Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: OzpzMoiR9H0s79NfnVIFnmI/GFaZz2Gepc7MBx4/VaI=
Subject key identifier: B9:36:1A:DF:1B:C7:8D:2F:22:51:F7:39:B0:06:DD:ED:74:75:AE:26
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01A0CD4785E4B25C0E8C00A9127F3B8AA2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 08:00:11 +0000
Manifest this update: Wed 23 Sep 2026 08:00:11 +0000
Manifest next update: Thu 24 Sep 2026 08:00:11 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: xsTXSc8Lp5xRqa/kO89h6Ii5b5EUcW9suo2mHqsjiu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:85:e4:b2:5c:0e:8c:00:a9:12:7f:3b:8a:a2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Sep 23 08:00:11 2026 GMT
Not After : Sep 24 08:00:11 2026 GMT
Subject: CN=b9361adf1bc78d2f2251f739b006dded7475ae26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:3f:e5:52:e7:de:43:67:9a:51:93:96:b6:
75:f4:86:58:e9:e7:07:c8:82:67:7b:ad:e0:f4:06:
c9:38:8f:4c:54:77:92:e2:cd:36:1f:96:82:b9:fa:
29:7f:5b:c9:a2:84:21:80:7e:d3:49:f4:05:fe:de:
3a:13:30:4e:0e:8e:05:39:3b:13:4a:6b:cb:0d:17:
7e:54:6a:51:3f:e3:85:92:7e:7b:68:da:16:b3:06:
a1:74:ef:d7:52:b1:53:d9:ed:b0:dc:f2:7a:3f:99:
81:46:73:39:d0:8a:3c:a0:08:94:12:60:ac:20:bf:
f0:52:b6:16:63:b1:15:92:86:32:cc:6b:08:6f:49:
75:dc:f9:5e:4f:75:1c:ac:df:65:11:50:94:08:7c:
ab:88:ef:a6:67:7a:e6:43:cb:8b:df:ed:10:df:88:
68:10:9d:e4:d2:2e:43:d7:70:71:32:f1:a0:56:6e:
ff:05:63:66:c7:5f:35:ad:34:8c:20:4c:f8:11:a2:
85:5b:c4:58:f1:dd:2e:c8:a0:f9:3c:2c:34:62:8b:
f3:ce:7a:9d:96:94:46:91:73:8f:88:36:91:5d:67:
cc:73:8d:55:f7:3f:cb:29:5e:ad:8d:71:9d:6e:78:
11:92:09:b7:b9:22:ff:c2:22:10:b6:e4:51:80:a2:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:1A:DF:1B:C7:8D:2F:22:51:F7:39:B0:06:DD:ED:74:75:AE:26
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:27:9c:1c:cd:1a:20:d6:01:87:e5:0a:6a:28:69:8c:65:
96:1d:ad:80:43:14:d7:9f:ec:dc:9e:24:8d:af:24:92:9c:ae:
5e:6b:01:29:28:41:da:d0:8c:ac:1d:8d:9a:43:c8:33:01:fe:
13:54:8a:5e:62:2a:f1:2d:68:69:e1:79:4c:ad:50:d1:8d:2e:
53:61:16:bb:36:e2:3d:ae:92:e3:14:fb:44:47:0d:53:6d:e9:
e4:c7:e3:da:b7:da:95:e1:73:e7:de:79:86:90:a7:09:97:4a:
11:42:c6:47:c0:19:53:57:35:f3:ff:e7:65:8d:b7:af:47:d6:
46:c1:30:81:fb:a3:5f:85:da:1a:91:96:7b:71:1b:99:13:bf:
56:1b:4c:23:60:b6:00:ea:ad:52:3a:11:13:cc:24:d1:32:e0:
10:39:5a:c1:ba:7d:04:91:3a:db:56:48:e3:67:5f:9f:2e:3c:
98:2f:70:6f:f8:11:08:34:92:4e:1e:7c:9f:c1:b0:73:c9:d1:
6b:a7:a1:53:c3:e3:60:bd:b4:28:50:e4:f7:03:aa:ec:ab:a1:
69:32:c9:48:ee:97:37:ec:25:e8:b1:1b:e4:f7:16:96:68:09:
40:4b:8c:32:40:14:1e:4f:bf:ce:ac:22:9b:0b:1b:c8:e9:ee:
77:09:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:07 2026 by rpki-client