Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: ACwv8NINyYDy3QeSUZYTR5tRZzVlHpjqXPEwOhznCT0=
Subject key identifier: EE:32:AF:7D:D7:41:44:82:CF:7C:DC:21:5B:16:41:F9:48:E2:C9:3F
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 01A0DD9765A2B481C59DE08062990F5B8A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 14D8
Signing time: Sat 26 Sep 2026 12:01:21 +0000
Manifest this update: Sat 26 Sep 2026 12:01:21 +0000
Manifest next update: Sun 27 Sep 2026 12:01:21 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: VVD1ZFIvMKQysl0wPxsh87De+YiPZEHg/XcpZ3ya0Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:65:a2:b4:81:c5:9d:e0:80:62:99:0f:5b:8a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Sep 26 12:01:21 2026 GMT
Not After : Sep 27 12:01:21 2026 GMT
Subject: CN=ee32af7dd7414482cf7cdc215b1641f948e2c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:d0:81:7a:3a:ae:39:26:c8:43:87:96:ec:
e7:71:2d:62:24:b3:4f:16:7f:12:5f:d7:a7:40:8c:
5b:37:54:21:a2:7c:27:2f:03:fe:fd:3e:73:92:73:
c1:6b:d3:ad:df:46:a8:05:b3:55:cb:39:5e:76:b0:
0a:a0:4a:56:02:9e:ca:67:29:bb:2d:93:3c:c4:08:
c3:cf:ed:36:a2:71:22:8f:3a:c5:d3:3d:ce:15:36:
68:42:cf:dc:8e:8b:6e:0b:a5:db:dc:ff:19:a4:a6:
0d:8e:b4:1c:8f:1b:7d:e5:42:0e:d2:da:2b:dd:be:
df:87:42:00:f7:82:f9:ae:71:cf:06:51:73:12:1e:
19:23:ba:1f:93:d8:8f:6a:94:cd:16:ac:b7:22:23:
eb:69:2f:6c:9e:aa:2a:bf:40:b4:a9:7e:33:d9:cd:
5b:f8:dc:a9:d6:93:78:48:fe:39:a2:17:30:13:54:
d4:df:43:55:54:35:d7:cc:0e:d3:d6:8f:96:2e:27:
78:88:dc:99:04:31:09:fe:02:34:89:2a:3d:6b:11:
ae:73:1e:0f:bb:de:b3:e9:16:c2:3c:ca:03:4f:54:
12:ca:ff:ce:ca:8b:60:04:c3:05:71:a1:93:70:4e:
63:7d:79:10:07:54:3f:00:03:5c:cd:67:fd:82:95:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:AF:7D:D7:41:44:82:CF:7C:DC:21:5B:16:41:F9:48:E2:C9:3F
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f4:5d:3f:d6:08:2c:d7:4d:21:9b:ef:ea:ab:e5:7a:e1:35:
05:42:9d:45:ef:3e:b7:ad:bf:8a:f6:a5:22:02:a8:3c:aa:34:
8c:e0:23:40:d5:1e:55:1c:66:7a:a1:8b:29:a2:a0:85:70:01:
82:e3:4a:d2:83:bf:b7:84:46:3f:8d:bc:da:64:ef:b7:3e:ee:
37:87:1a:c1:9c:f1:1f:af:c1:4e:a0:9f:f2:ed:6c:73:98:a2:
d8:78:21:0c:7a:f1:35:2f:d0:3f:96:e8:88:7f:2a:72:2f:11:
09:31:97:2b:4b:77:ad:ec:65:97:05:f0:e4:02:ed:01:60:18:
4e:27:a9:65:bf:0b:17:93:25:25:d0:3d:78:14:7b:29:c5:c4:
23:e8:c8:e0:07:e8:1a:42:59:e7:94:0d:7e:f7:ef:eb:b9:e6:
1e:65:ce:fa:21:b5:b9:c3:be:95:f6:3a:6b:0d:a8:cb:14:ee:
f8:17:e2:0f:9e:1d:ab:ef:3f:19:0c:43:56:37:a8:29:99:12:
d7:60:6d:e5:be:0d:9e:64:ba:3e:1a:ea:08:75:c8:73:6d:59:
ef:c8:ed:50:b5:f1:92:9c:59:ed:47:73:f6:8c:bb:71:d5:d9:
2f:0a:70:dc:50:8e:9e:f2:12:f8:b8:ef:7a:4e:81:9f:36:54:
b4:a7:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:59:23 2026 by rpki-client