Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: IgW5tB4j4Vn0ZjEwL7Bt+qvqptcUA1MRVsmfa7/YNPs=
Subject key identifier: 86:54:BF:0D:4B:75:4C:8A:13:30:AE:D8:3F:41:7E:0D:41:C1:79:80
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 01A0E02AF298454E2563AB7C4175C8AEAA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 0EEA
Signing time: Sun 27 Sep 2026 00:01:46 +0000
Manifest this update: Sun 27 Sep 2026 00:01:46 +0000
Manifest next update: Mon 28 Sep 2026 00:01:46 +0000
Files and hashes: 1: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: vnjwmu4ed24ljdht4i6a0/279B9koSxYPh+CumkMdwc=)
2: zjwCw0s83rCnI1wl2eGsX4xRkOQ.roa (hash: RWLymIjR2nfYLNaGfIBBwA+kG6wbl6Vyv58H4qwxlfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:f2:98:45:4e:25:63:ab:7c:41:75:c8:ae:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Sep 27 00:01:46 2026 GMT
Not After : Sep 28 00:01:46 2026 GMT
Subject: CN=8654bf0d4b754c8a1330aed83f417e0d41c17980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:57:ab:38:fe:c6:4a:00:ee:a6:3b:bb:9d:
10:57:d1:08:a4:d7:c4:0a:48:23:0f:56:6a:23:8e:
d3:58:35:1f:6f:ea:e3:fb:a5:d6:3b:be:11:15:aa:
05:96:47:e2:11:aa:c9:ae:a2:73:a7:10:b2:2c:73:
1a:2e:65:6f:c7:42:65:15:6a:f0:c9:36:07:31:f1:
e8:6e:d9:41:cf:84:c0:bd:7b:47:57:32:0b:a9:ce:
63:8d:69:94:67:97:56:12:64:fe:6a:83:70:11:8b:
87:07:cb:73:af:24:98:02:8f:9c:10:71:61:6c:0b:
b0:4b:29:5d:00:22:ff:ad:3c:ec:e1:ca:27:51:e4:
f3:36:15:a4:30:13:5f:d6:64:b9:39:ea:c7:99:99:
d0:32:98:fe:3b:25:1d:a9:ae:d1:ad:2b:7d:55:22:
57:f5:d0:cc:5c:cd:48:0c:f3:b9:22:46:fd:85:5a:
0c:fe:32:9c:b9:24:b0:b3:60:ee:d1:6c:2a:f0:21:
19:a8:37:fd:61:12:2c:b0:40:cb:90:19:62:14:c3:
e8:d5:18:ec:1e:3c:98:df:5a:eb:46:ca:00:da:66:
86:9c:6f:1d:c6:eb:de:64:85:77:71:fd:a5:6a:93:
ab:45:4a:b5:21:f2:33:9a:0f:f2:18:ef:f9:43:ee:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:BF:0D:4B:75:4C:8A:13:30:AE:D8:3F:41:7E:0D:41:C1:79:80
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5a:84:cb:ba:f9:45:17:31:39:88:28:9b:31:d1:47:df:53:
6b:22:ed:ff:25:27:55:9e:a1:a6:8a:7e:7c:37:7e:af:5a:6a:
55:bb:2f:0e:98:70:af:55:4d:cc:af:49:cb:e9:0a:e4:73:aa:
26:e9:d6:8f:29:9e:19:d0:ab:2b:80:dc:ee:ec:a6:d4:d5:c9:
01:f5:4d:c0:e9:98:c0:e6:c6:11:a6:b2:8f:06:4d:03:ed:30:
a5:02:d8:ba:30:04:a8:d9:15:ac:fb:44:09:cd:a8:2f:f3:da:
a9:8c:55:e3:6b:16:55:49:73:50:2a:8d:a0:9b:b1:e9:47:bd:
60:25:cb:d4:5e:05:44:11:0e:5b:46:de:16:03:1f:81:0d:47:
4c:13:e8:d3:96:35:87:a8:8d:48:8a:8d:10:d6:cb:6e:e3:1e:
05:f6:b0:17:52:de:f9:dc:f7:55:2b:97:46:9f:38:9b:a5:b2:
9c:2c:92:a2:58:38:be:29:b6:d3:1e:d6:24:09:03:dc:f8:07:
1e:61:54:c5:ce:73:33:e6:64:d2:02:e0:a4:27:02:73:75:36:
29:d6:63:d9:1b:9e:2f:71:45:b3:5f:38:eb:5f:3f:8b:bd:0f:
83:2e:7e:ee:c0:c3:a1:28:12:0c:55:ce:9a:f7:3d:f1:ed:1f:
b1:32:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:54:49 2026 by rpki-client