Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: ODToIhCQ1/xt3D0Cpe6BEYvdXT2/VdrZvit4NDy77FY=
Subject key identifier: CF:D9:CA:3E:D2:B6:76:4A:D1:33:94:28:9C:E0:A6:DC:19:D7:D0:87
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01A0DACDEA986073A12DCEDFDBAFF317F390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0F8E
Signing time: Fri 25 Sep 2026 23:02:03 +0000
Manifest this update: Fri 25 Sep 2026 23:02:03 +0000
Manifest next update: Sat 26 Sep 2026 23:02:03 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: Geyda7TvBOmHcJWbcj1JOIaUo8JKWQiDDvWRJypWDfw=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:ea:98:60:73:a1:2d:ce:df:db:af:f3:17:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Sep 25 23:02:03 2026 GMT
Not After : Sep 26 23:02:03 2026 GMT
Subject: CN=cfd9ca3ed2b6764ad13394289ce0a6dc19d7d087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:2e:cf:92:a2:25:6b:14:b6:78:b0:04:32:
89:20:96:c0:ce:b1:13:f2:d3:40:1b:7f:ef:a2:86:
04:14:b2:c0:8d:30:f4:38:b8:5d:7c:87:04:04:3e:
c1:22:fd:7b:c5:c4:eb:ad:76:e3:18:bf:81:44:e3:
33:f9:4f:18:27:ec:b8:be:5c:8a:d6:de:e7:78:42:
81:60:a3:24:61:c8:70:52:4a:ff:22:ab:24:35:06:
8f:12:da:8a:4b:84:a1:aa:fd:b3:f7:7b:f5:91:2c:
1c:2e:2f:7d:9e:2d:a2:d4:ff:65:9b:d3:9e:dc:52:
9b:05:ac:bc:5f:91:50:b9:d8:15:77:04:43:90:89:
08:58:b7:9c:a6:c9:ef:b3:85:36:8a:56:5d:20:0b:
78:57:d8:e6:29:f2:d9:8e:b3:53:63:f8:7c:cc:49:
68:c7:18:1c:22:91:5b:23:f7:9b:ee:98:bb:0c:c2:
b1:a3:18:1d:88:0f:c6:58:e8:f9:7d:1e:96:22:9c:
7d:38:4b:00:d3:4f:97:5e:f6:c4:82:8e:c6:11:2b:
89:aa:a4:35:a6:ea:dd:3c:1f:6b:1a:88:70:1b:c5:
59:24:b2:53:37:73:83:ba:20:c4:16:bc:85:79:68:
25:9a:b2:8f:af:3e:db:18:4b:7b:3d:d0:e0:ee:a2:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:CA:3E:D2:B6:76:4A:D1:33:94:28:9C:E0:A6:DC:19:D7:D0:87
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:cf:40:42:73:0d:e4:25:1a:7f:85:f6:68:f0:e6:22:f6:
77:30:e6:84:55:fd:0c:7c:fc:d6:c7:f0:e5:38:10:56:76:17:
3a:24:f9:4e:43:f0:dd:80:d9:4d:b0:45:f3:ae:6b:05:fe:ed:
8e:71:3b:66:b5:8d:95:19:e1:4d:2d:ee:60:cb:93:52:3d:7d:
43:58:48:74:33:fe:6c:b1:67:4f:35:22:2b:48:c0:46:66:03:
2d:4b:7b:51:3d:1b:03:e7:65:68:ee:d3:7d:a8:c6:89:4e:65:
69:bc:a2:05:56:4e:90:05:7a:ce:05:b1:ae:87:71:7b:1f:ca:
1f:b5:49:0f:5b:9d:1d:f9:0c:1a:c1:f0:c8:e3:ca:27:b6:8f:
95:3b:c3:9b:6e:fb:af:b8:2a:30:fb:5e:19:0e:dd:a5:41:81:
08:7d:62:79:d9:72:75:e1:d2:ab:20:7c:b1:3f:1b:6d:e4:18:
7c:9e:71:3e:e9:40:78:4f:29:7c:88:aa:96:b1:68:8a:eb:6a:
85:4c:8f:56:19:32:a8:d0:77:95:c7:9d:a5:d6:14:b5:b3:39:
fd:d3:c5:27:39:76:c8:d9:24:b6:0e:2b:bf:df:90:6d:c7:c1:
b4:e3:ce:0d:54:b2:55:e1:2d:69:a0:da:5c:dc:52:54:af:89:
d4:ac:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:54 2026 by rpki-client