Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: 7RXR/K8WhW1i/8LehzK+uFrJoDAhZ2SkLGrSZUBBoJw=
Subject key identifier: FA:A7:E8:ED:74:E7:C9:03:4A:1C:16:9C:C9:8A:F9:0C:B1:9C:63:5F
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 01A1084B2CE8ED4253F7C409A81318F48E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 19:01:46 +0000
Manifest this update: Sun 04 Oct 2026 19:01:46 +0000
Manifest next update: Mon 05 Oct 2026 19:01:46 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 5UazRB6+V7nXH4srsjpzyPfu77wrGkVg6j0AxBeSHXU=)
2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:2c:e8:ed:42:53:f7:c4:09:a8:13:18:f4:8e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Oct 4 19:01:46 2026 GMT
Not After : Oct 5 19:01:46 2026 GMT
Subject: CN=faa7e8ed74e7c9034a1c169cc98af90cb19c635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:14:49:3d:3c:70:a7:6f:d7:5a:b3:55:a6:
83:89:ad:d2:96:63:13:54:6c:23:ad:f5:89:c0:05:
ce:3e:44:d1:43:f2:f3:6b:04:42:f4:aa:5b:cb:e5:
85:af:64:ce:5a:e3:f2:5b:42:21:31:d7:16:98:d0:
a9:44:7d:4d:b2:65:53:b1:86:32:9b:6c:18:4d:a8:
a7:60:61:99:cd:3a:2d:10:39:fc:66:d6:d1:22:af:
35:a2:9f:92:39:f2:c6:fd:89:01:ba:f8:ff:1f:7c:
87:62:55:1e:9a:72:9b:8a:22:60:72:87:33:10:59:
a8:da:83:6c:cb:dc:47:10:f8:7e:3c:0f:b0:6a:c6:
40:79:6b:bd:64:b8:18:4e:6b:58:68:d2:81:ba:54:
93:22:bd:e4:05:b6:ad:7c:7e:9c:79:30:99:b9:3f:
b2:6d:95:38:96:37:7e:43:2a:5f:54:03:2d:c2:ed:
c0:7e:38:9d:24:db:e5:64:a7:00:87:06:98:29:c4:
93:b9:db:70:23:ad:b5:9e:53:63:24:ff:c5:ab:90:
fb:a0:e7:46:41:06:c4:c4:80:be:f3:9a:eb:23:44:
e3:ce:ca:ce:fc:19:96:09:72:04:32:6f:83:65:09:
f5:38:38:3d:00:80:aa:11:c3:fb:c2:6c:a7:3a:e7:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:E8:ED:74:E7:C9:03:4A:1C:16:9C:C9:8A:F9:0C:B1:9C:63:5F
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8c:d6:3e:67:3a:97:18:3e:c2:67:06:74:28:9b:7f:cf:8e:
32:19:cc:ca:b5:b2:9f:69:40:4e:dd:82:c5:ca:2c:b3:c1:c8:
9c:b2:ee:c6:ac:2f:76:4f:b9:27:ea:0e:07:5c:bb:51:e8:bf:
ad:05:9b:22:df:9b:a4:c0:f3:39:e4:10:09:40:5b:0f:cb:3d:
a6:ea:96:46:c5:62:6e:f6:45:41:02:84:5f:9c:69:93:f7:a7:
09:01:6a:d5:fe:ab:a3:fe:7c:c0:27:e4:6e:41:4e:b9:ae:d2:
12:bd:9d:a0:b9:f8:c7:10:ff:07:b2:5a:3d:fb:b6:1b:08:49:
73:4e:a6:7a:c7:fd:4b:8c:b1:98:d9:f8:5f:9d:04:4d:04:00:
d3:6e:13:7d:77:4b:c5:e6:67:25:12:b0:ef:b6:78:ad:66:de:
f0:33:2a:c9:17:58:06:be:d2:53:ec:30:a9:fb:b3:4a:e0:a1:
57:d5:62:18:97:15:91:63:78:7a:99:d0:f9:6d:f9:b0:11:4b:
47:09:9c:0b:aa:d3:3e:8b:ff:10:64:a4:c0:a5:6e:97:42:2a:
40:f6:7c:5d:4d:35:0b:72:97:68:97:42:d6:e1:cd:b5:f4:da:
e0:25:3f:49:67:df:68:35:28:06:1d:ee:7d:8a:25:51:26:4c:
99:1a:ba:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEISyzo7UJT98QJqBMY9I6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NWRlZTQwMTgwOGUxYjVlYzA0YjVjMWFiZTVkOWRlNWEz
ODU4YWMwHhcNMjYxMDA0MTkwMTQ2WhcNMjYxMDA1MTkwMTQ2WjAzMTEwLwYDVQQD
EyhmYWE3ZThlZDc0ZTdjOTAzNGExYzE2OWNjOThhZjkwY2IxOWM2MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3UUST08cKdv11qzVaaDia3SlmMT
VGwjrfWJwAXOPkTRQ/LzawRC9Kpby+WFr2TOWuPyW0IhMdcWmNCpRH1NsmVTsYYy
m2wYTainYGGZzTotEDn8ZtbRIq81op+SOfLG/YkBuvj/H3yHYlUemnKbiiJgcocz
EFmo2oNsy9xHEPh+PA+wasZAeWu9ZLgYTmtYaNKBulSTIr3kBbatfH6ceTCZuT+y
bZU4ljd+QypfVAMtwu3AfjidJNvlZKcAhwaYKcSTudtwI621nlNjJP/Fq5D7oOdG
QQbExIC+85rrI0TjzsrO/BmWCXIEMm+DZQn1ODg9AICqEcP7wmynOueZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqn6O1058kDShwWnMmK+QyxnGNfMB8GA1UdIwQY
MBaAFChd7kAYCOG17AS1wavl2d5aOFisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQt
OTgwYTRiNTQ0MDU2LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQtOTgwYTRiNTQ0MDU2
LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHozWPmc6
lxg+wmcGdCibf8+OMhnMyrWyn2lATt2Cxcoss8HInLLuxqwvdk+5J+oOB1y7Uei/
rQWbIt+bpMDzOeQQCUBbD8s9puqWRsVibvZFQQKEX5xpk/enCQFq1f6ro/58wCfk
bkFOua7SEr2doLn4xxD/B7JaPfu2GwhJc06mesf9S4yxmNn4X50ETQQA024TfXdL
xeZnJRKw77Z4rWbe8DMqyRdYBr7SU+wwqfuzSuChV9ViGJcVkWN4epnQ+W35sBFL
RwmcC6rTPov/EGSkwKVul0IqQPZ8XU01C3KXaJdC1uHNtfTa4CU/SWffaDUoBh3u
fYolUSZMmRq6zg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:47:01 2026 by rpki-client