Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 7HlXLcIkJ+R5V6QWkOFBOcoQqTCvwL6KdF5P8U8U02I=
Subject key identifier: A6:7A:B2:7D:53:9C:C6:D0:0D:D6:93:E6:5B:7E:6A:51:59:71:BB:AB
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A0D0EE593D5C9958696C66B5027A1D83A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1946
Signing time: Thu 24 Sep 2026 01:01:16 +0000
Manifest this update: Thu 24 Sep 2026 01:01:16 +0000
Manifest next update: Fri 25 Sep 2026 01:01:16 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: +PSDCWjGptaqXnXmli9b6I3SFqKMyybjaU+/MabM7Pg=)
3: xGq1gAr_KK1wFSAmfr2LKGJvUNk.asa (hash: YYD3QqVh2P4eGz8z5m6Y8La0oMvGrQPkxmhrVB2u3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:59:3d:5c:99:58:69:6c:66:b5:02:7a:1d:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Sep 24 01:01:16 2026 GMT
Not After : Sep 25 01:01:16 2026 GMT
Subject: CN=a67ab27d539cc6d00dd693e65b7e6a515971bbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:76:d8:95:4b:08:81:55:2c:f5:e3:ca:2a:
55:ef:73:1e:4e:61:10:55:a3:bc:b5:f5:1c:36:7b:
d1:22:b3:25:58:dd:5c:6c:9a:7c:0c:99:f4:6e:aa:
5e:37:46:03:37:c1:6a:59:ca:00:7a:f3:33:cf:bc:
0a:3c:23:8b:02:ac:d8:48:40:3a:04:a6:de:24:d2:
ca:bf:0a:95:92:31:8e:ec:1c:45:24:f6:a5:40:04:
14:76:77:72:13:88:b0:ed:b4:18:fd:19:fa:ab:3c:
fd:0f:ba:18:83:6f:b9:22:dd:74:d6:28:bc:b3:c2:
a9:49:c0:ea:20:b0:87:a0:52:83:a1:9b:4f:30:62:
96:44:50:39:1c:1c:2c:85:be:10:de:bf:23:50:94:
b3:a2:85:81:45:1c:9a:59:a8:12:ba:3c:79:7e:bd:
02:b1:29:a6:67:0d:f5:5b:d2:39:16:16:af:6c:05:
34:04:01:aa:ac:90:ef:62:b9:6f:d0:fd:e8:b0:b6:
15:2b:76:13:3a:b2:6c:c7:bf:1d:42:ba:ee:e4:4e:
29:bc:9f:64:b5:1e:c5:1a:5a:47:d4:67:2f:4a:e6:
a0:fd:7b:ba:b3:4c:86:62:c4:0c:1b:79:ac:a6:e6:
bd:e3:27:48:8d:1c:78:57:73:b4:c5:5c:a2:22:20:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:B2:7D:53:9C:C6:D0:0D:D6:93:E6:5B:7E:6A:51:59:71:BB:AB
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:58:8f:6b:f1:e5:1f:3a:d1:a5:46:d8:60:9b:25:ac:fc:
a8:93:dd:11:ed:ff:57:db:53:72:69:0e:fd:59:85:a2:29:04:
4b:0b:67:ff:2e:88:dc:39:88:f5:b5:15:2b:f7:16:51:76:de:
6b:30:24:1d:3d:7f:6d:d6:d2:c2:40:1f:ce:c8:c2:64:c0:18:
f1:4b:d6:b2:b4:d2:51:ad:91:10:1d:7f:f6:32:c6:35:8f:ec:
c2:31:e7:2d:69:8f:83:f1:4f:26:fd:8e:8b:eb:f2:2e:5b:b8:
72:68:18:4d:73:0d:ea:67:d7:c0:8e:c6:5d:f4:e7:e7:79:2c:
a9:96:13:f8:58:77:36:fd:a3:58:68:85:47:1e:58:ed:b0:1a:
87:dc:ed:dc:7e:3a:28:4a:d8:35:c6:b0:3d:db:9b:43:4d:6c:
20:8e:7a:90:01:c8:25:11:2f:d3:b2:8f:d2:c5:57:d7:d6:28:
35:a1:13:55:09:e3:9f:c3:41:c9:ee:87:cd:f8:8b:03:57:9e:
ed:6e:4a:75:36:5c:1e:55:83:ce:b3:84:ef:ab:a8:3b:b9:8a:
b3:95:17:e4:fa:cf:4c:26:03:e9:43:6b:3f:28:e0:bf:95:cf:
ee:3d:87:97:6e:d4:63:a7:41:f4:c2:94:18:e8:7e:06:18:f0:
06:e3:e6:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7lk9XJlYaWxmtQJ6HYOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjYwOTI0MDEwMTE2WhcNMjYwOTI1MDEwMTE2WjAzMTEwLwYDVQQD
EyhhNjdhYjI3ZDUzOWNjNmQwMGRkNjkzZTY1YjdlNmE1MTU5NzFiYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg522JVLCIFVLPXjyipV73MeTmEQ
VaO8tfUcNnvRIrMlWN1cbJp8DJn0bqpeN0YDN8FqWcoAevMzz7wKPCOLAqzYSEA6
BKbeJNLKvwqVkjGO7BxFJPalQAQUdndyE4iw7bQY/Rn6qzz9D7oYg2+5It101ii8
s8KpScDqILCHoFKDoZtPMGKWRFA5HBwshb4Q3r8jUJSzooWBRRyaWagSujx5fr0C
sSmmZw31W9I5FhavbAU0BAGqrJDvYrlv0P3osLYVK3YTOrJsx78dQrru5E4pvJ9k
tR7FGlpH1GcvSuag/Xu6s0yGYsQMG3mspua94ydIjRx4V3O0xVyiIiBOYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ6sn1TnMbQDdaT5lt+alFZcburMB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ71Yj2vx
5R860aVG2GCbJaz8qJPdEe3/V9tTcmkO/VmFoikESwtn/y6I3DmI9bUVK/cWUXbe
azAkHT1/bdbSwkAfzsjCZMAY8UvWsrTSUa2REB1/9jLGNY/swjHnLWmPg/FPJv2O
i+vyLlu4cmgYTXMN6mfXwI7GXfTn53ksqZYT+Fh3Nv2jWGiFRx5Y7bAah9zt3H46
KErYNcawPdubQ01sII56kAHIJREv07KP0sVX19YoNaETVQnjn8NBye6HzfiLA1ee
7W5KdTZcHlWDzrOE76uoO7mKs5UX5PrPTCYD6UNrPyjgv5XP7j2Hl27UY6dB9MKU
GOh+BhjwBuPmnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:25 2026 by rpki-client