Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier: xNjZzcTkpUkuOnWAP9k51VNF0j3nKgQlNfr29F3K4Qs=
Subject key identifier: 17:FC:C2:E3:71:39:A9:28:6B:DA:77:4B:0F:5A:F4:B0:96:F1:B3:78
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer: /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial: 01A0E399306B55C49A7464CB323749468392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number: 01AB
Signing time: Sun 27 Sep 2026 16:01:02 +0000
Manifest this update: Sun 27 Sep 2026 16:01:02 +0000
Manifest next update: Mon 28 Sep 2026 16:01:02 +0000
Files and hashes: 1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: zDXY9iZG74h98swWWY5BWcBkokCKJ1MHWhx1FfMDW2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:30:6b:55:c4:9a:74:64:cb:32:37:49:46:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Validity
Not Before: Sep 27 16:01:02 2026 GMT
Not After : Sep 28 16:01:02 2026 GMT
Subject: CN=17fcc2e37139a9286bda774b0f5af4b096f1b378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:dd:4d:27:0f:b0:21:bc:77:69:35:58:01:
91:19:91:db:06:cd:33:87:3f:65:c5:36:a2:0a:d8:
af:11:28:50:d6:01:0e:01:37:71:92:44:25:99:2c:
3d:a2:71:96:18:99:76:6b:77:65:e7:59:b5:42:11:
b2:52:80:b8:8b:58:dc:a4:ad:d6:f4:03:1a:55:42:
cf:65:49:6d:08:7e:e8:ba:88:93:9a:d5:96:b3:60:
d5:0a:96:fe:5f:1b:82:f9:09:29:a4:e5:aa:7d:83:
9e:16:31:50:25:ec:93:e4:e5:fa:37:79:6a:2d:92:
9e:68:56:5f:d6:46:0a:e5:1a:67:7a:36:d5:d7:0d:
9a:15:08:a9:f2:64:95:12:9a:a1:77:6c:87:53:06:
7a:c4:62:7f:df:23:6e:9f:a6:85:92:80:88:c7:06:
7f:35:36:bb:c7:bc:dc:a8:de:a7:15:6f:34:e2:42:
f8:f0:c9:1a:ca:a7:4a:f1:b6:a9:d8:b3:15:23:74:
40:98:98:e9:09:73:e0:5e:ad:78:ee:48:67:a3:a4:
ff:cb:a5:da:83:5c:12:12:f3:f1:25:7c:1d:a2:11:
20:fb:dd:ca:3e:55:72:c4:0b:36:c2:52:98:e5:09:
65:3c:3c:3a:06:0b:cb:37:a9:81:43:c4:5e:c7:3b:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:C2:E3:71:39:A9:28:6B:DA:77:4B:0F:5A:F4:B0:96:F1:B3:78
X509v3 Authority Key Identifier:
keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:e4:49:36:19:8f:5a:8f:7c:9d:ea:72:b4:f4:7b:5c:8e:
69:0c:1d:3c:e9:e1:c4:a3:5b:36:db:3b:47:7a:bb:d6:7e:60:
81:2b:82:85:23:6b:dc:8c:79:9a:27:a6:22:26:67:44:ec:3c:
04:64:4d:64:83:92:b9:cc:18:09:e3:e0:c7:01:f9:5d:63:e6:
b6:63:e2:31:47:2b:d7:f1:bc:86:e2:8b:15:1a:8f:78:12:0a:
04:b5:3e:df:cd:c1:5d:ed:00:7d:20:2f:b0:33:6e:d7:4f:2f:
c0:3c:3e:64:85:0f:18:13:fd:c9:63:b9:43:66:66:6b:27:a3:
18:68:66:5d:db:8a:b1:ff:29:a2:4e:ef:3d:b5:19:24:ea:d1:
bf:40:a3:16:00:e5:f3:db:01:02:0b:8a:47:c2:7f:b7:4e:e1:
5b:0d:50:33:98:e0:b9:49:4a:4d:40:5d:b6:91:1f:80:47:e0:
3c:e7:30:f3:a8:f1:5d:ca:46:9e:8c:2e:16:4b:74:03:1f:01:
46:33:6d:76:33:64:ce:87:5b:c2:ef:93:e4:09:b6:0f:b1:8e:
dd:ab:ae:e2:4f:e1:ba:0c:f9:6d:21:36:22:d2:6b:ff:42:58:
79:d0:48:26:40:8f:af:39:d4:a5:d7:e3:f2:78:c8:63:cc:53:
0d:11:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:46:10 2026 by rpki-client