Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: cOFg+7B3NF3m6wF+B0Oy4m4B/JM83DE5d5MDp6N/zhI=
Subject key identifier: E2:4B:53:3B:04:53:CA:49:47:F7:B2:17:08:17:DB:B8:EC:DE:5D:22
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 01A0D4260944421E21A4CA808F914C508FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 16:00:57 +0000
Manifest this update: Thu 24 Sep 2026 16:00:57 +0000
Manifest next update: Fri 25 Sep 2026 16:00:57 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: TMK6U25fdw1j0eMuxst9vAU810BdFP80MWCeykQjF3g=)
2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:09:44:42:1e:21:a4:ca:80:8f:91:4c:50:8f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Sep 24 16:00:57 2026 GMT
Not After : Sep 25 16:00:57 2026 GMT
Subject: CN=e24b533b0453ca4947f7b2170817dbb8ecde5d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:61:16:4e:27:63:08:d7:9b:62:56:a4:fd:
82:f6:76:2d:cd:3a:14:4e:af:08:13:c3:be:81:14:
3d:17:d8:53:7f:a4:53:1f:57:86:31:76:f3:59:9e:
59:9f:58:5d:21:64:43:0a:66:f7:05:9f:6c:ac:c4:
ae:ca:9d:49:6e:ad:8a:fb:f8:a0:21:3e:dd:27:16:
0e:af:8f:2d:f0:02:37:f7:43:69:f6:97:b0:f1:cd:
5d:16:78:38:40:7a:3e:7b:5f:ad:fe:67:c4:75:df:
6b:7a:8c:6d:e8:36:66:1c:33:a6:68:25:33:56:34:
67:13:ec:75:2a:00:ed:f8:de:0a:63:3b:c3:f0:75:
b7:1d:40:99:ab:6b:e3:22:a0:1f:68:ee:7c:d9:7a:
92:21:e2:d1:3a:fd:2c:95:7c:63:1a:9f:9e:e4:9d:
27:4b:78:4e:f8:0f:9f:87:a3:f5:36:30:6e:48:92:
89:32:61:b2:bc:f2:40:f2:d7:45:4d:19:1f:a7:9b:
06:24:57:7c:55:f7:59:e6:ab:4b:c0:e8:7c:ba:d9:
a4:d1:6c:a9:8b:d5:ee:49:87:92:49:a9:7a:20:06:
71:95:ee:03:2b:1a:e9:6c:1a:02:52:81:ef:94:0a:
47:a8:0c:19:3f:e1:34:70:cb:b0:26:c5:06:31:a3:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:53:3B:04:53:CA:49:47:F7:B2:17:08:17:DB:B8:EC:DE:5D:22
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:64:e7:98:d5:a3:c5:e5:a2:10:9c:25:38:11:b8:31:ac:
8d:31:58:ae:c3:7a:c0:44:73:c3:5d:0a:4e:6c:3b:ae:5f:eb:
78:cd:2b:cc:24:4d:25:84:f3:a5:9c:8e:b3:72:16:b0:4d:30:
d9:13:6d:83:d4:b7:4f:cc:f1:81:63:34:20:a4:b9:dc:6f:0f:
21:06:5f:f9:3f:1c:92:8a:a7:80:38:b4:58:0c:2e:0b:3b:44:
24:1c:41:01:63:8d:0f:88:ac:72:1d:f2:8a:f0:c6:7b:de:a5:
a8:48:a6:5e:c2:01:f1:e5:36:e3:1a:b6:8c:f1:91:4e:3a:b4:
47:28:31:59:2e:99:d0:6b:01:33:b7:e1:b4:d9:ae:50:2b:72:
75:71:90:73:ea:09:97:6b:ce:d2:19:82:cc:21:f4:49:f5:48:
b9:b8:a8:cc:fe:7d:c0:d2:35:1e:d0:8e:ab:9d:68:fe:4b:ff:
eb:4e:21:32:7f:71:c8:54:83:35:23:e0:40:c3:06:18:03:20:
2c:66:35:ef:c8:af:b8:52:69:f5:34:20:ba:52:8d:a3:de:9c:
97:86:22:ef:54:a5:95:32:8a:a9:be:dc:d7:b1:ae:08:42:67:
b4:39:06:be:83:51:2f:d2:5e:0e:d4:0e:cb:02:30:d7:cc:66:
75:f3:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:48 2026 by rpki-client