Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: Br54wd7YGja2YLRX3YuM+tVyJE9pTnK1FeigE0GmnYA=
Subject key identifier: 65:77:57:4A:6F:49:BE:3B:5D:98:56:39:89:C6:98:94:90:E1:87:FD
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01A0E2500CFD50CF2968619A90CE3EE8D20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 1393
Signing time: Sun 27 Sep 2026 10:01:32 +0000
Manifest this update: Sun 27 Sep 2026 10:01:32 +0000
Manifest next update: Mon 28 Sep 2026 10:01:32 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: I/mEmV/Hu4+xxdcG0wOvQPi/r0vHmBLrx7hpc3q8mPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:0c:fd:50:cf:29:68:61:9a:90:ce:3e:e8:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Sep 27 10:01:32 2026 GMT
Not After : Sep 28 10:01:32 2026 GMT
Subject: CN=6577574a6f49be3b5d98563989c6989490e187fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:36:de:bc:4d:2b:57:00:60:18:49:d7:95:
fa:54:7e:57:1e:fa:a8:fb:30:d0:f3:7f:2e:12:28:
22:e6:26:e7:36:00:6d:a2:cb:74:d5:bf:44:18:b0:
59:4f:f5:74:c6:a8:15:a8:b4:0b:3a:ea:19:aa:f6:
f6:79:10:3a:4a:f8:eb:36:22:cb:73:89:aa:d9:f9:
99:c9:dd:f2:b6:4d:2f:0e:bb:62:cb:e4:fb:25:23:
11:35:9f:ce:23:87:74:67:98:4a:d7:00:11:08:57:
32:1c:66:35:c5:f2:3a:c4:27:1d:b9:3c:69:75:68:
19:58:2a:0d:3a:6a:f8:a0:ad:57:d2:0e:1a:45:36:
02:68:81:5b:7f:92:ea:44:c9:c1:09:61:2d:d2:dc:
b2:46:06:50:94:ea:46:21:74:dd:1f:7a:61:e1:bf:
aa:90:7b:e2:5c:75:05:ce:be:35:08:33:28:08:a3:
2b:56:61:93:cc:20:df:97:d7:f0:62:be:35:4a:5b:
82:c8:c1:49:2d:da:e6:30:92:69:b7:76:47:db:fa:
b3:e5:1b:30:7b:80:d8:b8:88:68:98:72:64:69:b0:
36:e4:d3:6c:72:3e:1e:76:62:da:14:03:2b:00:68:
9e:a9:0e:0f:31:51:b1:d2:f9:f3:34:94:14:b8:6e:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:57:4A:6F:49:BE:3B:5D:98:56:39:89:C6:98:94:90:E1:87:FD
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:f1:7e:a9:a2:de:23:ce:57:a7:4d:c3:f6:c2:00:b5:1d:
9d:f1:b8:7e:38:83:e4:0c:63:fc:96:94:ee:0c:8f:aa:d3:6b:
7a:7e:0b:e2:5d:50:66:1e:c1:72:d6:46:72:3c:24:bf:6c:05:
e6:df:ea:27:4a:95:72:0c:27:1c:ef:4c:cc:d5:f9:5d:1d:c9:
7b:40:9e:5b:16:38:cc:ea:aa:a8:c7:60:b7:cb:39:d9:cc:d9:
1b:47:7d:8b:93:09:5b:4b:2a:f6:b6:6f:2f:b1:14:ea:aa:f6:
15:74:16:6b:04:db:31:2e:03:99:4a:af:54:d9:3a:e7:0f:b0:
85:22:31:77:d4:a8:a9:55:e0:98:66:16:15:a6:79:98:6b:a4:
c7:5b:e0:49:fd:2f:92:76:d8:85:d1:d8:b0:0e:09:1b:11:58:
ea:75:2b:63:93:48:59:3b:c8:73:0b:10:10:28:ca:c6:94:47:
54:07:a5:98:41:cf:1a:57:97:af:cb:4b:a1:8b:61:4a:9f:df:
f4:e5:ac:94:70:ca:f1:7a:b2:56:62:c4:c1:65:76:f9:78:9e:
f4:77:a7:97:60:0f:83:b1:7a:8b:80:5c:5f:2f:ec:32:95:c0:
7d:1f:8b:a6:f6:d5:a4:4a:1b:25:e7:bb:6d:bf:45:ba:f2:b6:
d8:41:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:28 2026 by rpki-client