Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier: xvPKf88jaeh+a32GExn790ZgQh9pG50/6ScBY+C8GHE=
Subject key identifier: 2D:55:17:A2:D4:09:F0:BA:1B:12:D4:CC:6C:23:C8:5B:56:52:C4:73
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01A0D0B6D0E14C02D54A7FFB0AC25D634E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 00:00:37 +0000
Manifest this update: Thu 24 Sep 2026 00:00:37 +0000
Manifest next update: Fri 25 Sep 2026 00:00:37 +0000
Files and hashes: 1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: Ok543+o9hICiBXxu2QIbNoLari3ZPDMs7J6XL2TyrfY=)
6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:d0:e1:4c:02:d5:4a:7f:fb:0a:c2:5d:63:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Sep 24 00:00:37 2026 GMT
Not After : Sep 25 00:00:37 2026 GMT
Subject: CN=2d5517a2d409f0ba1b12d4cc6c23c85b5652c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:a9:e1:30:d4:b4:37:e0:a5:f5:90:44:5d:
0b:d2:ac:7c:54:3d:77:d5:da:45:3e:75:8c:67:cf:
a8:89:8f:94:7c:aa:46:08:1c:60:47:d8:91:78:36:
9e:8e:c8:10:8b:4f:ed:b4:8c:52:87:af:74:20:0f:
81:76:98:8b:f0:04:57:91:00:92:70:0b:21:ef:3f:
68:a2:46:00:de:27:64:58:fb:6f:37:8d:ba:23:88:
0d:6f:8b:34:8e:2f:3e:b8:8d:1c:fd:17:16:88:5a:
f1:99:da:ea:30:c6:19:10:dd:96:7c:0c:94:fc:c2:
13:a5:ca:bf:e3:6b:d1:75:13:aa:c6:8d:df:75:06:
32:b4:43:fa:7c:0f:35:b1:82:3d:cd:c8:c1:22:f7:
98:f2:57:cf:25:44:53:40:48:f4:2a:27:37:ed:f3:
44:0f:bc:51:b3:69:81:0e:e9:a5:d4:7e:dc:2f:8c:
89:19:f7:60:5f:d4:2a:c5:5b:ad:87:15:3c:d8:dd:
e6:0d:be:9d:2a:28:4d:fc:a7:c6:ac:ba:e3:ba:4d:
21:61:e1:0b:b6:2a:ec:17:e5:c9:bf:33:31:a8:cc:
c6:e9:f0:89:78:56:fc:48:51:19:b3:ed:de:0b:91:
2b:3a:31:de:15:39:79:4c:ec:44:6a:08:4c:30:7c:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:17:A2:D4:09:F0:BA:1B:12:D4:CC:6C:23:C8:5B:56:52:C4:73
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2c:48:5f:82:e9:05:6f:c1:68:71:da:04:21:3c:e4:9d:a6:
63:38:77:f1:a5:18:a1:a9:b2:cc:88:b9:b6:df:0e:82:22:a3:
db:ce:f3:46:39:d2:5a:75:9e:e2:d2:bb:b8:59:9e:4d:ae:ee:
99:6e:6b:b1:96:76:cc:5c:39:ac:25:b3:78:87:9c:2a:ee:48:
3f:a2:ed:3e:2a:d4:da:72:cd:9c:62:01:61:64:71:27:f3:24:
ee:fd:bc:7b:c6:d3:bd:14:e9:29:f4:ed:33:38:1d:ff:29:5c:
88:56:30:19:bd:f7:21:c7:30:c5:2c:77:77:cf:55:35:db:22:
1b:8b:73:f5:01:d1:16:f6:bb:d7:6d:75:36:1c:29:0e:a3:ec:
a5:30:b9:ae:47:fe:a0:fe:25:a1:9b:b8:35:f0:ac:7c:8d:84:
80:52:da:f1:a0:5c:df:61:63:39:3a:48:58:2f:17:bc:d0:c6:
5a:75:33:32:e5:4a:27:c9:d9:a8:79:e1:7f:57:d2:61:e3:69:
b1:bd:ca:cc:0e:76:01:97:ce:22:03:ff:44:91:61:7e:d4:0d:
58:94:07:92:92:07:d7:7a:04:e6:bd:5b:b9:af:ce:8c:34:13:
f1:90:76:f5:0d:eb:87:1b:ba:d8:4c:75:c4:57:85:10:e6:8d:
4a:98:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:56 2026 by rpki-client