Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: P3HIkf9mTYlH5VbQ33o3W3WCx/jYFaalQ5wU1k3c8nI=
Subject key identifier: AF:77:D9:8E:75:AD:E2:EE:2F:72:85:00:20:BE:12:0F:83:F3:8B:10
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 01A0D6B9C92C2B4CDA1A9B644F08D341F137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 13CC
Signing time: Fri 25 Sep 2026 04:01:34 +0000
Manifest this update: Fri 25 Sep 2026 04:01:34 +0000
Manifest next update: Sat 26 Sep 2026 04:01:34 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: OAXO1ofGZLtYAuxZM4Roy4BYqgyRiY9z/E7FqeDDO0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:c9:2c:2b:4c:da:1a:9b:64:4f:08:d3:41:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Sep 25 04:01:34 2026 GMT
Not After : Sep 26 04:01:34 2026 GMT
Subject: CN=af77d98e75ade2ee2f72850020be120f83f38b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:ac:d3:ca:bc:b5:4b:35:89:e1:a8:0d:48:
c4:de:f6:96:27:89:34:d6:32:fd:bc:d6:55:6b:0d:
94:be:99:70:57:9f:b5:33:37:25:b6:6d:e5:5b:94:
74:84:78:e2:dd:c9:76:bb:24:10:b3:60:d5:bf:f1:
ce:34:7f:21:a2:e1:14:2a:7f:ca:16:e9:b3:bc:e2:
48:83:30:36:46:df:84:c8:43:ab:34:ef:02:27:86:
67:c4:65:89:32:1a:72:42:b3:47:8f:c9:1a:b9:58:
39:48:28:bb:1b:33:85:56:04:6a:dc:ec:c9:28:8b:
15:f6:6c:dc:25:79:c5:62:fb:ec:60:26:6d:ea:4f:
4d:74:2e:1e:76:90:60:46:40:f3:11:96:bf:fb:37:
9d:f6:9a:44:4e:7a:c5:f2:05:34:30:3f:18:b9:9e:
13:86:25:20:a4:05:74:af:e6:7e:bf:79:46:48:7f:
da:82:28:4f:0f:22:f5:4e:52:fd:45:50:92:d8:d6:
f0:9c:32:5a:9d:ba:cf:3f:ba:29:5e:b3:07:96:0b:
64:62:f0:2f:df:da:c7:66:27:27:b1:8c:f1:b4:2b:
ce:08:ed:6a:cc:80:38:cb:a0:5a:9b:fc:6d:8b:23:
10:08:3b:bd:bf:fc:dd:28:a9:32:f2:d4:16:8c:ce:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:D9:8E:75:AD:E2:EE:2F:72:85:00:20:BE:12:0F:83:F3:8B:10
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:2e:56:c0:b5:1f:f0:ac:ba:0e:da:07:4b:b4:ad:77:5e:
c4:73:0a:8d:e4:32:d0:13:91:1f:35:90:4f:74:bf:85:70:6d:
56:9d:54:53:8b:09:7e:9e:15:6f:74:00:1d:a6:8a:ea:70:90:
1c:e9:d2:c6:5e:0d:59:92:64:68:4d:49:3b:61:9f:16:49:e6:
e6:2d:3b:a2:cf:d2:47:eb:8c:ba:44:fb:68:14:49:4a:0f:e7:
20:9b:02:3e:ea:c6:29:8d:d6:4d:28:c6:52:bc:a0:39:42:98:
58:31:10:27:5d:73:72:84:f0:42:65:3c:aa:25:90:85:ee:c8:
ff:f5:55:3a:21:f0:d1:e9:c4:0e:8a:68:2f:55:98:ff:92:cb:
27:53:9c:5e:78:dd:8d:b4:4e:0b:06:a8:9d:66:0e:c3:9e:a0:
18:f7:f0:b1:2f:c4:1f:e5:bc:94:8b:e5:65:ea:1f:a6:5a:98:
62:53:00:25:23:da:97:1c:58:28:7a:ca:1a:fc:e6:c7:9f:a2:
05:1c:06:50:38:be:f1:e6:c4:d5:31:33:0e:30:e0:fa:8c:52:
5a:85:e2:11:ac:b5:4f:fd:91:1d:db:2c:1f:fc:57:41:06:41:
1b:35:8c:32:3e:ee:6d:10:90:3f:f6:6c:9f:f8:cc:ee:1a:82:
d5:ed:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:51:13 2026 by rpki-client