Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: ce/84soNBqUbyOqvYoyNoqOXN87tTk6w6UDt9dQ/0tk=
Subject key identifier: 01:EF:3E:53:B2:69:81:EE:AA:1C:6F:03:E7:84:3C:AE:BA:31:F9:B2
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01A0D9BB1922D27E3266614E20B0FD29FB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 16DF
Signing time: Fri 25 Sep 2026 18:01:52 +0000
Manifest this update: Fri 25 Sep 2026 18:01:52 +0000
Manifest next update: Sat 26 Sep 2026 18:01:52 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: GnvE2avLcBPxKocQnzqXbIC/15RSKk3ZF03T4La+CcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:19:22:d2:7e:32:66:61:4e:20:b0:fd:29:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Sep 25 18:01:52 2026 GMT
Not After : Sep 26 18:01:52 2026 GMT
Subject: CN=01ef3e53b26981eeaa1c6f03e7843caeba31f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:c8:ba:20:8f:84:a8:de:fd:94:d1:a5:1c:
ff:60:63:d7:ff:20:da:3e:2c:a7:8f:c9:a9:4a:68:
0c:9f:dd:95:1c:d7:15:a1:e7:e2:f6:2e:aa:af:c7:
29:e9:2d:01:e7:a7:d7:f4:03:ab:63:6e:c7:dc:32:
e3:7a:49:6d:b4:c5:f9:73:98:5f:75:fe:c8:24:16:
20:00:94:5f:88:4e:84:00:0f:1f:ea:68:c4:a3:21:
e4:42:88:7f:95:d4:74:80:4c:c1:7e:5a:10:0f:bc:
47:ea:3b:de:1f:a0:3b:a7:5e:21:35:d0:4c:78:01:
70:4b:33:ed:b6:46:35:cf:fd:34:55:57:ea:5d:3c:
d3:f9:c9:b1:50:ca:14:a1:6b:aa:05:ad:2a:93:49:
d6:c4:da:d2:f3:24:fd:67:7b:90:8e:b1:df:5d:02:
b4:bd:3a:47:43:bb:f2:f6:2c:7d:4d:13:6f:4f:ee:
31:dc:4b:f4:be:bb:38:8f:0b:be:61:0a:ec:6b:a1:
8b:14:c2:ee:20:c1:10:8c:73:d0:67:62:f9:a3:31:
39:25:50:3c:4e:e1:04:8a:1d:a5:25:ad:19:59:05:
6a:f6:ea:b1:56:c4:36:d8:69:d7:d6:cb:5f:72:fb:
94:38:4b:86:06:31:4a:45:aa:94:dc:fe:0b:09:04:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:3E:53:B2:69:81:EE:AA:1C:6F:03:E7:84:3C:AE:BA:31:F9:B2
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:3b:45:32:be:89:77:e5:cb:74:9e:ba:06:82:6f:ba:db:
08:08:ed:76:9b:b9:e5:4e:ff:bc:d1:5b:f4:31:5a:3b:44:5d:
d7:87:f4:ca:7f:03:11:a9:d5:ed:21:82:c4:a4:d7:36:6c:01:
10:10:ac:c7:b9:af:87:b9:6b:b3:7c:1f:cd:6e:4c:ca:6d:cd:
4d:dc:91:f8:ce:35:1c:64:de:fb:32:03:cb:3f:4c:99:ed:32:
07:3b:98:ec:f8:cd:11:8d:8a:37:d6:39:51:8e:a7:1e:2f:18:
40:8a:5a:21:7e:01:7d:d5:46:5a:73:bd:fb:63:c5:b3:d9:3d:
fb:45:11:54:5e:08:b7:7a:81:f9:cb:eb:60:d5:ab:41:e9:79:
bf:b4:45:cd:ed:39:18:ec:3f:15:32:98:66:79:0a:d6:cb:24:
bc:69:58:68:8a:fb:0c:2b:50:9f:15:a1:3e:4f:5b:0c:92:22:
36:dc:d7:88:18:7a:71:17:ca:95:3f:d0:11:1a:16:80:a8:9e:
6e:63:4f:e8:37:aa:b7:dd:2e:e5:b2:4d:72:62:5f:3a:73:e8:
af:8d:8c:84:dc:cf:f2:a9:b5:04:f5:44:58:40:e6:2b:dd:3d:
ed:98:ce:df:9c:11:fe:7c:6d:6c:0c:07:a5:b8:18:03:66:a7:
18:44:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:00:59 2026 by rpki-client