Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: GpsbaeJho7SjYo7h4Gd6ntT3FiGinofFT5SqO+/DmKg=
Subject key identifier: 1F:2F:D8:1D:14:F3:72:C5:F6:EB:97:4A:F4:26:74:AE:54:A4:AD:37
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 01A1035B6A0B38BB12BCC045B656FEB9739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 0291
Signing time: Sat 03 Oct 2026 20:01:24 +0000
Manifest this update: Sat 03 Oct 2026 20:01:24 +0000
Manifest next update: Sun 04 Oct 2026 20:01:24 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: CfpguZAaGlak0gRlwTbybwbrBd0NhhF24UGjhHSlxK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:6a:0b:38:bb:12:bc:c0:45:b6:56:fe:b9:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Oct 3 20:01:24 2026 GMT
Not After : Oct 4 20:01:24 2026 GMT
Subject: CN=1f2fd81d14f372c5f6eb974af42674ae54a4ad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:48:9e:d1:46:7a:67:3b:34:e3:2d:b1:95:
d5:cf:fb:a2:90:2b:00:72:46:66:52:a6:b2:5b:e7:
a2:b7:49:8b:e0:8e:60:48:6c:20:de:8c:a6:62:bc:
97:4c:43:6c:2d:3f:40:da:33:45:a1:75:ce:01:60:
95:50:a5:77:8f:16:45:e5:a6:c8:6e:2a:df:4f:b1:
27:40:5c:35:15:3e:18:c6:85:94:f3:c3:7d:90:6b:
43:b3:63:2e:b4:bd:54:cc:96:cb:d9:ea:23:3c:e2:
36:37:6c:bf:86:eb:4e:40:23:e5:db:70:0c:44:a9:
a1:1c:6c:62:78:fe:4f:db:36:9a:09:66:0a:e1:ec:
c5:25:16:68:b7:63:47:d2:05:eb:22:6c:27:0d:4d:
08:89:a2:ef:f8:ec:6e:7c:bf:ef:7f:5e:a3:7e:61:
9b:32:b8:9e:9b:f3:1c:e0:0d:5a:88:f5:70:77:69:
f6:39:fe:23:60:0f:22:da:9a:99:25:68:f1:3f:f7:
66:27:c9:fc:8f:b9:b2:88:64:8f:af:e3:b7:be:e2:
91:8b:73:9e:7f:77:52:a7:b9:db:11:c6:cb:f6:99:
88:09:9a:c3:df:6e:ca:ea:ab:2e:a4:bd:f7:dd:94:
0b:c4:de:0d:5c:26:79:d0:61:c4:e8:29:d7:97:68:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:D8:1D:14:F3:72:C5:F6:EB:97:4A:F4:26:74:AE:54:A4:AD:37
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:b2:29:a9:f8:2a:6d:f1:7d:36:d6:12:ac:af:a0:bd:7e:
d5:bc:70:22:3b:e6:45:7a:21:82:97:a6:79:af:33:3b:79:c0:
57:8d:31:68:b0:c6:78:43:22:a0:f3:fe:32:8c:8f:f5:8f:b0:
96:02:40:1f:7b:52:8f:e1:d5:d3:64:cb:ad:60:e1:6a:b7:d1:
47:5b:39:8e:de:61:82:2f:18:de:cd:65:8a:b7:1e:2c:eb:4b:
41:9d:37:af:30:5a:f9:12:79:00:68:d2:e3:7c:8f:05:9c:f1:
ab:4e:e0:2b:47:33:89:8b:50:74:30:d5:e5:b3:33:0e:10:76:
9f:29:07:6f:ff:bd:20:92:b1:ba:fa:68:24:70:a4:f5:7e:da:
c7:29:b1:bb:b5:5d:d3:fc:50:ba:80:fa:0a:4d:73:78:b5:d4:
8c:de:63:e7:f8:e5:7f:75:92:c7:03:fc:e9:2a:b7:2d:fa:09:
e4:3a:40:fe:4b:2e:95:bb:31:25:39:fb:f8:32:d3:8f:46:a8:
50:dd:f5:b8:11:32:e5:fc:3b:72:e7:81:eb:90:4f:50:8f:1f:
08:27:60:2c:33:72:b1:a2:af:17:2e:6c:7e:6a:31:0b:ad:65:
b6:34:3e:cb:46:c7:4b:be:45:a1:4e:1f:e2:65:b1:53:de:0c:
b2:d2:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:23:07 2026 by rpki-client