Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: +ijGEZoDOUickiN1rWB8kSzciQujAqwUPV26g61Tou4=
Subject key identifier: 6C:02:9B:D1:98:AD:A7:A0:82:76:5A:14:88:96:6F:CC:E7:71:7E:11
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 01A12AD70DD30EAEFB1A90C17298FFDE8723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:39 +0000
Manifest this update: Sun 11 Oct 2026 12:01:39 +0000
Manifest next update: Mon 12 Oct 2026 12:01:39 +0000
Files and hashes: 1: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
2: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
3: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: /vL4aTw+i660JTO/HV1V9TLJofQ5ff0A+G+G0CVGBIw=)
4: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:0d:d3:0e:ae:fb:1a:90:c1:72:98:ff:de:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Oct 11 12:01:39 2026 GMT
Not After : Oct 12 12:01:39 2026 GMT
Subject: CN=6c029bd198ada7a082765a1488966fcce7717e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:b5:33:9c:37:dd:bb:d9:3b:3e:0b:67:67:
2a:45:d0:07:24:18:b3:40:e2:c1:a3:61:4f:ac:88:
25:57:ae:da:f0:e6:8d:20:5e:eb:78:34:ea:e8:56:
48:2a:f7:ef:40:ca:ae:9e:10:d5:a4:db:5e:6e:46:
41:bd:32:96:5f:64:0f:80:6a:fb:48:7f:b9:02:01:
91:ad:04:7f:da:77:86:a2:34:eb:6f:df:f1:a6:bc:
20:84:28:c2:c3:0a:18:34:f4:10:e3:3c:b1:ea:da:
64:08:de:a1:7c:77:e9:97:a2:df:4d:fe:10:06:11:
6c:e5:15:6d:cc:ad:d5:e6:14:97:3f:ef:12:b0:26:
4b:df:17:41:36:47:aa:09:b8:69:84:57:0c:33:91:
79:40:db:d5:04:16:97:72:df:94:8c:8e:60:10:6b:
7c:df:95:5a:dc:3a:10:d8:8e:39:67:49:4b:64:98:
b2:51:45:29:ce:ab:3c:cb:f1:b7:67:32:42:44:0d:
b8:a0:3a:04:df:b5:fb:72:66:4a:b9:3d:20:47:0b:
58:e3:2e:27:b3:07:a0:3c:96:b8:b8:db:ca:6b:f7:
2d:83:8b:5d:b2:62:94:f4:eb:cc:b6:5c:0d:d4:b8:
22:c4:15:97:d0:bb:2b:d7:cf:2c:46:a5:bb:29:9b:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:9B:D1:98:AD:A7:A0:82:76:5A:14:88:96:6F:CC:E7:71:7E:11
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:5f:e2:a2:e2:4d:38:53:61:0b:b2:0a:06:d0:21:8f:ff:
31:1f:55:d7:a4:b6:e2:5e:88:d6:95:24:d7:22:d2:62:79:80:
aa:6f:fd:68:f7:5e:0b:a3:85:2f:56:51:12:f9:0e:99:57:0a:
e9:5b:49:59:e1:c3:d8:f2:63:ea:cd:b2:f1:48:d2:f8:5e:27:
7e:29:55:b8:32:8e:76:4b:a4:04:06:98:ab:a2:2b:b6:ca:e1:
85:2a:94:b8:40:5e:2a:ba:d7:dd:b8:d8:8c:c6:66:2d:e8:8a:
c4:51:c3:a9:30:bc:b3:87:47:d8:6c:62:88:f9:35:18:01:b3:
7a:84:dc:24:9c:e6:e9:a6:46:3a:3f:93:39:98:fd:6e:93:da:
b8:b5:36:70:8b:af:3a:95:52:f4:0b:1d:a7:38:32:95:7a:9a:
4e:8d:08:db:e5:02:bd:2d:2d:d3:b0:b9:d2:2c:e2:ac:6c:ac:
95:01:fc:4c:13:25:93:20:8b:be:fb:6d:bc:8d:cc:1b:27:09:
3a:a4:95:f4:c1:5e:63:c7:ef:d7:e7:26:1c:ec:16:dd:c2:9b:
08:c2:a3:11:85:d3:93:3f:6b:c6:71:9d:d4:5e:58:8e:36:b6:
83:a4:9d:d6:d6:a1:31:4f:69:a0:a3:a8:45:6b:93:60:2a:05:
5d:04:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:04:23 2026 by rpki-client