Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: zWuvFrosSPWA+/wTWnyrvTnfXgk0w9w+Zc+XBjipC9k=
Subject key identifier: F1:65:1C:70:89:9A:BA:B7:E7:F1:C8:F6:B8:8C:2E:CB:74:80:E7:58
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0CFA456A79BB4302C0615E106FF4A1D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1B24
Signing time: Wed 23 Sep 2026 19:00:48 +0000
Manifest this update: Wed 23 Sep 2026 19:00:48 +0000
Manifest next update: Thu 24 Sep 2026 19:00:48 +0000
Files and hashes: 1: 1-g6oOssR0Uc_mKhuyZ5hRWqyQbM.roa (hash: +ZQePXTvqgfcEnfFz/qwTdrY9t13cROx4lHutecHVUU=)
2: 5hzzN3lyv4X0feJgWvBosLbDFMo.roa (hash: tC4JBKfrGLOjkrc5BggMS+/yqOQr7CkLM3G8E138aic=)
3: 9LNb_9PZbve_OomIaChtCM3k4so.roa (hash: sE6lgMqZnhOrphKgsrZ4WG0emFX/4GnVx3HFaE7J0Qo=)
4: FlNvIBDOBdonn3aaFX3mtfoEgdY.roa (hash: NV4aCXfghszJfOz/yii1kdXVIUYUXdQt970ZYxOTSP8=)
5: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
6: TIqSysADxONI-e4Fp_M_6SFBM2w.roa (hash: A665VAKSazGUi81WSJfVeWUCAVUVIKN1Dr/P8sIzfrM=)
7: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
8: fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa (hash: 691/vGayPBHXYDVauvoERip3QUP0hLW5nqwZdaTBTmc=)
9: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: 04gb7Bax8toi5tp5tXmH4STLmHn9uV5je/jgJpB2J88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:56:a7:9b:b4:30:2c:06:15:e1:06:ff:4a:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 23 19:00:48 2026 GMT
Not After : Sep 24 19:00:48 2026 GMT
Subject: CN=f1651c70899abab7e7f1c8f6b88c2ecb7480e758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:b3:e1:e8:04:1d:c8:74:ae:1b:b2:ec:39:
ef:66:07:23:67:16:5c:93:34:98:94:e8:c0:82:00:
de:41:4d:55:95:b1:e3:ab:de:a7:30:1a:53:e4:32:
e1:ab:17:98:fc:a6:b5:c2:ff:d3:65:5f:96:52:ff:
b6:15:d9:01:76:01:c8:c9:1d:5d:24:49:4e:8e:e9:
55:4c:00:c9:9c:56:9e:e8:f3:bd:50:00:89:e6:06:
b2:a3:fd:b7:35:c0:7b:cb:24:52:1e:e4:88:5e:8f:
81:1e:57:1b:60:46:b0:48:7e:88:01:ac:3b:58:ec:
d4:1f:0f:83:17:23:ec:59:df:6d:68:41:52:69:64:
50:39:d9:c0:f0:66:34:1e:60:35:c2:31:51:bb:4f:
2c:d8:70:97:3a:25:79:3c:9b:19:56:9a:12:91:d9:
8d:04:6a:f1:d6:2b:09:db:81:aa:0d:de:77:d8:87:
09:a7:df:32:97:8f:aa:41:64:79:70:86:06:ab:4f:
f8:14:55:d2:b1:05:c8:99:04:77:59:60:8b:54:8a:
5a:36:ba:c2:ae:27:2b:0d:3d:03:44:2b:05:aa:fd:
bb:e3:6f:da:6a:8d:9b:18:53:90:70:76:de:b6:f7:
35:62:17:8a:04:bc:4a:e5:69:fc:10:c8:4b:40:a3:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:1C:70:89:9A:BA:B7:E7:F1:C8:F6:B8:8C:2E:CB:74:80:E7:58
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b6:fb:68:a9:fd:21:82:5a:89:8b:b3:17:87:04:ce:c7:d8:
3d:49:73:d1:ed:41:a0:a5:b5:36:18:d9:cd:e6:77:64:05:56:
a4:ff:68:7d:a0:c0:2d:02:0f:0a:e4:e1:0e:d2:8f:d8:cb:e5:
83:eb:26:45:f1:5c:3c:77:62:7b:e9:b4:22:9c:52:79:03:74:
2a:b6:7b:02:0a:b0:62:f3:48:ac:3b:2f:92:89:e0:99:9d:95:
58:b7:fb:55:83:a8:20:9c:ad:90:ab:5b:8d:50:d8:45:bb:09:
a4:a5:e2:12:12:23:c7:4d:9d:bc:a6:cd:22:5c:16:d0:e5:b2:
70:25:e8:93:dc:f9:0a:0d:1d:f8:78:e0:b4:f4:40:1c:79:92:
33:65:55:c8:65:c2:21:e6:4f:d9:20:82:1a:de:4b:a2:a7:35:
db:15:37:26:48:e7:6c:57:7b:60:32:7f:de:5b:cc:0a:06:b0:
26:93:dc:da:42:cf:a8:ad:78:1b:a2:9d:e5:c7:0a:db:7c:f7:
e3:bd:f0:26:44:c6:28:63:78:5b:91:5d:08:7a:f9:61:ac:05:
df:95:61:ad:aa:ef:d4:7f:f0:a7:ad:3b:58:22:ed:32:d4:2b:
e2:8d:7e:09:3e:8d:b6:4e:51:27:1c:e5:07:d6:ba:8f:99:e1:
7a:49:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:59:19 2026 by rpki-client