Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: g41RadbrGsO7qY7TIHEadU0PKqNDbqwy++3nLGshDUo=
Subject key identifier: 74:EE:7D:C2:E9:E9:3B:29:7B:9E:AA:B3:8E:CD:9B:C8:9D:B4:E2:5E
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 01A0ECD3BC5D7A8D7BC1E5BC2A8E0FC7E06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 1452
Signing time: Tue 29 Sep 2026 11:01:34 +0000
Manifest this update: Tue 29 Sep 2026 11:01:34 +0000
Manifest next update: Wed 30 Sep 2026 11:01:34 +0000
Files and hashes: 1: apPx3gWWIpPWwELtpKMOfedJ4k8.roa (hash: L2yyhrzd5mRGd2rzEg04lr+rJwZPevmKVoJK5XcNojM=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: 3rxFGeeg2024hDSDsWMgD57DQaMxjYH8uLzA94TZmqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:bc:5d:7a:8d:7b:c1:e5:bc:2a:8e:0f:c7:e0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Sep 29 11:01:34 2026 GMT
Not After : Sep 30 11:01:34 2026 GMT
Subject: CN=74ee7dc2e9e93b297b9eaab38ecd9bc89db4e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:ee:9c:81:bd:c0:88:6d:86:15:0a:59:17:
bf:6a:e0:0d:5f:2d:5a:01:ca:40:da:52:c5:f2:e1:
d5:65:7f:92:7e:b6:70:e4:40:1e:88:4e:ad:86:ba:
ca:47:2e:87:d1:7d:4b:71:6d:6b:01:73:a1:cd:3c:
9f:b3:13:b0:7b:04:9b:14:58:9e:72:bf:85:6f:75:
76:e5:62:7c:9b:09:ab:75:27:75:6c:d8:ad:de:3b:
85:1d:d3:86:26:10:62:76:ae:be:15:da:98:d3:c1:
40:35:84:5f:70:2a:fd:81:17:ea:0c:ef:e7:db:3a:
25:c3:bb:09:c7:3a:ac:ee:dd:5a:25:ae:0e:91:aa:
d3:0d:59:7b:0e:80:b3:20:4a:ca:97:f8:8b:61:d5:
12:d4:d3:2d:65:d1:db:03:17:05:ea:dc:b8:26:58:
25:30:c5:6c:76:e2:6c:4c:41:76:10:d2:76:9e:2d:
d5:5e:d7:44:1c:5d:d4:66:cb:7a:0f:a8:41:52:f0:
92:b5:9b:73:4e:64:12:77:8b:7d:77:51:13:79:f0:
fe:a4:22:0d:e2:c9:05:69:9a:e6:ab:89:92:86:c8:
f8:d1:8f:9b:83:d6:7b:25:7e:b2:db:82:19:30:9f:
34:82:75:22:d8:44:a8:5f:69:da:40:1c:b7:cb:f0:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:7D:C2:E9:E9:3B:29:7B:9E:AA:B3:8E:CD:9B:C8:9D:B4:E2:5E
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0e:1e:c7:ca:4a:11:7c:71:2f:6c:eb:55:b0:6e:b6:2a:b0:
c4:d9:a4:0d:1a:72:fb:e4:f3:02:87:f7:d2:70:88:5a:14:fb:
de:3d:0f:6b:d1:8f:b1:64:1f:f2:6f:23:34:55:05:03:50:57:
19:c1:0b:1c:82:35:86:e2:f0:52:77:4f:64:86:bb:cf:a7:52:
9f:ab:90:5d:05:44:3c:7a:9a:40:57:44:90:15:72:73:64:5c:
9d:ff:70:55:d5:f5:ec:28:30:90:0f:78:ed:8a:d5:0c:6e:a0:
71:9c:36:4a:ba:53:18:89:58:a9:35:5c:c9:94:e9:d8:7e:de:
b6:76:42:b8:57:53:bc:c5:e8:4f:d0:6f:ec:23:3c:72:b7:2c:
be:94:8c:6f:da:6c:1d:07:a7:5b:28:c1:29:75:55:74:fb:9b:
5a:fa:ad:6c:22:ff:a8:fc:e0:1c:e8:af:56:88:30:43:28:cf:
ea:30:5a:16:f5:cc:e8:05:27:4b:b6:c0:63:8f:f4:9d:59:6f:
21:d1:a5:1c:53:fe:cd:64:96:b4:f6:1e:c0:4a:85:12:1a:3d:
fc:44:6e:ba:93:3d:05:31:60:fc:20:20:ee:c8:7c:27:4c:d4:
f6:a0:70:f9:93:01:01:92:a0:97:5f:fb:be:a6:e4:5a:ab:45:
50:00:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:20:55 2026 by rpki-client