Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: nDyux+XW6QV/Oeuy4zTnB6aFRSvhM3mQCDpNQrg7vEw=
Subject key identifier: 5D:7B:1C:23:D5:C4:8A:6B:D8:34:BF:A2:01:05:71:0B:DC:F4:6A:99
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 01A104000AC069CBE2D76B2BE9E997E5FF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0E34
Signing time: Sat 03 Oct 2026 23:01:13 +0000
Manifest this update: Sat 03 Oct 2026 23:01:13 +0000
Manifest next update: Sun 04 Oct 2026 23:01:13 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: /Mo97h0N0OBwBpenVOyL6YQcgc09OS+DbjSs+QxZjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:0a:c0:69:cb:e2:d7:6b:2b:e9:e9:97:e5:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Oct 3 23:01:13 2026 GMT
Not After : Oct 4 23:01:13 2026 GMT
Subject: CN=5d7b1c23d5c48a6bd834bfa20105710bdcf46a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:e8:fc:de:31:22:c2:89:bb:8e:7a:4e:b3:
85:cf:8d:7d:77:6f:ef:3e:70:cc:01:4a:13:c5:1f:
61:59:ac:67:ee:de:56:0d:db:fa:f6:64:fd:e9:5a:
df:78:64:df:63:33:9c:83:0c:83:5d:79:97:eb:9f:
f6:2f:3d:08:df:23:91:ca:79:d6:70:af:39:1f:65:
58:a7:35:4b:17:8c:e5:cf:22:09:b8:e0:07:56:1c:
9f:29:e2:bf:24:cf:5b:70:61:d6:52:13:64:31:15:
14:84:b3:fb:8a:98:7d:26:2b:85:a2:c4:9a:94:8b:
69:d6:4b:cd:3a:c2:24:39:21:4d:1c:0e:14:5c:c2:
f6:0e:0a:87:92:e7:ce:17:f8:36:5a:b1:77:f6:7d:
8e:0f:97:f4:52:de:ba:c5:cd:64:66:ed:67:bf:77:
8d:d9:c5:99:c7:74:88:1d:7d:39:c1:e1:90:eb:aa:
cf:44:d2:2d:1e:f1:f0:70:df:4b:9d:a6:b3:b8:e2:
43:2e:eb:92:2f:53:48:96:72:e7:0c:35:9a:05:2a:
98:ed:b2:22:a4:e4:26:d2:83:37:96:87:98:6c:0c:
bb:5f:89:e5:5e:a8:20:ae:89:9a:16:f6:e5:7e:7e:
cb:31:57:bd:22:30:b5:41:04:c5:7c:52:bc:4f:3b:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:1C:23:D5:C4:8A:6B:D8:34:BF:A2:01:05:71:0B:DC:F4:6A:99
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:ba:68:94:bf:2a:1f:1f:b0:ea:76:ce:a3:50:96:a2:1b:
34:b2:a0:9f:b8:70:d4:a3:31:d0:57:b4:d1:dc:3f:ae:29:11:
06:1a:36:f0:da:f8:ee:fb:df:54:56:1d:53:91:a8:ee:08:2d:
71:49:c3:c9:a1:bc:10:2c:d9:ea:b5:4b:2c:36:df:af:bc:f6:
f9:ff:bd:a1:43:da:bf:d0:86:e5:16:40:17:e8:6a:91:b9:4c:
b0:ff:7b:ae:2f:30:3c:ec:97:e7:23:d6:8d:34:f0:4b:b1:c9:
53:0d:e6:e8:74:38:c3:70:3d:5b:60:8c:a4:72:b2:d2:f5:eb:
00:76:71:75:06:7c:1e:d7:7b:12:69:92:bb:24:52:ea:20:6c:
1e:a9:3c:09:35:e2:d1:c7:ef:ee:36:62:d5:c3:17:8f:dd:cc:
f3:e7:05:34:d6:47:f8:85:68:fd:3f:69:6e:99:05:e6:24:c6:
69:a9:79:b5:c6:ef:9c:b6:73:d9:c8:70:04:f2:bf:63:86:b2:
96:9c:bb:d3:d3:95:64:94:25:01:4b:d6:6c:5b:d9:f0:8f:3d:
2b:07:e2:4d:c3:72:e2:8d:ff:37:af:2d:ae:e7:3c:83:33:1e:
d7:c7:1d:0c:f4:0f:ca:19:18:ad:d3:fb:82:7e:6e:8f:0b:1f:
13:a0:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:25:30 2026 by rpki-client