Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: x2wpYd2Uq2Bx+0V9XcSwN3RBCglDwXX22kB0S2AbhTw=
Subject key identifier: 85:C1:C2:F6:82:E3:9D:C6:2A:6B:4A:C9:17:23:27:42:31:22:CB:9E
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A0CEFEEFA09DAC44D191C1266276E20499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1945
Signing time: Wed 23 Sep 2026 16:00:08 +0000
Manifest this update: Wed 23 Sep 2026 16:00:08 +0000
Manifest next update: Thu 24 Sep 2026 16:00:08 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: M8mj7v4ZT4PZoSZ2Mof1Y/ekVe2xNmllNL5wONZAPgY=)
3: xGq1gAr_KK1wFSAmfr2LKGJvUNk.asa (hash: YYD3QqVh2P4eGz8z5m6Y8La0oMvGrQPkxmhrVB2u3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:ef:a0:9d:ac:44:d1:91:c1:26:62:76:e2:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Sep 23 16:00:08 2026 GMT
Not After : Sep 24 16:00:08 2026 GMT
Subject: CN=85c1c2f682e39dc62a6b4ac9172327423122cb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:84:be:56:f5:6f:eb:f2:7b:65:12:79:fc:
1b:f8:c8:41:be:71:78:54:e9:ba:8c:5a:46:47:11:
fc:eb:fd:48:ab:1e:9c:e1:ec:9c:ac:a7:2e:fe:44:
41:b4:66:96:0a:cd:3c:22:48:69:da:4c:cc:28:22:
6b:90:2c:30:6e:e7:9d:bc:01:72:5b:55:52:9c:2c:
9b:cf:52:97:ea:21:e8:a0:8c:6b:46:9d:77:34:6f:
fd:c9:c3:e7:b1:5f:46:d8:8c:c4:33:bc:17:5f:52:
ba:e3:89:70:48:01:54:85:81:e3:35:20:a9:c0:68:
df:b4:8e:65:02:52:7e:fd:f8:bb:37:9d:23:c6:af:
57:6e:07:d3:64:9b:f3:dc:e2:f6:a8:5b:2b:a8:8a:
94:d4:b0:52:56:99:1b:df:f4:31:70:46:45:b3:12:
86:66:09:94:53:04:93:27:67:9d:58:89:24:1e:55:
93:7e:c7:67:9a:05:2b:b5:48:01:ff:7e:d9:8e:25:
2c:e2:f7:64:a2:87:52:84:60:7c:ed:07:19:d8:4a:
a8:6b:24:54:6b:6f:4f:2d:56:92:97:f0:b3:23:e3:
e8:0a:cf:7c:0b:a5:6e:62:e2:bf:6a:be:e3:1f:77:
4c:1a:de:1e:73:30:2d:c8:c3:b6:dd:2e:da:68:be:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:C2:F6:82:E3:9D:C6:2A:6B:4A:C9:17:23:27:42:31:22:CB:9E
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:06:25:0c:b5:0d:f9:75:63:45:ea:a1:fc:7f:2b:98:b5:ec:
77:f0:a0:58:b7:87:2a:76:1e:32:d5:73:fd:40:1d:51:f2:0a:
34:36:37:5c:2e:de:98:5f:d0:23:b5:e2:b2:fb:1c:a2:8d:f2:
4b:6a:28:77:bb:e3:47:03:d2:7d:ee:ab:c7:1c:d4:8f:e9:56:
bf:7b:47:ef:cf:da:11:af:8d:40:4a:80:79:68:ab:49:59:ba:
28:34:34:06:58:db:29:14:bf:68:ed:d3:c3:aa:6f:af:97:dc:
77:6a:45:9f:14:f1:33:d5:68:a9:4b:f3:66:4e:05:0f:9d:ac:
9c:fd:a0:87:db:8f:9b:68:3f:f6:83:9b:f1:fb:79:73:e8:88:
59:5d:6b:c0:92:bb:d1:6a:34:36:2b:e6:fc:a6:a9:97:38:dd:
28:42:ff:c6:8b:c8:fe:68:75:c2:3c:f0:8b:00:e3:0d:63:85:
51:db:06:c8:5a:00:1b:ef:63:97:9d:ad:ce:0e:e1:f5:0f:6d:
c9:c3:05:0f:fe:6f:cd:d8:7f:cd:e8:47:0f:1a:32:a8:f0:83:
f5:0c:79:59:a4:fe:03:a1:b7:cd:c2:ab:32:62:2d:be:f8:2b:
01:98:b1:bd:50:16:31:b3:93:fc:9f:0f:f0:86:77:24:33:e6:
e8:55:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:37 2026 by rpki-client