Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: DX0pifKnMPImueXhNWGl44K8NLVZmFfIt9GawvQj25Q=
Subject key identifier: A9:0A:37:3A:55:35:EA:22:82:36:9E:5A:1D:6E:7E:3D:62:80:E4:5E
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01A0DA96903220DA267AA11ED2EFFF9CF638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1855
Signing time: Fri 25 Sep 2026 22:01:35 +0000
Manifest this update: Fri 25 Sep 2026 22:01:35 +0000
Manifest next update: Sat 26 Sep 2026 22:01:35 +0000
Files and hashes: 1: 4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa (hash: UzvEzTLQyvUlh8NzX1HUp0Znvv2LEVNFfUDFzEGVWfI=)
2: J53nLIScImiDmJQXAbAPzV_YmS0.roa (hash: adCU5A/KjEfl+/76XgaiqVc6Hsm8GAJUmNJGopCGbs0=)
3: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: UVmBoRE8t+25t7Y+fzhhlJc/OkUyN/JiQbNxV+fswVU=)
4: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:90:32:20:da:26:7a:a1:1e:d2:ef:ff:9c:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 25 22:01:35 2026 GMT
Not After : Sep 26 22:01:35 2026 GMT
Subject: CN=a90a373a5535ea2282369e5a1d6e7e3d6280e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:0a:b0:4c:3e:19:ef:77:50:74:8d:61:cc:
4b:80:29:57:64:76:2e:c7:6f:b3:6e:25:8d:2b:be:
49:28:f6:31:5d:ad:e4:d6:84:97:97:9b:84:c7:f4:
6c:96:d0:00:cb:05:90:f4:6d:c5:c7:d9:6c:a5:4a:
54:74:7e:c7:db:82:76:31:83:5f:16:99:1b:bf:67:
d7:c1:7d:51:b5:3f:a5:77:e7:91:79:22:f5:d3:6f:
82:1e:d0:87:37:61:4b:cf:a5:ad:53:7d:5c:36:28:
44:dd:48:17:e7:46:30:be:85:c5:b3:08:a0:4e:ae:
07:d3:3f:97:41:9f:19:c6:19:bc:9b:d9:02:31:0e:
4c:3b:1d:1b:9b:1d:c3:87:a9:0c:f1:ad:42:53:82:
c6:2a:49:11:05:04:3c:85:6b:74:b6:e4:09:d5:f3:
13:a6:8f:d9:8f:4f:82:66:b8:a1:30:cb:3e:77:fa:
a5:d6:9d:92:0a:22:71:26:eb:58:23:02:3d:2c:66:
2c:8d:85:ad:df:a0:67:6c:6c:b3:5c:54:b0:ff:8e:
14:04:1c:62:99:dd:d4:d8:97:27:d9:04:a2:33:be:
43:b4:79:4c:a1:c6:20:9a:8c:d6:d0:94:eb:bd:c8:
d9:ef:71:5c:49:02:7e:d2:79:5f:da:38:18:59:79:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:37:3A:55:35:EA:22:82:36:9E:5A:1D:6E:7E:3D:62:80:E4:5E
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:b4:89:79:f3:bf:5e:a2:bc:47:ad:6b:10:03:d3:9f:2a:
8c:99:b6:8a:e8:b7:7a:ac:42:c1:54:c0:fb:9d:ba:d7:c3:68:
97:18:dc:6b:cc:d5:20:81:f8:f8:25:5e:20:16:c4:6d:fe:b2:
86:e0:23:c3:62:02:69:91:a3:2c:43:02:94:b4:e9:01:8f:f3:
fd:28:24:8e:06:79:09:e8:cd:28:5a:11:a0:08:97:05:74:ae:
3c:6b:9e:d3:3c:d7:f1:23:4e:76:6c:68:93:a4:67:0a:d2:a4:
bc:f0:48:38:13:1b:0d:b8:41:c3:3b:9f:f1:50:9a:17:da:96:
d0:97:47:88:78:3f:d4:8e:8b:8b:c5:d2:e6:99:ef:f3:f0:93:
cb:ad:ed:f4:b3:1a:6c:0b:0e:e8:05:89:34:2b:a5:95:0a:1b:
be:08:26:2c:de:a2:c1:5e:68:a4:54:9e:d2:a7:46:fb:07:89:
3d:81:75:a7:4e:40:e9:35:2e:09:26:e4:da:6c:43:18:c2:1b:
90:b4:6c:25:6b:a1:97:9f:e6:c4:93:d6:ad:7f:9f:7f:c6:c7:
73:40:c2:e3:ed:ad:4c:71:a9:48:7d:91:c3:df:bf:73:b0:47:
cd:4d:eb:c7:31:b3:a4:ca:4b:6b:ca:1a:fd:57:87:d9:79:a0:
6c:01:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:14:52 2026 by rpki-client