Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: WVXx3U1v+bXshnGPnxfoskjxPau6a83REgt03Y6zCVQ=
Subject key identifier: E3:1B:FB:08:90:1E:07:38:14:45:C4:ED:26:D8:2D:7C:52:A2:18:95
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01A0D8A813184FB1C47A20A2A8646F8D2F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 13:01:28 +0000
Manifest this update: Fri 25 Sep 2026 13:01:28 +0000
Manifest next update: Sat 26 Sep 2026 13:01:28 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: 8eeeoI+h/0LulZTaNv534sTfhxGyluC/8aCxfoBD2wA=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:13:18:4f:b1:c4:7a:20:a2:a8:64:6f:8d:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Sep 25 13:01:28 2026 GMT
Not After : Sep 26 13:01:28 2026 GMT
Subject: CN=e31bfb08901e07381445c4ed26d82d7c52a21895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:c6:31:8e:3c:4a:4a:ec:74:51:45:f4:2b:
a0:a0:56:54:f0:4e:bb:79:13:6b:8d:2d:47:6a:61:
c3:71:79:de:c2:f2:cf:db:01:a8:fa:f5:49:a1:95:
db:c6:da:de:95:36:a7:3e:66:e3:a3:e1:bc:4e:0f:
3e:5f:d8:28:68:02:ad:3d:2e:48:24:6a:f1:e5:92:
19:52:4e:54:24:ec:4e:5e:7f:a5:11:b6:59:fd:67:
f2:3d:e6:37:08:2f:81:5c:e1:a4:d2:3c:52:2a:6b:
c2:76:b2:7c:5a:e1:1c:4c:f3:e3:e4:dd:c3:11:84:
aa:e3:be:d9:52:36:84:d5:f8:42:3a:8c:3c:ca:34:
a9:93:b5:bd:22:6f:ea:c2:09:ea:a3:1e:11:fd:0c:
ae:54:ff:52:af:4e:d7:77:54:b3:dd:74:b8:2c:c1:
32:8f:92:d2:b4:51:97:1e:47:6b:8d:dc:33:e1:b7:
66:47:a9:44:c1:81:40:f8:d0:a7:38:88:79:03:53:
e7:18:a8:44:ca:00:c7:7c:06:23:50:9b:61:12:5b:
46:5e:f6:90:2e:7a:6d:be:8b:54:b5:3f:92:e0:42:
04:69:8b:80:51:78:11:a2:87:38:92:ce:86:46:07:
fc:71:6b:ff:4a:00:c1:07:b3:cb:9d:87:d0:d1:2a:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:FB:08:90:1E:07:38:14:45:C4:ED:26:D8:2D:7C:52:A2:18:95
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:6a:f6:9e:a9:19:d3:44:27:5d:b7:c8:a7:a7:f8:6d:8c:
f8:ec:b9:5b:70:cf:51:0b:ef:3c:79:52:86:bb:0d:0e:39:42:
a9:e7:cb:38:ac:02:ff:e1:18:32:5c:38:2b:b1:4d:61:ba:68:
0b:b8:6b:b4:02:7d:59:b0:d7:55:f3:f2:0e:bb:bb:84:a1:4d:
87:72:55:48:2c:b8:81:3c:57:8f:93:ef:5c:13:10:8b:14:94:
a7:07:ca:e7:11:7a:50:3b:e1:b7:88:1a:0b:bb:4f:13:43:31:
6f:00:0a:4d:d8:15:bf:b1:13:9e:62:2c:46:7b:71:0a:f2:75:
c8:cd:0f:52:f0:57:3f:3d:e6:9d:3e:cf:c7:5c:12:9f:99:6c:
f9:94:6a:e9:9f:9b:ee:de:27:4b:01:31:60:d3:eb:e6:ae:cd:
77:b2:63:56:ff:c4:a9:24:84:f2:df:52:99:c6:4a:35:77:a9:
59:2f:94:6a:e2:cc:d5:16:6c:96:f3:18:95:e8:df:21:14:60:
6b:a7:54:ef:69:06:45:b9:1b:52:ca:d2:f8:a3:35:62:e7:c6:
10:82:44:ee:db:8c:5a:52:f0:04:a4:15:32:38:5a:0c:9c:65:
5b:d0:f9:af:d9:b6:a7:ea:61:d9:16:a7:21:b2:77:2a:29:7b:
b7:ad:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:36:20 2026 by rpki-client