Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: pRvK1OavSCMiJM9D8fZhKuo054E2wia9aqNJgf5xrGI=
Subject key identifier: 8F:0D:22:CF:35:46:94:1B:89:2F:89:B9:56:33:24:03:92:81:9F:12
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 01A0DDCDFAF44E9C34C4758A195E3E70D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0E6F
Signing time: Sat 26 Sep 2026 13:00:58 +0000
Manifest this update: Sat 26 Sep 2026 13:00:58 +0000
Manifest next update: Sun 27 Sep 2026 13:00:58 +0000
Files and hashes: 1: BL4Vtry3hEpte5DWArEP18F1cE0.roa (hash: gofiyS9syREpyRSAEswnOrvXK3X11R7n1mcI61HsmZo=)
2: De10BA3lyb6wC65o9g_3Z3Rq9oE.roa (hash: n2SRcsi6LtLV6qCMUUDWO/sW9w7HRsZQAdCEZ81fiO8=)
3: cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa (hash: J8fumuS9RwLV1jOdIP4cqRgqwBElG3GCVerOnC7YBBM=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: ls6VUt0PxXyPak24OFTfKcnJj9T3oagEQ/qFt9rQsgU=)
5: o14utqHYZFxhZfVEkq-FP4EOMBc.roa (hash: s9KvSuwsAo53TsaYUbZWoSvNDjlPZyPjIsdZ0Auhgao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:cd:fa:f4:4e:9c:34:c4:75:8a:19:5e:3e:70:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Sep 26 13:00:58 2026 GMT
Not After : Sep 27 13:00:58 2026 GMT
Subject: CN=8f0d22cf3546941b892f89b95633240392819f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:be:a1:e5:97:4c:f6:dd:22:d1:63:b6:38:
86:df:75:2a:af:de:9f:38:82:b8:f5:7f:75:cc:99:
97:9b:f5:79:85:1c:fe:5f:4c:6b:a3:83:22:eb:3f:
c4:38:52:7a:21:fe:29:3a:86:d7:39:47:b4:d2:a5:
5a:42:5d:6e:b6:c9:3d:fa:cb:88:28:f2:3c:bc:c0:
e8:49:85:fe:21:76:20:77:da:1a:47:8f:72:a7:f7:
26:0b:ac:97:e1:4c:78:07:36:8e:ef:b5:b4:06:6a:
90:4d:dd:c2:d2:24:3c:7f:63:8a:e0:f8:3e:4f:dd:
4d:2b:6d:88:88:93:60:b9:49:e5:4b:24:49:85:5d:
51:c8:dc:f9:d5:7b:36:29:5c:7a:19:3c:ad:68:14:
ec:e3:12:ae:40:5a:6f:21:49:da:7c:06:c1:14:17:
01:19:f9:28:16:00:23:90:f7:03:24:39:97:8a:a0:
e0:14:4c:a5:3d:77:9f:95:00:cb:e0:7b:16:05:a9:
d4:de:9f:4a:62:9f:32:45:27:3c:7e:fb:8e:30:76:
f1:cb:73:0e:9a:99:bc:df:cb:ee:7e:3f:3d:ef:8c:
d6:eb:94:05:2b:07:52:e4:8f:d7:5e:85:ef:44:0a:
ad:8e:c9:c1:30:de:09:5f:d3:8b:4f:c4:90:7d:ce:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:22:CF:35:46:94:1B:89:2F:89:B9:56:33:24:03:92:81:9F:12
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:57:59:db:68:c4:1d:34:70:36:57:ae:f6:1a:a4:2b:3f:
1a:c5:c9:72:e7:d2:e1:14:48:aa:67:0e:80:71:ba:03:76:99:
b7:b3:6f:5b:e8:7b:db:57:1d:3a:dc:d5:3e:b9:78:23:4d:74:
cf:0d:60:80:6e:80:37:75:be:b1:6c:14:d5:94:10:d6:c3:6d:
6a:84:a5:18:42:41:6b:45:19:af:f6:44:4b:0a:28:a2:97:ae:
d9:ea:61:1d:9b:e9:24:e1:e7:b5:aa:55:29:24:1b:d9:b4:90:
f4:e3:eb:18:8f:e0:dd:c1:42:83:f6:f9:18:11:6e:c5:cc:92:
a3:eb:72:71:61:8e:01:f0:ff:5e:83:52:5f:d8:27:21:48:2e:
fb:59:8d:ca:0b:1f:66:9f:d7:60:28:b9:01:16:6a:08:fe:98:
00:2e:cd:61:f1:3f:d3:ee:53:3d:ab:57:39:67:80:e1:2f:90:
86:42:0d:e6:9b:28:26:b6:e2:d8:0f:4e:dd:01:93:9a:61:87:
0f:9d:e1:e1:01:62:8e:49:d0:b1:49:12:7c:c7:13:d9:9f:4b:
7b:b6:51:c0:c5:4f:b5:f7:30:d7:4f:bf:bc:35:c7:69:e9:f5:
1f:6d:51:b1:d6:8c:ac:65:d3:39:89:76:4e:83:c1:d4:2c:4c:
86:ba:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:57:34 2026 by rpki-client