Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: Y603Y/eJ5ZxQnVZn2idv73hZ0v8/rACnwJdF6Vx322c=
Subject key identifier: 8B:10:A2:F6:7B:59:F2:AC:C2:1C:70:2E:A6:17:AA:AC:BC:DF:96:17
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 01A10EBA46E17320B7117B07E39C5EFFE701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 067F
Signing time: Tue 06 Oct 2026 01:00:51 +0000
Manifest this update: Tue 06 Oct 2026 01:00:51 +0000
Manifest next update: Wed 07 Oct 2026 01:00:51 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: wXo2TfWv09y3U1qDMkdAq4e3JPB0klvQcULOQITYlmg=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:46:e1:73:20:b7:11:7b:07:e3:9c:5e:ff:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Oct 6 01:00:51 2026 GMT
Not After : Oct 7 01:00:51 2026 GMT
Subject: CN=8b10a2f67b59f2acc21c702ea617aaacbcdf9617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:bc:1a:b0:14:f1:e1:69:4e:f6:56:ee:6d:
fb:aa:d7:c2:e9:7b:75:00:05:48:83:a0:dd:c8:19:
ec:6e:2b:92:6f:75:4b:21:87:1b:d9:4d:15:be:34:
91:91:c6:13:06:e9:52:08:62:18:a1:4c:39:df:8e:
20:94:38:46:ff:55:d7:c0:2d:14:a6:af:f0:a2:09:
20:d1:c4:db:00:04:a3:f3:54:59:c1:cc:bf:99:0e:
af:ca:ca:6a:7e:cd:6e:93:2e:bd:41:81:24:17:a7:
af:6c:f6:d5:f6:85:a9:7a:bb:4b:ae:67:54:6c:a7:
26:c0:24:8b:2f:1d:e3:27:0c:94:a5:59:b9:bd:87:
ff:b4:95:66:8a:f6:b1:ae:a5:48:98:c3:20:cd:fc:
3a:b9:cf:9b:6a:f1:0f:e2:12:37:bd:5f:1c:2d:4d:
8d:11:94:19:95:6f:d5:0b:aa:5a:9f:0e:bf:95:a4:
37:dc:fc:73:6b:d9:db:12:ed:db:dd:58:aa:22:e1:
cd:e8:f2:1b:c8:f2:1e:d6:00:bf:43:a4:e9:28:31:
21:73:10:29:6e:17:4c:2c:48:0d:c2:5b:4c:1d:e6:
38:b4:1e:c4:69:7e:0b:b3:7f:e2:00:28:78:c2:94:
16:11:45:f3:65:69:e9:f6:f1:b2:65:1f:49:c4:20:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:A2:F6:7B:59:F2:AC:C2:1C:70:2E:A6:17:AA:AC:BC:DF:96:17
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b1:6a:69:ed:e2:1b:b3:68:2c:40:09:e9:7e:d4:21:2d:49:
c6:0d:38:34:83:e2:bd:eb:a3:bf:e1:5d:e7:5b:ef:62:c3:f2:
e7:54:3b:87:18:c5:0f:4d:83:5c:b2:13:12:c2:f1:b4:ab:ed:
9d:16:bb:ad:b3:6b:fc:e7:f8:27:c8:1a:90:6e:e3:25:78:80:
03:88:2d:ab:1d:d1:db:48:df:d2:10:ba:4a:65:15:e5:ac:39:
80:11:e1:ef:cd:f6:ec:ce:7e:2e:e8:c1:65:d0:de:cd:8e:b2:
e5:f8:8d:81:ac:e7:3a:88:4c:92:c2:92:3d:1c:8d:73:88:28:
51:33:26:08:3c:fe:c8:d0:c2:2a:b3:bd:90:1a:8f:24:b4:eb:
fd:e8:b1:39:2f:60:b2:ba:6b:8b:9a:b9:7e:a1:a0:5b:3c:18:
73:c6:79:8a:f8:1f:bb:46:b5:b3:4a:77:8e:50:89:56:3b:87:
a0:5a:db:ed:e8:1d:e6:af:5d:e5:b1:1b:e2:fb:23:52:5d:7c:
ab:53:99:cd:2d:b1:ce:2b:db:2f:8f:c8:f7:4f:3f:74:cc:6c:
40:21:1c:25:76:99:7e:b7:bb:ed:00:05:b4:5d:c6:4e:6c:a3:
7c:1d:fc:dd:95:de:db:6c:7e:2a:62:7c:90:23:72:e8:d1:bf:
d5:79:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:24:11 2026 by rpki-client