Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: H9w/0MjO4KT9v7x4silFdwySZtT+dGguzfonX9EtHns=
Subject key identifier: 1C:64:38:F4:37:26:E1:F4:2F:7D:05:D7:57:53:3B:A2:B0:6C:39:76
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01A117BD669DB1CDD442310FC25A6D91B6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1900
Signing time: Wed 07 Oct 2026 19:00:50 +0000
Manifest this update: Wed 07 Oct 2026 19:00:50 +0000
Manifest next update: Thu 08 Oct 2026 19:00:50 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: uYgj8AlxLTr4UiG4O+UEGHSlQe+gfaNxveiqVLMGer8=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:66:9d:b1:cd:d4:42:31:0f:c2:5a:6d:91:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Oct 7 19:00:50 2026 GMT
Not After : Oct 8 19:00:50 2026 GMT
Subject: CN=1c6438f43726e1f42f7d05d757533ba2b06c3976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:82:41:3d:7a:a8:4f:51:9d:29:ec:a1:db:
dc:d4:8c:c2:29:79:a7:93:7e:47:6c:b6:2c:80:3f:
00:f3:d6:af:f0:3a:5b:27:40:40:37:ed:84:20:c0:
63:4d:8c:36:a8:e7:c6:dd:96:b8:e0:85:28:21:d7:
81:13:ea:71:22:5a:4f:b9:ca:d9:70:06:e3:8c:3f:
d3:ae:d1:c6:b1:49:12:5c:05:2f:12:6b:a1:eb:a8:
c5:5e:2d:14:d7:74:19:27:9f:0e:91:c0:99:bc:85:
40:64:42:62:41:e3:90:68:39:38:23:a1:20:68:ad:
68:01:4f:0a:45:7b:37:99:8c:a1:23:d7:52:f3:1c:
f6:71:01:b2:87:2a:fe:a7:e4:4d:ff:7f:e9:01:59:
af:0b:60:cc:2d:ae:3c:b5:1c:32:05:fa:bd:cc:dd:
f4:14:58:c3:75:35:b1:a3:c8:0e:59:70:ed:f0:a1:
ed:af:24:a9:5e:f2:7d:5b:c1:4f:bf:3e:17:00:55:
93:fb:5a:06:1f:ef:10:79:2a:01:9b:46:60:a2:1b:
5d:53:38:5a:9a:fc:fa:e2:35:f9:1d:f0:98:9c:c1:
73:21:9e:e0:d9:1a:d9:e4:27:b7:9e:ce:dc:4a:30:
19:4a:fc:8c:41:00:25:8f:0b:e3:21:50:f7:41:c7:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:38:F4:37:26:E1:F4:2F:7D:05:D7:57:53:3B:A2:B0:6C:39:76
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:7d:7f:4a:da:74:b4:c0:85:95:4a:71:b5:3c:ac:10:ac:
62:c6:43:21:c2:bd:c4:93:e8:d2:84:25:cc:19:2f:e3:2d:40:
9f:26:8d:4f:84:f0:23:e9:b3:53:eb:9a:49:9b:4f:10:40:3f:
79:fd:6b:b2:bd:a6:13:44:95:75:8a:a1:4d:a0:ad:6a:3d:f2:
18:7a:dd:af:94:a9:8f:96:e7:97:91:12:6c:ba:e1:68:32:e2:
ca:d8:dd:2c:29:7c:eb:59:22:7c:4d:08:af:ec:16:58:0f:fa:
0a:55:b1:d9:84:45:41:18:00:63:2f:c4:4b:e9:5c:76:1f:6b:
64:45:53:ad:cf:a6:70:2a:4b:2c:b4:6e:23:40:b6:1b:a3:d6:
52:27:57:eb:13:b6:19:1a:6c:72:2b:91:d7:60:f1:5d:39:bf:
c8:93:d4:33:aa:1e:d0:b7:6f:64:a5:3a:fe:5a:00:de:ba:e0:
dc:d1:b3:04:b1:bf:2e:af:d4:87:64:4f:11:30:66:a4:c8:41:
14:f0:64:60:69:d7:2d:55:d4:a6:b5:e5:2d:b1:4d:77:87:66:
18:4b:e8:bf:60:bb:be:09:f9:a7:ae:12:90:7d:fd:54:e4:6a:
1d:93:2f:e2:a2:02:dc:07:0b:19:70:6d:85:c9:60:d1:4f:41:
26:d6:d7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXvWadsc3UQjEPwlptkbbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjYxMDA3MTkwMDUwWhcNMjYxMDA4MTkwMDUwWjAzMTEwLwYDVQQD
EygxYzY0MzhmNDM3MjZlMWY0MmY3ZDA1ZDc1NzUzM2JhMmIwNmMzOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bOCQT16qE9RnSnsodvc1IzCKXmn
k35HbLYsgD8A89av8DpbJ0BAN+2EIMBjTYw2qOfG3Za44IUoIdeBE+pxIlpPucrZ
cAbjjD/TrtHGsUkSXAUvEmuh66jFXi0U13QZJ58OkcCZvIVAZEJiQeOQaDk4I6Eg
aK1oAU8KRXs3mYyhI9dS8xz2cQGyhyr+p+RN/3/pAVmvC2DMLa48tRwyBfq9zN30
FFjDdTWxo8gOWXDt8KHtrySpXvJ9W8FPvz4XAFWT+1oGH+8QeSoBm0ZgohtdUzha
mvz64jX5HfCYnMFzIZ7g2RrZ5Ce3ns7cSjAZSvyMQQAljwvjIVD3QcdtJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxkOPQ3JuH0L30F11dTO6KwbDl2MB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGll9f0ra
dLTAhZVKcbU8rBCsYsZDIcK9xJPo0oQlzBkv4y1AnyaNT4TwI+mzU+uaSZtPEEA/
ef1rsr2mE0SVdYqhTaCtaj3yGHrdr5Spj5bnl5ESbLrhaDLiytjdLCl861kifE0I
r+wWWA/6ClWx2YRFQRgAYy/ES+lcdh9rZEVTrc+mcCpLLLRuI0C2G6PWUidX6xO2
GRpsciuR12DxXTm/yJPUM6oe0LdvZKU6/loA3rrg3NGzBLG/Lq/Uh2RPETBmpMhB
FPBkYGnXLVXUprXlLbFNd4dmGEvov2C7vgn5p64SkH39VORqHZMv4qIC3AcLGXBt
hclg0U9BJtbXMQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 06:10:46 2026 by rpki-client