Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: cm5RmZ/8RIVC643+olo8m5C4BgTUIWXg8zeZ4UH/CI4=
Subject key identifier: A0:6A:44:D2:D6:31:93:47:FC:AD:17:AA:3E:74:10:EC:40:8A:14:E0
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01A0D315B59234872EC31266ACCAC6205D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 148D
Signing time: Thu 24 Sep 2026 11:03:30 +0000
Manifest this update: Thu 24 Sep 2026 11:03:30 +0000
Manifest next update: Fri 25 Sep 2026 11:03:30 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: fr3rxuaLDnfDZL46L+49CUV5qR7xsoB+6d/8Gy8AWJU=)
2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:b5:92:34:87:2e:c3:12:66:ac:ca:c6:20:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Sep 24 11:03:30 2026 GMT
Not After : Sep 25 11:03:30 2026 GMT
Subject: CN=a06a44d2d6319347fcad17aa3e7410ec408a14e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:c2:e5:bb:0d:aa:52:42:ff:d5:65:6b:c4:
44:f5:b4:f9:b2:62:e0:0b:8e:da:91:2a:34:20:a7:
a4:ed:29:d9:fd:a9:04:0c:7b:b4:e8:45:25:f6:59:
42:a4:9c:c7:c6:ba:9c:1b:df:e0:34:80:cf:47:bd:
f6:a3:ba:a6:10:0c:c1:79:cf:17:94:aa:aa:11:a9:
d9:b8:4e:0b:f0:d8:3e:17:2d:3e:ab:be:bf:0e:2f:
d2:8b:b5:8c:3b:1f:e9:c4:23:24:41:46:c3:ad:13:
fe:eb:12:2c:08:24:4a:4d:c9:52:90:79:88:61:18:
34:50:80:de:9c:86:b7:48:fa:ca:cf:8f:52:33:3c:
12:74:e7:84:01:59:36:fe:ef:5b:b4:5f:2c:e1:21:
2b:b3:13:b4:ce:8f:9e:d8:e2:54:92:8d:b1:c3:ae:
b5:e8:f1:ba:ee:50:46:d6:90:bd:88:f6:57:03:da:
43:7f:2a:cb:47:f3:50:1f:d7:d1:0e:d1:ad:a6:af:
43:44:27:4d:8f:21:0f:65:ce:62:93:9e:65:17:bd:
be:85:47:1d:40:97:f8:87:a7:02:44:9d:ee:64:ae:
64:c9:07:39:cf:2f:d5:15:26:7d:6a:0c:63:b2:df:
08:6e:37:19:2a:e6:2c:91:ef:71:f2:39:1a:0e:74:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:44:D2:D6:31:93:47:FC:AD:17:AA:3E:74:10:EC:40:8A:14:E0
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2b:19:11:c8:ec:0a:c8:8b:0c:cf:87:2d:2c:a4:33:9c:ec:
12:d8:37:d7:66:2f:e1:f6:a6:6f:bb:1d:45:8d:46:4c:50:f0:
2a:27:a5:cb:db:32:d1:33:37:e6:fc:a5:4b:51:64:be:18:95:
54:e1:14:75:99:2f:91:87:27:63:f5:9a:ec:85:bf:5b:81:52:
8f:49:c5:a3:a1:83:90:bc:8c:3b:a4:4a:21:a8:fb:4b:1a:c6:
f1:e2:14:3c:5a:68:58:76:13:7d:ed:55:b9:1f:3e:76:06:bd:
34:0d:cb:fc:ab:68:b2:71:ab:52:96:77:10:3e:3d:9c:47:e4:
6f:c7:ef:ec:10:68:4d:ae:40:19:a4:da:09:1c:c0:cb:0a:3f:
8c:0e:07:41:0e:31:bf:21:6d:c1:bf:dd:9f:8a:83:81:4a:f0:
60:90:c3:34:d8:fc:27:13:44:4b:1c:5b:8a:06:4b:83:b7:d4:
b3:29:cc:1c:93:1c:62:db:f8:7e:0f:7b:c1:eb:ca:80:5a:da:
5b:90:25:d3:fc:64:0a:72:da:e4:32:20:dc:0d:54:a6:43:ea:
93:0e:29:db:83:97:64:91:67:14:9e:cb:7a:cf:e2:65:c2:b4:
85:f4:fc:c5:1c:a6:9b:f5:18:75:45:5b:14:47:e5:50:02:75:
31:ab:33:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFbWSNIcuwxJmrMrGIF1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk
NmRmNTEwHhcNMjYwOTI0MTEwMzMwWhcNMjYwOTI1MTEwMzMwWjAzMTEwLwYDVQQD
EyhhMDZhNDRkMmQ2MzE5MzQ3ZmNhZDE3YWEzZTc0MTBlYzQwOGExNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArobC5bsNqlJC/9Vla8RE9bT5smLg
C47akSo0IKek7SnZ/akEDHu06EUl9llCpJzHxrqcG9/gNIDPR732o7qmEAzBec8X
lKqqEanZuE4L8Ng+Fy0+q76/Di/Si7WMOx/pxCMkQUbDrRP+6xIsCCRKTclSkHmI
YRg0UIDenIa3SPrKz49SMzwSdOeEAVk2/u9btF8s4SErsxO0zo+e2OJUko2xw661
6PG67lBG1pC9iPZXA9pDfyrLR/NQH9fRDtGtpq9DRCdNjyEPZc5ik55lF72+hUcd
QJf4h6cCRJ3uZK5kyQc5zy/VFSZ9agxjst8IbjcZKuYske9x8jkaDnSvLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBqRNLWMZNH/K0Xqj50EOxAihTgMB8GA1UdIwQY
MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt
M2E3MDM3ODliMDNiLzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi
LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYysZEcjs
CsiLDM+HLSykM5zsEtg312Yv4famb7sdRY1GTFDwKiely9sy0TM35vylS1FkvhiV
VOEUdZkvkYcnY/Wa7IW/W4FSj0nFo6GDkLyMO6RKIaj7SxrG8eIUPFpoWHYTfe1V
uR8+dga9NA3L/KtosnGrUpZ3ED49nEfkb8fv7BBoTa5AGaTaCRzAywo/jA4HQQ4x
vyFtwb/dn4qDgUrwYJDDNNj8JxNESxxbigZLg7fUsynMHJMcYtv4fg97wevKgFra
W5Al0/xkCnLa5DIg3A1UpkPqkw4p24OXZJFnFJ7Les/iZcK0hfT8xRymm/UYdUVb
FEflUAJ1MaszBg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:11:59 2026 by rpki-client