Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: RJNQbdyYyRr2fWuRmUx/FCRtiF8aDjIxmxFfY9sCuMc=
Subject key identifier: 88:2D:F8:3E:59:65:67:D4:45:C4:94:3A:7B:58:F0:60:D1:61:C9:7E
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 01A0D42675E72603B0CEB48546DEF25FA7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 16:01:25 +0000
Manifest this update: Thu 24 Sep 2026 16:01:25 +0000
Manifest next update: Fri 25 Sep 2026 16:01:25 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: 7NOhwrcUgMATwtu1VLQOh+3GKKgT5/lCvA8XMvSpT6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:75:e7:26:03:b0:ce:b4:85:46:de:f2:5f:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Sep 24 16:01:25 2026 GMT
Not After : Sep 25 16:01:25 2026 GMT
Subject: CN=882df83e596567d445c4943a7b58f060d161c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:07:1e:4c:2a:e4:2c:9c:4c:32:bb:99:fb:
45:a7:f6:f3:25:2c:7b:f0:5d:43:98:e9:e9:2b:b6:
93:82:bb:c0:11:1a:2b:1b:73:69:81:98:82:e6:02:
77:9b:46:72:e6:ab:2b:55:43:f9:b1:46:ff:b2:f5:
41:9b:c5:ab:4b:de:8b:57:61:57:38:6c:45:6c:9c:
c8:5b:6e:9e:62:ab:e8:d7:98:fd:a2:39:64:cf:e2:
ca:bc:7f:2f:87:31:9c:07:98:08:56:3a:ed:23:14:
21:af:1e:bd:6d:fb:1b:b6:04:75:c3:ef:6f:22:c4:
23:90:62:53:19:13:82:e3:dd:d8:9f:64:cc:9a:98:
55:6b:71:b2:f7:b0:29:4d:d9:77:61:11:bf:01:56:
72:a2:d3:09:41:84:b3:c4:76:b1:68:a2:76:58:16:
42:f7:33:51:cf:dc:9b:19:55:b2:8a:5c:d4:64:3b:
20:46:08:87:7d:b9:60:75:0c:59:fa:3f:ce:ba:74:
10:a0:e3:eb:7f:34:49:91:16:e1:d4:c1:82:4b:6e:
75:9e:3e:a1:0c:e7:19:74:f5:c7:37:ed:ec:65:27:
12:06:b0:2c:64:64:d4:28:e3:a9:d0:18:dc:52:2f:
e5:b3:93:6c:c5:98:d8:81:22:f7:95:e9:9b:b6:eb:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:F8:3E:59:65:67:D4:45:C4:94:3A:7B:58:F0:60:D1:61:C9:7E
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:86:7e:14:bc:ee:c7:de:93:72:85:9a:52:ea:b6:50:2a:
ee:66:1c:02:84:74:53:2b:ab:a9:35:18:49:8c:10:0d:d0:65:
1e:bc:ab:7c:54:c4:ab:1d:df:88:ec:3e:60:58:08:9d:59:b2:
57:a1:aa:6d:b8:d8:08:5a:08:16:39:a2:78:6f:0a:9c:61:42:
72:de:de:61:c5:a9:44:e4:df:a4:18:72:4e:b1:61:b4:ac:e8:
10:f6:b5:a2:84:c5:7f:9c:1f:91:78:e4:0b:4c:70:13:1c:35:
1b:29:d8:cc:1e:5f:0c:72:bf:c2:91:4c:c3:c0:79:da:44:df:
ef:dd:0f:85:c3:77:e7:59:9a:23:6e:f4:54:2f:a8:67:df:fc:
62:bc:9d:d4:35:d1:38:9c:76:cb:b8:7a:40:e5:6e:a7:1e:ed:
13:16:db:65:a7:28:ed:9f:af:f3:bf:2f:b6:83:79:4a:9f:2c:
ad:8b:18:b8:5c:1f:99:2e:e0:a1:0d:68:03:bc:4e:cf:3f:85:
1e:d3:5d:98:3c:27:72:e2:d1:9d:63:a3:51:96:08:03:36:07:
1a:c6:61:f0:d1:2d:cf:24:be:01:53:a8:f5:dd:97:81:c0:21:
3f:0b:62:bd:17:a8:d1:94:2d:1a:9e:c5:a7:a9:de:4a:75:4d:
0f:41:5a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJnXnJgOwzrSFRt7yX6fQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjYwOTI0MTYwMTI1WhcNMjYwOTI1MTYwMTI1WjAzMTEwLwYDVQQD
Eyg4ODJkZjgzZTU5NjU2N2Q0NDVjNDk0M2E3YjU4ZjA2MGQxNjFjOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrEHHkwq5CycTDK7mftFp/bzJSx7
8F1DmOnpK7aTgrvAERorG3NpgZiC5gJ3m0Zy5qsrVUP5sUb/svVBm8WrS96LV2FX
OGxFbJzIW26eYqvo15j9ojlkz+LKvH8vhzGcB5gIVjrtIxQhrx69bfsbtgR1w+9v
IsQjkGJTGROC493Yn2TMmphVa3Gy97ApTdl3YRG/AVZyotMJQYSzxHaxaKJ2WBZC
9zNRz9ybGVWyilzUZDsgRgiHfblgdQxZ+j/OunQQoOPrfzRJkRbh1MGCS251nj6h
DOcZdPXHN+3sZScSBrAsZGTUKOOp0BjcUi/ls5NsxZjYgSL3lembtuvHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgt+D5ZZWfURcSUOntY8GDRYcl+MB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPleGfhS8
7sfek3KFmlLqtlAq7mYcAoR0UyurqTUYSYwQDdBlHryrfFTEqx3fiOw+YFgInVmy
V6GqbbjYCFoIFjmieG8KnGFCct7eYcWpROTfpBhyTrFhtKzoEPa1ooTFf5wfkXjk
C0xwExw1GynYzB5fDHK/wpFMw8B52kTf790PhcN351maI270VC+oZ9/8Yryd1DXR
OJx2y7h6QOVupx7tExbbZaco7Z+v878vtoN5Sp8srYsYuFwfmS7goQ1oA7xOzz+F
HtNdmDwncuLRnWOjUZYIAzYHGsZh8NEtzyS+AVOo9d2XgcAhPwtivReo0ZQtGp7F
p6neSnVND0Faag==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:59:27 2026 by rpki-client