Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: Jk55lzD+50nOfrs94vIN762QTvQpzXLombCyS2H4kCk=
Subject key identifier: 6F:75:22:F7:E0:B6:09:B9:B8:BF:49:62:1A:68:6F:78:EA:12:68:D9
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01A0D9F1D12014059AC3728D6ED5A2E978E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 19:01:38 +0000
Manifest this update: Fri 25 Sep 2026 19:01:38 +0000
Manifest next update: Sat 26 Sep 2026 19:01:38 +0000
Files and hashes: 1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: 9nI+8udtbrcSCYDEENW3KBHoVx9U6rhlfTOfm8FUv0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:d1:20:14:05:9a:c3:72:8d:6e:d5:a2:e9:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Sep 25 19:01:38 2026 GMT
Not After : Sep 26 19:01:38 2026 GMT
Subject: CN=6f7522f7e0b609b9b8bf49621a686f78ea1268d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:4e:ea:8d:40:e4:12:a3:c6:ad:31:bb:19:
e2:19:94:eb:e4:e8:d5:d8:db:38:ec:05:e0:3a:b0:
d8:30:cb:31:a2:81:7a:84:d4:86:52:a3:92:b8:6f:
de:f2:3e:ee:0d:d7:2c:4d:2b:d9:6e:69:df:91:94:
ba:d4:c7:4f:11:a2:be:82:4f:95:f3:0b:5b:5d:26:
0e:62:b2:77:bc:c9:9c:25:c1:71:fa:bc:72:79:d2:
ff:f4:d8:6c:1f:8a:0c:04:2c:4e:52:a4:04:da:84:
24:56:ff:65:bb:26:2d:bd:6b:d7:61:c0:e3:ee:0b:
80:72:b3:4f:f7:d4:54:b6:7a:38:21:dd:f5:d1:87:
76:ca:5e:f7:f4:5d:c5:93:3a:23:44:ff:39:b3:a9:
9c:98:36:13:7d:ac:05:e9:b1:08:b4:36:91:aa:bd:
ca:5f:6d:e1:5e:db:0d:be:5f:be:7b:8c:92:ed:00:
4d:62:23:ed:fc:ef:2c:9e:a2:a0:2c:2e:b1:5a:9d:
6b:95:70:9d:bd:81:08:1b:3c:58:87:64:8f:17:0d:
f4:f6:98:81:ca:be:db:8a:19:60:40:43:41:60:84:
b3:99:15:da:a2:0c:04:92:37:dd:bc:a4:ab:74:d9:
ae:a7:88:bf:e2:d5:d3:7e:5e:fc:14:e6:cf:6f:7c:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:22:F7:E0:B6:09:B9:B8:BF:49:62:1A:68:6F:78:EA:12:68:D9
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:26:5e:ad:09:59:4a:8e:29:ec:8a:3d:1a:e2:48:3e:07:b0:
59:6c:41:f0:7a:14:96:37:ad:c2:c9:3b:c1:1b:37:77:7b:ca:
cf:1a:22:2a:38:42:d9:dd:68:d6:29:5f:7b:54:c5:ed:27:0a:
55:e7:b5:35:2a:50:3a:3c:ce:9f:a3:10:01:37:a1:35:a6:a1:
3b:63:94:9c:3a:fe:db:38:91:36:f7:fb:36:96:ea:d9:e4:cf:
4f:6e:86:12:02:00:30:e9:8b:35:d9:57:d3:5f:e6:05:29:db:
f5:18:3a:84:61:ac:3d:a2:06:02:9e:97:a2:24:c2:cd:b2:00:
aa:69:d0:4c:4a:6a:24:7a:37:a1:23:f3:f0:c1:0a:81:1a:1a:
89:23:5f:ef:5b:39:bd:1d:f5:d8:85:b8:5d:a1:5d:59:9a:35:
d3:fc:76:b2:df:d8:47:91:a2:5b:b9:5c:5d:a3:51:6d:2e:66:
a8:a9:bc:f6:e4:8f:79:bb:6f:4b:91:57:68:f1:7c:2b:d0:d8:
fa:a0:a7:81:b2:da:44:0f:04:9c:1d:e9:09:9f:c2:e0:d3:b0:
34:5e:63:45:11:cd:1e:d0:fa:ce:2d:16:00:af:df:93:bc:68:
e9:80:4b:2c:13:a2:da:0f:2b:f6:b4:4f:c5:a4:0d:03:58:44:
90:be:ff:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8dEgFAWaw3KNbtWi6XjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjYwOTI1MTkwMTM4WhcNMjYwOTI2MTkwMTM4WjAzMTEwLwYDVQQD
Eyg2Zjc1MjJmN2UwYjYwOWI5YjhiZjQ5NjIxYTY4NmY3OGVhMTI2OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9O6o1A5BKjxq0xuxniGZTr5OjV
2Ns47AXgOrDYMMsxooF6hNSGUqOSuG/e8j7uDdcsTSvZbmnfkZS61MdPEaK+gk+V
8wtbXSYOYrJ3vMmcJcFx+rxyedL/9NhsH4oMBCxOUqQE2oQkVv9luyYtvWvXYcDj
7guAcrNP99RUtno4Id310Yd2yl739F3FkzojRP85s6mcmDYTfawF6bEItDaRqr3K
X23hXtsNvl++e4yS7QBNYiPt/O8snqKgLC6xWp1rlXCdvYEIGzxYh2SPFw309piB
yr7bihlgQENBYISzmRXaogwEkjfdvKSrdNmup4i/4tXTfl78FObPb3zpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG91Ivfgtgm5uL9JYhpob3jqEmjZMB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyZerQlZ
So4p7Io9GuJIPgewWWxB8HoUljetwsk7wRs3d3vKzxoiKjhC2d1o1ilfe1TF7ScK
Vee1NSpQOjzOn6MQATehNaahO2OUnDr+2ziRNvf7Npbq2eTPT26GEgIAMOmLNdlX
01/mBSnb9Rg6hGGsPaIGAp6XoiTCzbIAqmnQTEpqJHo3oSPz8MEKgRoaiSNf71s5
vR312IW4XaFdWZo10/x2st/YR5GiW7lcXaNRbS5mqKm89uSPebtvS5FXaPF8K9DY
+qCngbLaRA8EnB3pCZ/C4NOwNF5jRRHNHtD6zi0WAK/fk7xo6YBLLBOi2g8r9rRP
xaQNA1hEkL7/Kw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:58:08 2026 by rpki-client