:54:89:1b:fb:e1:ed:ba:13:c2:4e:
75:b8:7d:bb:5f:57:bc:df:11:a9:04:32:f5:ae:f9:
8a:3f:e4:f9:3e:5c:32:a1:2d:98:b3:b9:cc:e4:24:
5d:da:50:1c:5c:54:02:5a:b2:6a:f1:28:b7:f4:62:
9a:bf:6a:0d:2d:db:c2:e3:6d:97:97:d4:cc:bb:64:
10:a7:3d:89:fa:33:dc:d3:7c:53:ae:1e:2c:1b:7b:
d7:a5:fc:af:d8:2f:03:98:de:2f:16:c2:81:d3:0a:
61:19:10:a8:1a:d9:99:be:27:f6:87:40:f0:7b:c6:
55:2a:d5:e5:d9:86:a0:73:eb:c2:29:85:8e:95:94:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:73:DB:14:3D:E6:4E:7C:F5:D8:12:C1:3D:4C:9B:D2:09:65:F4
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e5:82:e8:44:f1:f7:4c:86:c9:5f:55:66:6c:e4:1f:98:67:
47:b4:22:2a:8c:e1:df:9d:47:79:38:54:ec:37:79:fb:39:26:
36:bd:a1:73:b0:f5:b4:19:bd:fa:52:db:e0:4d:2c:9b:a6:f8:
24:90:df:95:77:c6:6d:1e:41:23:23:5f:e3:0a:d1:2e:04:8d:
87:68:3c:b4:43:a7:6a:a2:05:f8:05:f8:a0:9a:8f:3d:10:14:
cc:54:fe:e3:4b:4d:d1:2e:13:54:27:17:7f:cb:16:5f:23:87:
31:d3:06:19:a0:42:1d:35:c9:4f:f8:f1:1e:b5:bd:15:56:ed:
4f:69:50:7d:35:5c:89:3b:c1:df:d7:06:8e:4e:21:7e:76:2b:
e7:47:6c:dd:5a:a7:b1:90:f0:0d:a9:1f:e1:cc:73:4d:94:c3:
43:9c:c3:e8:06:e0:db:8e:d5:78:f1:99:b6:51:ce:48:a2:ee:
26:b9:3e:d8:53:05:1b:3a:55:c6:e0:ff:74:f2:c3:f0:86:da:
6a:86:92:89:af:9a:e0:b9:23:97:cd:1a:73:dc:f8:6f:81:1b:
60:43:1a:27:e2:74:47:7b:3b:1d:ae:ee:68:79:97:9e:6b:dc:
e5:a4:84:ae:26:00:ff:78:58:39:e4:b6:59:f6:7a:73:92:b2:
6f:7d:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:27 2026 by rpki-client