Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: kR9hWBFs6mYb42KFvE2Es8bqGjYja8VKjs0ypve3pOg=
Subject key identifier: BB:4D:AC:80:CA:27:17:83:E2:64:19:CC:3D:58:90:E1:80:D7:C3:55
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 01A0DBDF8B6FA3E2674276DC4306B8DF72D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 1A7E
Signing time: Sat 26 Sep 2026 04:00:55 +0000
Manifest this update: Sat 26 Sep 2026 04:00:55 +0000
Manifest next update: Sun 27 Sep 2026 04:00:55 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: 9EuWTNWaLFyoo3PFy4FEJ89uDWJnAihG6kW1peXm2pA=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:8b:6f:a3:e2:67:42:76:dc:43:06:b8:df:72:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Sep 26 04:00:55 2026 GMT
Not After : Sep 27 04:00:55 2026 GMT
Subject: CN=bb4dac80ca271783e26419cc3d5890e180d7c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:a5:82:fe:48:fd:49:64:c0:f0:a8:9f:2c:
c4:6a:47:c9:1d:38:eb:76:00:1c:86:40:5f:6d:43:
49:51:4d:c6:b7:b7:5d:42:48:51:38:cb:37:10:bb:
07:2a:92:ce:5c:32:04:b8:b8:6a:66:72:40:6e:e2:
9d:72:5c:3c:7f:5c:76:7b:7a:02:26:e1:b4:11:8e:
06:27:dc:b4:00:ad:09:29:38:6b:2b:9e:e5:20:cc:
c2:43:ab:f9:aa:df:2b:65:b8:1d:90:0f:4b:9b:34:
a1:15:52:9d:04:86:74:30:1e:3b:37:0d:e7:9d:b6:
b8:da:71:bb:a1:6a:45:6f:3b:ed:22:1f:15:90:95:
6d:a6:09:21:78:dd:a0:3f:32:51:e3:5e:20:68:db:
50:06:0b:e7:1e:62:f0:0c:02:e7:b2:f0:0e:2d:42:
5b:92:01:71:48:2e:d3:2d:31:de:b1:3a:01:93:56:
5b:78:c8:0a:69:0a:e2:7f:fe:ab:0f:2f:f3:38:2b:
eb:23:a9:7e:99:5a:81:6a:6a:b4:d1:31:5c:93:81:
b7:54:04:8a:2c:f6:c5:de:1b:b9:f2:db:68:e8:8c:
eb:c3:25:27:a4:f3:f0:59:ed:74:8f:49:c4:6f:59:
50:57:14:a6:50:b6:2f:3f:08:3b:d2:ee:7f:7e:7d:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:AC:80:CA:27:17:83:E2:64:19:CC:3D:58:90:E1:80:D7:C3:55
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:52:44:4c:7b:5c:21:e4:91:82:c3:91:1f:ee:b2:78:eb:7e:
6e:10:43:c2:59:15:28:6d:25:e4:cb:45:3c:69:39:c5:a3:bf:
99:65:6f:ce:e0:71:b3:16:8d:a4:02:02:99:70:43:4a:12:76:
20:c6:87:7d:6f:0f:0b:c0:e5:3a:9d:d2:51:a6:bc:e5:51:4e:
5b:2a:fb:da:a9:e5:1a:b8:a8:1c:32:58:ee:7a:d3:23:5c:3f:
e2:98:f3:3f:e3:fd:be:05:1b:29:70:4f:66:d7:e9:45:f2:ee:
ec:b5:0a:e3:00:4b:5e:2f:ba:d5:4c:bf:29:ab:67:f2:9c:a8:
47:2d:44:b5:44:8c:f0:a1:f4:3b:f7:ee:05:1b:d4:fe:a2:24:
17:38:b6:86:5d:9b:b7:7c:0e:80:5d:93:d8:cc:e5:11:e9:06:
ba:94:36:17:48:ba:2a:20:7d:02:05:34:cb:a2:10:02:98:43:
5c:12:f0:e2:66:44:ca:d8:c1:e5:6e:b1:f2:94:e4:02:27:a6:
80:7f:cb:1f:9a:9a:5d:fa:9e:c0:2a:07:f7:a9:c4:2d:2c:d4:
9f:1c:5c:b7:8c:41:be:fa:c7:fd:bf:2b:0b:4e:76:09:d9:3e:
e9:44:9a:e7:ba:80:95:38:d7:f0:24:b4:e0:67:fc:c7:41:c3:
d7:ad:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:29 2026 by rpki-client