Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: jA5w69zwnWk4oHpk4ilW2p+lS2moFSg1CyS6N8TYay8=
Subject key identifier: D5:E9:38:86:C7:74:7C:77:FF:92:11:40:76:31:50:3C:9E:99:BD:97
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 01A110DFE5198DD9AFD7F8D0757FB56D6DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 08E8
Signing time: Tue 06 Oct 2026 11:01:10 +0000
Manifest this update: Tue 06 Oct 2026 11:01:10 +0000
Manifest next update: Wed 07 Oct 2026 11:01:10 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: AAmjYs4eX5EewZQuUvR0sKlOWBEto1EI5u4CdHT9wuU=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:df:e5:19:8d:d9:af:d7:f8:d0:75:7f:b5:6d:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Oct 6 11:01:10 2026 GMT
Not After : Oct 7 11:01:10 2026 GMT
Subject: CN=d5e93886c7747c77ff9211407631503c9e99bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:a4:9e:44:1d:d4:87:2d:8a:14:45:f7:30:
9d:b1:46:76:75:61:e8:f9:bc:a5:da:7c:c9:28:74:
91:06:42:3f:e1:93:7d:82:7e:a3:76:33:62:4c:32:
f9:e0:33:8f:00:9f:61:43:f5:94:be:85:a9:a4:93:
03:83:30:7c:13:15:93:25:ba:9d:ad:4b:2f:5b:f6:
4f:b6:4f:da:6c:29:4c:9c:7e:15:57:48:b1:7b:58:
b0:d5:23:69:09:02:f1:9a:4f:c6:f0:b9:89:a7:e6:
d2:fa:c8:e9:38:54:04:49:4f:a8:79:b6:b6:15:46:
ce:e8:67:92:5f:13:a8:6b:95:08:f1:a1:01:52:d7:
ed:47:0a:dd:79:f9:64:8b:f9:4d:3e:9c:d9:ae:bc:
75:73:53:b1:65:4a:e6:28:5f:0b:d3:92:c3:75:c4:
21:fa:e3:f4:b9:1f:d3:38:3d:67:c7:c5:83:e5:b4:
9e:3d:32:8b:46:a0:46:4c:a9:c2:eb:5e:4f:e1:35:
e8:fe:10:82:ca:3c:ea:2a:08:69:df:f2:da:7e:41:
d8:ce:e0:29:f9:43:cf:80:2a:0c:ef:4e:bf:bc:8f:
b6:12:a0:e1:76:5b:32:28:84:b6:a1:9a:b5:d8:f9:
a5:65:bd:6b:12:35:ff:48:e7:60:70:e3:4e:1a:2f:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:38:86:C7:74:7C:77:FF:92:11:40:76:31:50:3C:9E:99:BD:97
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:98:b3:db:c3:70:61:0c:76:6f:bc:b2:43:20:f6:bc:51:
85:ef:a5:b3:6d:ea:dc:54:ac:f3:ad:49:8b:b2:03:50:89:e0:
66:ca:c4:ed:ba:d5:08:57:5f:dd:c3:1c:6a:6a:69:d1:73:c7:
3e:1c:39:64:a7:01:ce:cd:70:e4:1b:c2:fb:bb:49:de:77:89:
dd:fa:3d:47:11:2b:ed:67:91:89:f2:ba:6e:10:10:67:4e:5d:
5c:ae:de:05:ad:f9:36:f9:73:51:bc:42:cd:bc:a0:c7:33:f1:
51:80:28:80:ff:66:92:4c:d5:a8:44:2f:e3:6a:83:b2:9d:a0:
31:ce:b8:58:ab:8f:50:ba:74:87:79:82:1c:16:af:c8:68:09:
c7:c1:60:49:83:8e:84:4f:49:45:82:01:a7:44:be:39:29:2d:
aa:a6:87:82:ad:84:ed:6d:da:80:d5:17:60:ba:de:8f:30:8e:
4c:b1:6c:08:84:d8:0b:e5:1c:8c:21:00:ef:58:95:17:98:c2:
b1:83:ec:a5:59:3c:b1:de:4a:09:51:f7:4a:22:a8:53:db:5f:
ca:48:16:98:10:81:d8:aa:56:d6:14:c1:4e:19:9b:cb:ce:3e:
b8:f6:ef:8f:f3:ac:c2:84:e2:ed:b6:b4:50:ee:52:49:e2:95:
df:7a:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:19:28 2026 by rpki-client