Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: QdfJ+ZN/2P5F47r42KslzG6X8P4cS+gcwYHBRwOluXI=
Subject key identifier: 14:E1:86:45:2E:A9:49:7B:A0:14:98:D5:25:13:81:4D:CC:EF:9A:79
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01A130D884EAA736F29E70B993733DFDC6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 16:00:58 +0000
Manifest this update: Mon 12 Oct 2026 16:00:58 +0000
Manifest next update: Tue 13 Oct 2026 16:00:58 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: F6qJKO1C+Eg12VLJirFB8vFpmvA7EtzBFDymnCY7Ius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:84:ea:a7:36:f2:9e:70:b9:93:73:3d:fd:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Oct 12 16:00:58 2026 GMT
Not After : Oct 13 16:00:58 2026 GMT
Subject: CN=14e186452ea9497ba01498d52513814dccef9a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:65:b4:cc:76:ec:ee:a6:e5:bf:03:c2:06:
59:f5:1e:92:0d:b8:a3:42:59:e1:0c:66:ee:0c:e2:
42:6a:09:68:e1:bb:a8:cc:69:49:ce:88:96:32:7c:
53:d1:f9:ba:28:dd:f9:f5:c9:a8:de:b9:77:7f:87:
50:73:8d:89:80:a0:98:15:1d:a2:81:23:b0:32:0b:
b2:69:fb:b8:a5:07:d3:26:c9:1e:b3:81:35:d2:4e:
36:f0:e6:f9:64:49:55:42:43:d1:df:75:38:68:db:
b4:5b:1f:31:22:a3:7f:f2:9f:5e:22:6b:a5:78:f1:
e5:71:b4:84:95:d5:fd:83:76:04:2b:be:fb:6a:79:
ab:8e:c6:14:6b:04:d4:06:13:59:6d:64:20:01:18:
69:4c:e5:4c:ce:17:0a:09:13:4b:c0:37:1e:99:c0:
e6:aa:5a:eb:37:bd:27:b6:6d:a6:42:b0:29:3f:2c:
3f:34:c3:86:5d:06:7d:84:04:d3:f4:f4:b9:88:6b:
65:f9:7f:9e:e5:31:06:b6:6f:6c:4c:07:96:ff:c0:
17:0f:e5:91:6b:ab:4e:13:2a:96:5e:59:a3:4f:c8:
e5:1a:b9:f6:37:2b:1b:8d:13:e4:b1:3b:70:c8:c5:
3b:70:de:41:02:68:46:b9:1e:3c:41:63:ae:87:5f:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E1:86:45:2E:A9:49:7B:A0:14:98:D5:25:13:81:4D:CC:EF:9A:79
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e7:4d:76:f2:5e:69:e3:0e:a0:a9:fb:bd:af:6f:90:fe:e8:
98:a8:d9:74:9a:75:e1:c7:89:ef:e6:36:66:4c:22:3d:f3:f9:
4c:c0:16:be:c3:7c:0c:a6:d9:c0:34:a5:45:e1:ca:3e:4a:a8:
a9:d0:99:ea:bc:b6:3d:6d:e0:b4:91:4b:2a:13:23:f0:9c:cf:
ac:97:21:48:79:f5:e9:1d:cb:02:8f:ed:1f:6e:3a:58:4f:3c:
d7:47:b2:46:c0:bf:24:73:60:39:dd:3c:2c:ab:ec:f5:51:39:
d6:66:b2:d9:c0:11:4a:2f:f1:82:41:95:b1:5a:e8:f3:7c:00:
a3:ab:47:ed:c1:60:08:6b:8c:e3:a0:1f:76:8f:fb:d9:7a:bc:
89:d4:ca:01:70:c1:1e:5d:c0:87:93:30:5c:87:62:71:22:e6:
4b:4e:9e:ef:c1:90:6e:fb:68:db:a1:34:d8:11:51:aa:b8:f6:
94:0a:47:de:f2:b7:af:6d:21:18:cd:01:57:af:90:84:ff:9f:
35:ba:b9:06:36:4e:41:bd:3b:8a:ee:d2:3f:cd:55:15:b6:23:
53:e7:ed:06:f6:7c:9c:7c:3f:0f:71:db:f4:4b:67:32:b0:c3:
64:32:ba:77:f9:75:3e:81:23:8b:f3:c9:77:2b:b7:0c:c9:c2:
08:3f:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:41:18 2026 by rpki-client