Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: MMtc6+UwyiYixDbhuSzHUux7+R+qqtyblyTAPVwz6g0=
Subject key identifier: F5:E5:46:E6:5D:57:A6:3B:DD:1D:AB:DD:30:99:B9:5F:53:85:5C:7A
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01A0D917982930113D1E46A3FBCE341A8835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1230
Signing time: Fri 25 Sep 2026 15:03:17 +0000
Manifest this update: Fri 25 Sep 2026 15:03:17 +0000
Manifest next update: Sat 26 Sep 2026 15:03:17 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: T3ib72VWifLQt4VgShGyAzdsxhN/6uJyaZWpLzdoFfg=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:98:29:30:11:3d:1e:46:a3:fb:ce:34:1a:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Sep 25 15:03:17 2026 GMT
Not After : Sep 26 15:03:17 2026 GMT
Subject: CN=f5e546e65d57a63bdd1dabdd3099b95f53855c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:7b:ba:a3:aa:66:77:c6:e5:27:30:65:29:
50:35:f4:0d:8b:85:7e:b8:40:d5:b7:09:d0:92:85:
24:21:01:a1:8a:1c:0a:88:39:b4:87:9b:a8:db:3c:
c4:d4:36:09:85:d0:24:68:90:2f:31:3a:21:b1:bf:
2d:94:bb:6c:8a:61:60:54:b6:95:fb:41:d5:8a:d1:
50:eb:af:03:12:a2:0f:70:2d:23:ad:19:bc:62:ec:
1d:db:83:f6:63:e6:a2:cd:56:c2:04:85:e4:d2:6c:
da:a2:33:16:ae:31:9c:c1:54:17:d8:35:d1:64:64:
bb:b5:33:ad:14:1c:bf:6c:0d:86:ef:54:05:e9:58:
f7:b2:ba:09:5e:75:33:4b:66:90:5e:11:5c:48:c8:
69:24:ce:3b:99:03:ec:70:2f:45:5b:66:17:c9:d2:
e3:ed:73:8b:9e:71:9a:94:cf:cc:4a:92:45:95:e4:
5a:c1:58:4c:40:f9:35:5b:38:35:1f:3d:56:16:7a:
55:7d:3b:01:30:74:e4:5b:73:67:d9:fa:d9:3c:f2:
1e:7c:7b:10:65:32:88:c3:90:ac:e0:89:ab:20:43:
b1:15:64:8c:e2:e1:19:17:3d:70:2f:72:78:8b:ab:
0f:59:98:a2:1c:69:ed:6c:09:45:da:62:58:a5:c4:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E5:46:E6:5D:57:A6:3B:DD:1D:AB:DD:30:99:B9:5F:53:85:5C:7A
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:1e:9e:d5:85:5b:2b:5b:56:e5:1f:27:70:ed:1a:f5:de:
f5:41:07:a1:e8:2a:70:cb:65:23:e3:fa:5c:7d:ce:0c:ae:fb:
37:6c:6c:29:f7:19:81:c5:01:86:26:4e:f1:fb:47:c1:96:fc:
88:c3:8d:e2:69:1a:ff:ca:26:5f:70:b5:95:f1:26:87:cd:53:
b0:aa:ef:b5:77:a0:af:bd:d0:b7:8f:65:c5:c7:58:bf:d2:17:
c0:f3:af:83:ee:80:38:2a:56:f8:bf:96:df:d3:cd:51:bf:10:
96:28:d1:f4:ad:49:04:70:2b:32:6f:b2:b5:4b:56:11:f9:87:
67:11:6a:90:6b:cb:bb:49:9c:d5:31:2d:b5:73:26:c6:54:da:
50:c8:6a:4b:91:58:40:4a:04:2d:85:af:af:ca:94:03:b4:95:
3e:52:65:6c:aa:38:22:3f:ed:a7:aa:f7:b0:0b:2e:ce:e3:d8:
cf:7a:f1:f7:ac:99:07:4c:6a:57:2f:c6:0b:57:47:cd:e0:1d:
ca:c1:c0:1f:8c:51:51:28:fd:94:f6:3f:a9:5e:41:12:a6:7b:
ee:e6:23:f8:2a:cf:a3:f3:41:16:e4:4f:2e:b8:b9:cc:47:7c:
ef:d3:0b:2f:44:26:0d:29:1b:08:bd:e9:86:f2:2c:fe:d9:a1:
f0:76:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:25:36 2026 by rpki-client