Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: 7Qr+PWjMYbXYK8CxFy21qAwpZfXwZ2SZf3zmGlbKc0M=
Subject key identifier: 04:CC:4E:55:57:D5:ED:51:6A:4A:74:BD:C9:A5:31:5C:07:8E:58:1E
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 01A0E62D8F396BC68642923C3F808C694EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 02B4
Signing time: Mon 28 Sep 2026 04:02:20 +0000
Manifest this update: Mon 28 Sep 2026 04:02:20 +0000
Manifest next update: Tue 29 Sep 2026 04:02:20 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: 729VHAiL/WoxiTN/2pFhjqh445Lyk6UwvU7n6gBkq6I=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:8f:39:6b:c6:86:42:92:3c:3f:80:8c:69:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Sep 28 04:02:20 2026 GMT
Not After : Sep 29 04:02:20 2026 GMT
Subject: CN=04cc4e5557d5ed516a4a74bdc9a5315c078e581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:90:4b:43:73:1d:b8:5c:dd:d3:fc:e7:2a:
25:a2:66:36:f2:c1:27:a9:91:d9:36:ca:71:54:51:
79:92:85:81:bb:bc:93:24:c6:51:9e:77:c8:4d:a3:
62:4f:8d:0f:43:4c:14:9e:ac:f2:e4:b5:70:da:02:
e4:dc:dc:a6:02:d3:8d:8f:2f:dd:99:e7:dd:45:aa:
84:4c:9d:0b:77:c4:d0:96:b5:e6:2b:af:7f:1e:7d:
0d:b9:6f:8d:5b:0a:e0:91:8d:4b:51:2e:75:99:d6:
a2:7e:fb:a2:2f:56:94:f0:3e:b7:6a:32:0f:27:20:
c0:e4:5f:38:8b:39:18:6d:b6:6f:cf:e2:fe:03:f8:
c2:9e:67:1d:63:c1:88:ba:89:fa:d5:e5:13:df:16:
d6:b0:2b:33:4a:9d:7e:52:46:d1:b8:d2:25:31:74:
d4:06:11:af:b9:85:51:98:8e:eb:af:2c:03:13:94:
e0:30:12:46:b2:98:22:73:89:af:f0:87:10:fb:d3:
08:62:6f:88:1d:2a:37:41:49:ce:43:72:a0:fd:3a:
8b:3c:f2:53:20:db:8c:e2:ea:ca:91:09:2a:3d:27:
1a:f3:b5:ba:df:49:89:b7:07:67:ba:50:eb:8e:13:
fc:a7:51:8e:1e:5c:62:e7:78:58:bc:f4:c3:75:57:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:4E:55:57:D5:ED:51:6A:4A:74:BD:C9:A5:31:5C:07:8E:58:1E
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:a6:ff:e1:b2:b7:c5:e5:b9:c5:ac:4c:cc:3a:29:57:dc:
10:01:6d:7f:2d:44:21:a1:78:8c:0b:90:89:16:fb:c6:82:0c:
f5:3d:a6:35:21:1b:09:af:7a:06:0d:73:57:b6:92:d0:1e:e7:
94:9b:e1:af:b1:22:6e:0b:60:37:91:22:33:84:d6:a7:c4:5e:
d4:ee:e4:09:50:46:9d:da:a3:1a:3f:c4:67:44:ee:c1:3c:9e:
7d:5c:ad:f4:81:19:a6:70:67:0b:13:c8:57:73:63:88:04:bf:
99:11:b1:e2:89:0d:18:a3:de:d9:b9:c2:eb:38:7a:d9:05:64:
99:2c:35:fc:0a:86:a1:b1:55:f2:46:ae:c5:41:13:5b:98:4a:
88:b3:6c:39:76:06:00:4d:3f:c1:a4:8f:15:48:03:3d:5d:23:
e1:3f:59:17:4a:c0:a2:95:e2:49:8d:c0:7c:9a:6f:b2:b3:af:
61:54:91:75:39:b3:e9:80:d7:9d:4a:1a:4b:9d:bd:3c:7b:ca:
1e:df:96:fa:18:b8:cf:01:ca:b9:38:7e:6f:18:81:7f:7b:5d:
fb:08:ea:98:4f:2b:85:fb:01:2f:de:e6:9a:6c:c2:8f:70:fb:
48:4b:b8:c8:d8:b2:6c:41:86:90:e5:13:58:19:8a:dc:3a:2a:
6e:af:16:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmLY85a8aGQpI8P4CMaU6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTY0MmMwZDQ2ZjhkNGU0YzIzNGMzM2FmYmVmNWE0ODM5
YzZhMjIwHhcNMjYwOTI4MDQwMjIwWhcNMjYwOTI5MDQwMjIwWjAzMTEwLwYDVQQD
EygwNGNjNGU1NTU3ZDVlZDUxNmE0YTc0YmRjOWE1MzE1YzA3OGU1ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnECQS0NzHbhc3dP85yolomY28sEn
qZHZNspxVFF5koWBu7yTJMZRnnfITaNiT40PQ0wUnqzy5LVw2gLk3NymAtONjy/d
mefdRaqETJ0Ld8TQlrXmK69/Hn0NuW+NWwrgkY1LUS51mdaifvuiL1aU8D63ajIP
JyDA5F84izkYbbZvz+L+A/jCnmcdY8GIuon61eUT3xbWsCszSp1+UkbRuNIlMXTU
BhGvuYVRmI7rrywDE5TgMBJGspgic4mv8IcQ+9MIYm+IHSo3QUnOQ3Kg/TqLPPJT
INuM4urKkQkqPSca87W630mJtwdnulDrjhP8p1GOHlxi53hYvPTDdVf2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATMTlVX1e1Rakp0vcmlMVwHjlgeMB8GA1UdIwQY
MBaAFJAWQsDUb41OTCNMM6++9aSDnGoiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAt
NDMxMjViZjA5NmIxLzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMTZiNTEtNWEyMi00ZGI0LWI4OTAtNDMxMjViZjA5NmIx
LzEva0JaQ3dOUnZqVTVNSTB3enI3NzFwSU9jYWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6+m/+Gy
t8XlucWsTMw6KVfcEAFtfy1EIaF4jAuQiRb7xoIM9T2mNSEbCa96Bg1zV7aS0B7n
lJvhr7EibgtgN5EiM4TWp8Re1O7kCVBGndqjGj/EZ0TuwTyefVyt9IEZpnBnCxPI
V3NjiAS/mRGx4okNGKPe2bnC6zh62QVkmSw1/AqGobFV8kauxUETW5hKiLNsOXYG
AE0/waSPFUgDPV0j4T9ZF0rAopXiSY3AfJpvsrOvYVSRdTmz6YDXnUoaS529PHvK
Ht+W+hi4zwHKuTh+bxiBf3td+wjqmE8rhfsBL97mmmzCj3D7SEu4yNiybEGGkOUT
WBmK3Doqbq8WpQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:31:14 2026 by rpki-client