Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: zqViuoIs8aIIH9VjeS3J+01jBVjFgMQmzs4avEJ5+mo=
Subject key identifier: CA:F9:D2:D2:C3:E4:A7:BC:DC:A4:68:3E:AF:CF:2A:E9:13:13:A8:A4
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01A0D5DDCDFD3C7EA92C011526BF890B699D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 00:01:18 +0000
Manifest this update: Fri 25 Sep 2026 00:01:18 +0000
Manifest next update: Sat 26 Sep 2026 00:01:18 +0000
Files and hashes: 1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: r2eFOI8M5XN0ML6GPljdsYseYAp8GtH0W8kWI1BI/Zs=)
2: TSModa-LABny3OYpVDVxvacd8aI.roa (hash: hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=)
3: u8wfrBPP_bxqtWNVJcNz551H_3o.roa (hash: KJpAbjudf9h7GbmiPhF4TzDU9L0KhquOeIK1wF+fmEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:cd:fd:3c:7e:a9:2c:01:15:26:bf:89:0b:69:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Sep 25 00:01:18 2026 GMT
Not After : Sep 26 00:01:18 2026 GMT
Subject: CN=caf9d2d2c3e4a7bcdca4683eafcf2ae91313a8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:1b:3f:80:cf:45:98:df:f0:dd:46:a1:ba:
69:9f:8e:33:af:ea:02:b0:59:96:89:c3:aa:1f:15:
1d:62:98:16:46:7f:b4:54:6d:1c:7b:dc:10:f9:0c:
6d:f6:bb:8e:77:aa:38:c7:2e:0a:8d:82:18:13:08:
bc:15:80:65:e5:26:e5:62:0f:d5:47:b1:4f:dc:45:
d8:2a:26:1e:aa:3b:98:48:72:a8:4b:78:56:fa:a5:
6c:bb:ef:2a:f9:6e:20:28:07:ac:1d:ea:c0:d3:b5:
80:b8:6d:c7:9e:a8:ea:c6:c3:ed:f7:6f:55:8c:7c:
84:94:50:b9:15:5c:7a:a9:b1:df:a8:12:83:0f:4c:
86:af:7b:e8:9d:c7:4d:96:8d:a6:da:67:91:d3:16:
00:30:66:ab:2d:d6:de:9a:94:35:6e:e5:cd:54:f8:
d4:a9:bd:92:d5:27:18:e7:46:f8:2d:82:33:75:95:
57:eb:c5:0b:d7:d2:3d:de:92:a7:91:60:14:a6:48:
9d:5a:a1:42:dc:a5:43:c0:91:83:d8:09:7e:bd:7d:
c0:b4:8f:aa:9e:ed:96:71:ec:cb:b5:1e:f0:2a:75:
55:dd:5c:7a:cf:15:91:ac:09:5b:89:00:87:35:a2:
f7:60:23:97:6c:5b:ba:d6:0b:c6:04:b2:af:0e:48:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:D2:D2:C3:E4:A7:BC:DC:A4:68:3E:AF:CF:2A:E9:13:13:A8:A4
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:7e:3f:4d:f4:0a:1f:2b:0a:ce:65:aa:6c:4d:f0:37:f5:
1f:5b:34:55:18:7e:71:5c:a7:a5:37:83:8a:4b:4f:9c:f3:78:
57:f1:be:74:39:f1:d9:a6:09:c1:99:7a:c6:1d:f7:38:08:3d:
1a:58:f3:41:fc:b8:c9:e7:a6:15:74:7c:a2:75:49:65:b2:3b:
30:fe:ce:72:47:36:b8:8d:50:e1:37:7b:36:b9:46:22:cc:7d:
b3:53:5c:b9:f7:ac:ba:71:08:ee:5f:66:8c:4d:2b:cc:3f:28:
14:18:56:d8:09:2b:b4:06:eb:fc:d1:24:ad:43:7f:2e:25:87:
eb:f0:a8:a4:2c:14:3d:57:ce:e9:a4:cd:bf:4a:2d:42:b2:6e:
e4:21:4a:a8:88:79:1e:fb:5e:4b:3d:4f:67:a0:f3:b2:c3:65:
00:89:c7:34:9a:1e:27:bd:8f:1f:56:e0:b9:f4:5c:46:74:5f:
64:b9:90:89:c5:79:1f:10:88:8f:13:64:a8:a3:e5:bf:d1:cd:
00:25:09:8a:97:90:09:ca:4f:da:e7:53:3c:3b:75:f5:eb:2e:
d6:f3:b1:ee:a7:16:84:d5:d7:bf:80:82:b0:33:4f:cc:be:cf:
88:e3:b2:14:4f:a5:50:c8:6b:7b:93:41:99:56:5b:09:1b:71:
37:2a:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:33 2026 by rpki-client