Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: 3QvCxc9Qlc1dLI7+FIc83cUzi5D12UcqjXRb0qo/T38=
Subject key identifier: 0C:9E:58:42:CF:01:C2:8F:7A:E7:42:3D:65:28:4C:7D:27:D4:43:EC
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01A0D9BAE8F555CA2F9FD816A0548B070442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 18:01:40 +0000
Manifest this update: Fri 25 Sep 2026 18:01:40 +0000
Manifest next update: Sat 26 Sep 2026 18:01:40 +0000
Files and hashes: 1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: MLLAfiMf8FNPjqj1h0rASagvPAOhXVkBYFU8o/Vu6ZE=)
2: TSModa-LABny3OYpVDVxvacd8aI.roa (hash: hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=)
3: u8wfrBPP_bxqtWNVJcNz551H_3o.roa (hash: KJpAbjudf9h7GbmiPhF4TzDU9L0KhquOeIK1wF+fmEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:e8:f5:55:ca:2f:9f:d8:16:a0:54:8b:07:04:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Sep 25 18:01:40 2026 GMT
Not After : Sep 26 18:01:40 2026 GMT
Subject: CN=0c9e5842cf01c28f7ae7423d65284c7d27d443ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:07:bd:f9:50:e2:37:2d:1e:c6:e7:21:ae:
e7:e7:0f:0a:a2:5b:fe:76:79:93:60:09:ac:0b:17:
69:9a:65:d1:63:0e:5a:14:da:2a:7e:df:58:4a:29:
20:c8:c5:fb:8f:c2:c8:ba:36:3a:88:46:5e:7f:19:
c0:4c:28:35:2e:9e:83:4b:8e:37:5f:b8:b3:76:a2:
2b:de:12:6d:77:93:5e:0f:89:87:80:d8:e8:91:86:
d7:d8:42:56:99:b2:11:3e:ac:35:aa:72:3d:d0:c1:
db:5d:a5:40:ef:99:3d:75:e7:54:28:16:84:da:e4:
49:db:c6:e0:9e:ab:ec:6e:9c:fb:48:9b:cb:8b:ce:
2b:04:ce:a1:11:24:62:dd:6e:ea:ae:e2:60:14:3d:
eb:2d:47:47:2f:c1:fd:12:21:da:45:71:36:db:f8:
39:8e:63:a1:31:85:95:92:67:c4:0d:df:b9:93:2f:
e0:a1:a9:1a:4e:19:c2:82:7d:4f:70:38:ec:63:91:
56:92:53:65:b9:12:39:20:04:f3:52:88:96:06:15:
84:bf:5d:2b:4a:ea:78:04:a9:fb:ba:ec:00:3c:a3:
f3:fd:5f:66:d3:30:8e:20:59:da:83:1b:d8:a5:74:
eb:45:b1:01:a9:b6:b7:1e:0e:53:b3:32:21:76:3e:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:58:42:CF:01:C2:8F:7A:E7:42:3D:65:28:4C:7D:27:D4:43:EC
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bb:1e:1c:b1:83:8e:e7:17:00:28:02:9a:ac:c4:b3:71:d7:
78:d3:c8:14:68:cf:cf:03:0f:40:bf:87:33:be:56:af:ff:74:
61:91:eb:63:98:a4:29:98:e7:70:f0:68:3c:28:65:67:5e:b9:
26:ee:c4:fa:5e:e4:bb:44:ea:5f:7a:68:ef:bf:2d:80:b4:e3:
57:6a:55:7c:d4:be:cd:11:45:ae:84:22:5d:24:18:e6:e1:53:
43:59:be:9b:02:e4:e1:9d:fc:47:55:16:3d:6d:2a:b9:b4:45:
cd:55:e8:4b:a2:64:31:6e:02:1d:6c:16:e7:29:27:f2:82:ab:
1e:40:6b:19:57:a5:75:7c:d3:88:d0:4e:16:bc:33:e2:f1:d5:
dc:5d:67:5b:c9:11:a4:03:27:30:b0:1b:3c:6a:f1:2d:a9:f7:
d0:67:36:db:f7:9c:77:1f:6c:c2:4a:41:b7:13:6d:8a:18:5c:
67:2d:ce:ce:85:32:88:8d:c3:b0:28:2e:b2:a4:ae:8c:2d:2c:
55:fd:17:35:b7:cc:5d:f9:df:ea:7a:ce:bf:65:92:25:14:42:
4c:f3:88:ad:80:f8:d5:49:20:e8:63:9a:87:94:99:18:5f:3b:
2f:1c:5a:87:b9:49:6b:62:e6:07:83:bd:98:36:be:ec:74:fe:
31:25:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:29:54 2026 by rpki-client