Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: zFrLTtfZN+rksRqgJxBnY39Rsx/qfHOIJDDn+CTdvk0=
Subject key identifier: 85:48:A0:6A:48:7F:0A:3E:AA:5F:DE:B2:F5:37:FB:9E:5B:B6:91:47
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 01A108818AB5597AD219FA1B65FC0F52A81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0F2D
Signing time: Sun 04 Oct 2026 20:01:09 +0000
Manifest this update: Sun 04 Oct 2026 20:01:09 +0000
Manifest next update: Mon 05 Oct 2026 20:01:09 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: vn5I399iJMU2cvBHXQ74V37WMez5mC5iVB2jt7ltMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:8a:b5:59:7a:d2:19:fa:1b:65:fc:0f:52:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Oct 4 20:01:09 2026 GMT
Not After : Oct 5 20:01:09 2026 GMT
Subject: CN=8548a06a487f0a3eaa5fdeb2f537fb9e5bb69147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:67:b3:8c:d4:71:48:8d:9e:44:45:cc:61:
fc:0f:70:83:11:5f:c0:bf:45:14:df:ef:40:1b:5a:
68:9e:98:46:84:ef:14:45:20:75:d2:e1:25:37:e3:
f2:bb:a3:ab:46:8d:3a:d4:36:8a:f0:0f:f7:75:8c:
bb:2d:39:bf:0c:87:77:53:3f:fb:66:39:72:42:58:
28:04:ff:22:50:97:0f:13:ca:65:6e:26:21:ce:4e:
a2:b0:02:e4:d3:2e:48:30:28:4d:8c:69:6d:2c:2c:
e9:a9:9f:76:26:9a:a8:9b:68:5d:7d:0b:04:f3:e5:
db:91:45:67:44:45:b4:cb:18:e4:4c:15:91:e3:1c:
fa:ef:d7:0e:e9:41:ee:67:2c:d4:57:8a:f5:d2:ce:
4c:2b:e6:7a:25:1b:87:ef:c3:df:2d:f7:4d:31:04:
c7:de:b0:fb:c1:67:91:38:16:5b:eb:0f:f6:89:31:
7d:4f:1f:cf:d4:bf:7c:9c:39:6e:7a:60:ee:93:ac:
a6:b4:fb:2b:50:5e:db:b5:b4:e4:56:ec:4b:b1:b6:
b7:5a:bc:48:7c:37:30:04:c5:78:0c:8d:5d:7c:5a:
0d:57:5f:8a:69:b7:7a:0c:c2:30:dd:de:81:14:84:
96:da:70:b1:2e:a2:a6:9c:8f:3c:38:97:b9:b8:96:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:A0:6A:48:7F:0A:3E:AA:5F:DE:B2:F5:37:FB:9E:5B:B6:91:47
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:04:a9:70:b4:41:f3:7d:8f:0c:6c:dd:10:78:59:e6:97:
f9:05:8c:6f:71:f0:48:2b:c8:8f:05:25:e8:87:f5:76:74:5d:
70:0c:fd:52:63:d8:48:38:de:73:6f:d3:12:be:1f:f5:73:d9:
9f:ab:08:fd:60:b5:b1:72:22:84:12:74:1f:5f:3d:38:a5:0e:
4f:0c:f2:d4:d1:24:0a:32:c9:e3:61:1e:23:5f:cc:56:9f:69:
bb:0e:86:cd:d2:fa:23:f3:3f:6d:7d:1c:40:63:0c:39:f7:0d:
cf:b7:b5:9a:3d:77:3a:ea:c5:2b:85:5d:df:35:ad:cf:02:88:
e3:03:06:0c:ef:d2:4a:37:cd:64:51:c1:be:ad:05:83:f4:eb:
6f:98:85:6b:8f:af:81:7f:50:c2:a1:c4:f9:89:4c:60:97:1c:
51:54:d0:dc:b8:65:74:a0:2b:7a:28:88:4f:16:7d:67:50:0b:
1d:1d:47:8f:bb:7a:7e:12:40:d3:46:c2:35:3c:78:61:d2:ca:
27:b4:ff:48:36:91:8b:eb:87:73:ae:41:12:ee:26:ba:e2:c7:
f6:6e:4e:48:b3:2c:2c:d6:c9:82:1b:26:20:d5:74:7b:ac:7f:
b4:9b:35:4b:a1:c2:60:c9:c7:af:2b:f9:63:0d:6a:2b:42:63:
17:33:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:33:51 2026 by rpki-client