Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: dW872pA4sNTxH1gkgrHlAq1hjn7Dsl4yHHwiqebhXq0=
Subject key identifier: FD:7B:91:5B:23:95:00:52:CF:A5:35:77:C7:19:1F:6E:81:F9:CF:13
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01A0E399A006E1A4AA5C32EBE58391986850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 16:01:30 +0000
Manifest this update: Sun 27 Sep 2026 16:01:30 +0000
Manifest next update: Mon 28 Sep 2026 16:01:30 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: sYIg0Oj8L+gMv1HWxXBWiqPDdUOUjRmjjlb8kisYYU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:a0:06:e1:a4:aa:5c:32:eb:e5:83:91:98:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Sep 27 16:01:30 2026 GMT
Not After : Sep 28 16:01:30 2026 GMT
Subject: CN=fd7b915b23950052cfa53577c7191f6e81f9cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:4a:72:a4:60:3a:76:30:e8:02:f5:9b:4b:
eb:ca:c0:97:14:1c:10:0a:a5:48:16:ae:f1:d6:2e:
7e:ee:b4:fd:fa:47:77:40:e3:02:25:e4:7c:a5:b6:
a7:77:e7:32:61:da:66:e3:d1:37:bc:08:da:f2:ca:
be:7d:e5:01:d8:36:a3:7a:32:ff:e0:ae:18:f9:4e:
c8:cb:af:c5:3a:ca:80:5d:9a:51:7c:e0:6d:7f:6e:
86:7b:69:f4:c6:30:97:5a:1a:52:83:11:dc:10:fb:
8c:39:dc:a6:31:da:09:1c:ed:41:08:13:f7:38:72:
0c:12:16:af:68:ad:1b:44:c6:63:ad:48:ef:bc:8c:
bc:a9:20:4e:8e:e2:f8:28:f7:56:d8:50:74:5c:63:
22:52:aa:e0:96:54:59:04:dc:9c:6c:a2:91:66:ea:
ab:11:82:a4:e1:6e:58:b9:dd:eb:36:b5:51:fe:a7:
fe:4c:f3:ce:da:a1:17:8c:70:58:7f:fe:9b:d6:39:
06:c1:ed:05:37:21:6a:16:45:1e:2f:81:25:a2:65:
20:40:f5:57:0c:38:69:5e:f4:fe:a0:d2:e9:ca:eb:
dc:2e:23:92:6d:bc:b5:fe:5b:9d:05:cf:43:7a:69:
76:d4:71:59:00:6f:11:30:1e:bc:9d:83:86:33:bc:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7B:91:5B:23:95:00:52:CF:A5:35:77:C7:19:1F:6E:81:F9:CF:13
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:de:24:74:24:c9:39:f5:74:5a:84:47:8e:b8:fa:38:a3:
be:6f:0c:43:b6:b2:c5:27:5d:f3:87:e2:46:a6:a7:48:fb:48:
39:e6:85:0f:70:49:7f:bb:0a:a1:d1:5a:96:b9:f1:e5:e0:8c:
2c:65:5d:f3:d4:81:93:99:ef:66:a3:4a:05:21:f6:01:5c:e3:
eb:c5:d0:70:3a:a7:f6:e3:f9:44:cf:67:5e:08:1f:f3:7e:96:
d7:d1:17:f1:da:44:88:96:3c:80:59:52:bc:dd:cf:4b:0c:a8:
ed:d1:37:58:5f:ce:34:a2:ac:37:83:30:f5:d2:5e:ca:bc:1c:
85:9c:d2:3b:9d:34:ac:d1:a5:fc:01:c7:c4:da:b0:cc:c0:06:
74:e6:00:d7:90:f5:b3:b8:d0:02:1f:6f:a7:9f:01:65:fc:87:
57:34:bc:69:6a:c7:26:9f:d1:71:1b:44:97:31:d5:a1:1c:90:
a8:58:65:20:50:17:ef:84:ca:cc:5c:f8:7e:df:ee:40:9e:b2:
1d:1b:c7:68:b9:1a:1b:38:1a:3e:1d:3b:ae:e7:c5:92:89:1a:
0e:7b:28:a8:c9:0f:99:af:43:a8:57:52:44:c9:d9:ad:49:86:
68:d9:5c:b2:1b:86:18:4b:1f:7a:bd:a9:a2:41:e3:06:52:a9:
f4:43:3e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjmaAG4aSqXDLr5YORmGhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5
OWM4ZTEwHhcNMjYwOTI3MTYwMTMwWhcNMjYwOTI4MTYwMTMwWjAzMTEwLwYDVQQD
EyhmZDdiOTE1YjIzOTUwMDUyY2ZhNTM1NzdjNzE5MWY2ZTgxZjljZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5KcqRgOnYw6AL1m0vrysCXFBwQ
CqVIFq7x1i5+7rT9+kd3QOMCJeR8pband+cyYdpm49E3vAja8sq+feUB2DajejL/
4K4Y+U7Iy6/FOsqAXZpRfOBtf26Ge2n0xjCXWhpSgxHcEPuMOdymMdoJHO1BCBP3
OHIMEhavaK0bRMZjrUjvvIy8qSBOjuL4KPdW2FB0XGMiUqrgllRZBNycbKKRZuqr
EYKk4W5Yud3rNrVR/qf+TPPO2qEXjHBYf/6b1jkGwe0FNyFqFkUeL4ElomUgQPVX
DDhpXvT+oNLpyuvcLiOSbby1/ludBc9Deml21HFZAG8RMB68nYOGM7zc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP17kVsjlQBSz6U1d8cZH26B+c8TMB8GA1UdIwQY
MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt
NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz
LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4TeJHQk
yTn1dFqER464+jijvm8MQ7ayxSdd84fiRqanSPtIOeaFD3BJf7sKodFalrnx5eCM
LGVd89SBk5nvZqNKBSH2AVzj68XQcDqn9uP5RM9nXggf836W19EX8dpEiJY8gFlS
vN3PSwyo7dE3WF/ONKKsN4Mw9dJeyrwchZzSO500rNGl/AHHxNqwzMAGdOYA15D1
s7jQAh9vp58BZfyHVzS8aWrHJp/RcRtElzHVoRyQqFhlIFAX74TKzFz4ft/uQJ6y
HRvHaLkaGzgaPh07rufFkokaDnsoqMkPma9DqFdSRMnZrUmGaNlcshuGGEsfer2p
okHjBlKp9EM+0w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:33:00 2026 by rpki-client