Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier: XW5tzcZ3NFrTm8nfF9Hhvoj76GfesY6q1MxfmR2RtYQ=
Subject key identifier: D6:9B:14:50:24:94:13:88:D9:27:A0:9C:F5:7C:18:CB:9C:32:BD:04
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 01A0ECD3BC2758CC6A1FD049007CCA2C11C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 11:01:34 +0000
Manifest this update: Tue 29 Sep 2026 11:01:34 +0000
Manifest next update: Wed 30 Sep 2026 11:01:34 +0000
Files and hashes: 1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: yVEi32ijlb41T77MVD1CjWMugGb3ItLTX3HoyqHJ4aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:bc:27:58:cc:6a:1f:d0:49:00:7c:ca:2c:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Sep 29 11:01:34 2026 GMT
Not After : Sep 30 11:01:34 2026 GMT
Subject: CN=d69b145024941388d927a09cf57c18cb9c32bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:07:7d:2a:bc:59:e2:ec:ae:75:83:29:51:
88:10:fa:24:bb:fc:fe:02:a8:55:a7:f5:1c:76:c9:
09:2e:28:d3:e7:b0:1e:67:2c:32:c6:f0:3d:2b:df:
c8:8a:a1:89:c7:af:8d:52:fe:ca:3a:ea:c8:81:ca:
e1:d2:8b:db:a5:ec:d9:47:84:48:28:6b:b0:b6:f5:
3b:79:7e:c3:e5:65:c2:85:1d:65:b3:74:7e:db:8e:
60:bc:e2:e3:57:f9:29:6d:0e:28:be:10:fb:86:cc:
39:5a:0d:92:39:bd:0a:77:e3:22:02:d4:42:89:5e:
f9:17:3c:fd:8b:c6:d6:9f:03:6a:8f:ec:1a:15:9d:
78:61:e2:18:9e:69:86:c4:07:51:fe:ac:83:ca:30:
a2:c5:9c:5f:13:e5:b2:2f:b1:9c:d2:37:99:f3:93:
dd:a3:81:17:c0:4e:90:6f:96:c3:e6:13:78:f1:19:
87:88:97:0c:11:6a:4a:8c:93:31:3e:ae:35:0a:06:
e1:1d:ff:aa:82:66:24:24:61:96:eb:65:7c:35:6e:
81:c7:af:4d:57:f0:60:0f:d5:dc:53:57:ef:95:88:
a0:19:00:70:b7:2a:48:59:76:47:b2:3c:0d:5f:c9:
d5:45:ea:83:ea:04:70:7d:78:87:9f:91:07:64:5f:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:14:50:24:94:13:88:D9:27:A0:9C:F5:7C:18:CB:9C:32:BD:04
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:b5:e7:1a:74:30:88:c3:c4:cf:fe:78:64:b1:2c:d5:8b:
ad:48:f3:ac:e5:92:79:6f:ff:ca:27:ed:0f:ab:29:57:e7:c3:
61:ec:f9:4d:87:62:f1:3e:28:95:2d:66:f8:b0:68:51:71:04:
e7:89:71:31:bd:52:28:66:fa:4e:23:d4:52:7a:98:8d:fd:90:
e7:e8:a3:f0:26:05:b0:93:ce:01:36:b4:be:ac:df:6b:53:19:
0c:c6:c6:f0:53:d8:97:bf:ea:ee:ea:c3:d1:c8:e7:9a:c7:ee:
ad:43:fe:82:65:c6:f7:db:ef:6a:d5:9a:25:59:d5:72:61:cf:
96:1a:1a:60:17:e4:57:20:ef:36:c6:95:ab:2c:4a:1a:8a:39:
00:95:b7:04:b4:0f:c6:5a:17:00:4e:fd:14:48:65:82:46:80:
c9:5c:5a:03:70:64:ac:55:ee:2a:44:85:3e:93:47:50:c1:fc:
d6:f6:f1:46:4a:7a:b7:45:90:34:c0:88:9f:e1:4c:81:bc:de:
7a:9b:ec:6c:4e:7b:67:19:3d:9a:fa:69:0c:bd:05:e1:dd:03:
d4:65:ae:be:ed:ce:56:b7:6a:1f:48:ce:a9:fb:63:97:d3:ae:
4b:bc:ab:2c:53:c8:22:7c:a9:9d:e8:a2:da:d3:71:c7:07:d8:
2d:b7:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:57 2026 by rpki-client