Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: Ni0tFYX1NyjfOiKX9bg1xK39fLPuFUUHCsHCn/goWmI=
Subject key identifier: 3D:72:EB:84:40:A6:80:21:21:1B:8C:E6:BF:DC:C6:3A:E6:AD:71:BF
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01A0DACD3F2F0BFB83AAD22AA05E0FE6FE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1A76
Signing time: Fri 25 Sep 2026 23:01:19 +0000
Manifest this update: Fri 25 Sep 2026 23:01:19 +0000
Manifest next update: Sat 26 Sep 2026 23:01:19 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: YxY1BNqNntb9_rMbUTeJ_0YPx2Y.asa (hash: 9EJbKH7qVFxDEjq7ju1hKcNKpr3FzmvX6YfOfaFcrXE=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: ccwS12OD5NtEMVT4kBTp6AsKU6ezUAV0QR/e3rV4X5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:3f:2f:0b:fb:83:aa:d2:2a:a0:5e:0f:e6:fe:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Sep 25 23:01:19 2026 GMT
Not After : Sep 26 23:01:19 2026 GMT
Subject: CN=3d72eb8440a68021211b8ce6bfdcc63ae6ad71bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:eb:c2:f0:d4:16:4c:ec:e6:42:49:73:07:
a2:4c:fb:64:67:1a:30:e1:b9:3c:71:19:2e:29:97:
f6:c2:d5:f1:ba:b4:06:08:44:ee:3d:62:a9:e2:54:
8c:9e:29:b9:6a:c3:1b:49:5e:a5:a2:86:38:4f:7b:
0f:cb:c2:f5:e1:74:dd:d8:45:82:2c:e1:46:f9:6c:
60:7f:b0:ad:ab:71:43:3d:c8:bd:79:c6:dd:a6:1f:
a0:e7:02:8d:f3:e4:47:a4:71:4d:04:ed:ba:83:c0:
7f:a1:89:f8:09:ac:2d:49:c6:5b:88:a8:36:4e:ad:
ec:1f:2f:d5:bd:87:5b:5b:7f:a6:69:94:40:fc:49:
39:f4:63:71:6d:b2:fb:41:da:57:ba:51:bb:80:15:
27:98:8b:42:b9:c4:9b:cb:7d:1b:28:74:b3:f7:5d:
86:57:9e:2c:85:00:4c:ae:a4:31:15:ae:47:c9:c7:
24:78:df:97:c7:2b:6a:ab:7f:f2:5d:c5:e8:c3:cc:
34:8b:e2:8d:58:0a:5c:ef:3c:aa:c4:4d:7b:f4:e2:
48:b9:3f:bf:ba:c3:7f:3d:8d:24:d4:7f:34:f5:8d:
1d:91:3e:a7:46:bc:b1:43:ef:b8:b6:14:0c:7a:e3:
b4:4e:45:e5:73:00:19:ac:a1:33:e7:de:12:47:f8:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:72:EB:84:40:A6:80:21:21:1B:8C:E6:BF:DC:C6:3A:E6:AD:71:BF
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f2:68:1a:1d:d9:01:f6:b0:52:14:0f:25:a9:b4:1f:00:7c:
3c:a1:ba:dd:03:2a:bd:c7:32:a2:ac:25:e9:26:2e:6b:5e:27:
8a:21:1b:4d:88:e3:03:41:07:a5:2a:95:03:83:d8:e5:8c:75:
fe:55:d6:75:97:26:11:41:6a:7e:9a:b8:08:43:4f:e5:67:4d:
50:0a:c6:52:5e:d1:c6:77:70:c9:dc:c5:dd:dc:89:8e:a4:6e:
bb:cc:69:22:6b:87:31:4b:2b:58:59:f1:bc:24:0d:30:71:a3:
ea:0c:e5:59:6b:5a:79:a6:5d:1d:2c:cb:6e:29:1d:53:1c:36:
75:73:34:08:2a:3c:e8:92:5b:3e:ba:9c:dc:78:67:54:00:fe:
10:db:d3:23:e7:1c:be:07:fc:5e:a1:55:65:72:5d:5b:49:8d:
eb:f8:71:bf:5f:60:b8:e3:0c:63:8d:1c:bc:4f:8a:cd:a5:59:
a8:c8:f9:5e:ec:39:2c:3c:ae:84:a0:2f:17:f6:49:25:5a:9d:
06:b9:ef:a4:37:ca:2b:16:d8:a3:8e:cf:1c:c9:06:f7:b7:9f:
c4:6c:1a:bd:f4:49:8d:cb:66:a6:02:9a:dc:1e:80:18:d6:44:
21:c0:49:5a:7d:a4:c2:23:16:ea:bf:1a:ad:ee:37:e7:8f:04:
af:17:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:10 2026 by rpki-client