Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: VH7taoMVOq6SOO5zcO4yADi4oDfEn++xy5+q/OoakX0=
Subject key identifier: 82:0A:06:94:4B:F2:83:63:0F:51:E7:74:D5:53:82:C3:98:64:E9:EB
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 01A0D0492FD14A97CBADBC4C24B2CB3F78B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 22:00:52 +0000
Manifest this update: Wed 23 Sep 2026 22:00:52 +0000
Manifest next update: Thu 24 Sep 2026 22:00:52 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: 7lvYmdQ/LYpJBXOSNSIVENRrk2OwRqWPT2YNtqq41hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:2f:d1:4a:97:cb:ad:bc:4c:24:b2:cb:3f:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Sep 23 22:00:52 2026 GMT
Not After : Sep 24 22:00:52 2026 GMT
Subject: CN=820a06944bf283630f51e774d55382c39864e9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:79:56:b4:2e:9d:64:05:65:d2:7b:08:f3:17:
a0:7c:12:7b:91:27:64:ad:0e:e1:36:8a:11:28:20:
26:7b:b8:c4:3a:b0:0c:03:50:0e:d1:a8:88:d6:8d:
93:e6:00:fb:8a:58:a9:cc:ee:69:5d:8c:0a:d5:03:
6b:f9:23:8a:f1:50:06:4e:e3:d1:5e:0d:52:f2:ec:
dc:a3:e5:da:e4:4e:a3:34:a7:f6:84:8f:ca:fc:9e:
b4:3c:46:d8:ef:99:83:30:25:e1:aa:2f:e4:9a:16:
36:b3:38:97:67:30:da:fc:60:0f:0e:ee:af:3d:f2:
b3:cc:a8:98:25:52:c2:af:e2:77:79:fd:76:0b:e4:
69:3d:28:3f:1d:93:13:4d:c2:9d:5c:39:88:78:54:
79:a3:73:01:a7:fb:af:f9:46:fa:24:02:2c:5f:2e:
d0:03:8a:a9:34:24:cb:56:30:f4:3e:b3:17:62:54:
25:ad:dd:7f:10:d7:88:9a:c1:11:08:72:92:8e:2e:
ac:dc:de:c2:8c:49:85:05:99:8e:99:2b:62:b2:de:
a1:35:4d:b7:48:64:92:a5:cf:be:58:43:cf:4b:d9:
1f:72:eb:46:02:54:e9:85:44:7b:3e:95:bd:ea:2b:
9b:e8:b3:a9:5d:da:58:f6:f4:df:66:50:8a:ec:2e:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:06:94:4B:F2:83:63:0F:51:E7:74:D5:53:82:C3:98:64:E9:EB
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:83:fe:bb:d5:4c:c4:5c:12:10:2e:a7:33:6c:5e:f2:72:e6:
af:ec:66:ae:e2:6d:c8:b4:2c:b2:30:fd:68:f9:a7:99:fd:f1:
92:61:0b:63:6c:70:e0:96:3e:6f:18:ec:06:bc:89:3c:00:ce:
76:05:06:c7:f5:72:c1:f7:02:b4:a9:b4:46:ce:40:e6:6f:2c:
28:05:ac:54:80:5d:75:ff:b0:16:6f:ce:63:a5:1d:6a:42:e9:
9c:30:41:e8:2c:f3:a5:07:d4:52:28:70:84:2d:18:e1:e0:24:
6b:de:3a:ee:49:7d:07:72:90:a8:1e:b6:38:36:43:73:ef:a6:
c0:41:b8:b8:33:31:32:4d:61:48:27:ea:a3:b5:64:7b:95:71:
aa:6a:79:cf:fc:a3:6e:b5:39:25:50:27:06:aa:24:19:92:f6:
0c:e1:39:54:10:0a:79:aa:29:f9:ce:9d:14:da:d1:b8:3e:a4:
ee:0b:ff:94:78:f6:39:9d:84:42:5b:80:1b:19:92:87:ca:87:
a0:8f:8b:47:b2:86:b9:dd:e0:f6:5e:d8:30:ff:a0:b5:be:03:
66:f4:16:2c:9e:94:5b:82:96:68:9d:e6:c9:9c:1d:bc:a1:74:
4f:0f:9b:f0:82:5e:b9:ef:32:38:d2:6d:19:55:2e:b0:78:5e:
54:57:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:57:22 2026 by rpki-client