
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: o454rqNr5zXuMk+NZDgTlwcfUwnS5qGKUYyTPfn9vn4=
Subject key identifier: 39:14:80:B3:8A:C6:92:62:D7:72:77:B0:90:2A:AC:93:08:FE:CC:63
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 01A0E2F54BCF7E7C8F61823DF2EFD6BF9215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 13:02:01 +0000
Manifest this update: Sun 27 Sep 2026 13:02:01 +0000
Manifest next update: Mon 28 Sep 2026 13:02:01 +0000
Files and hashes: 1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: /l67IoVVWoNILugWHvtySibFd6Z/AH/Mt8kkao/nYxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:4b:cf:7e:7c:8f:61:82:3d:f2:ef:d6:bf:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Sep 27 13:02:01 2026 GMT
Not After : Sep 28 13:02:01 2026 GMT
Subject: CN=391480b38ac69262d77277b0902aac9308fecc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:63:b8:26:e3:e4:25:95:38:79:d4:c3:28:
7d:6a:26:aa:84:53:ac:65:10:f6:79:98:d0:1f:24:
37:85:fb:64:f8:9b:b7:df:49:09:a1:88:8c:5e:55:
e1:c3:cb:61:7f:d2:4f:c8:b5:52:1e:f8:9d:0f:f5:
2b:b1:46:89:4d:b7:c5:28:54:52:d7:1a:eb:74:68:
7e:ed:81:19:92:b7:66:06:71:c1:03:24:02:ad:ac:
d7:17:e8:93:70:60:2f:a6:bb:de:32:4b:c4:80:a4:
bf:b6:ae:0b:d4:7d:5f:1e:34:80:f6:a2:28:fe:1e:
8e:39:76:a6:a5:c3:8c:25:da:f4:09:6f:13:c4:88:
1e:0f:f4:0e:7d:c2:f9:69:ff:28:4a:23:ee:fa:ae:
9d:21:05:04:0d:64:6e:00:b4:55:c1:61:5b:be:9a:
7e:34:72:a7:e1:77:ab:57:82:cd:66:9e:8e:53:a2:
ba:04:b8:ea:aa:5c:bd:28:a0:b3:25:dc:8b:43:56:
c3:0a:72:9f:79:60:70:35:e4:96:1e:dc:34:8b:2c:
8f:8b:ae:72:4c:88:61:3d:36:b4:51:00:ed:f6:44:
da:58:07:b8:01:80:0f:46:99:99:72:5e:e9:2e:4d:
d6:38:8f:8e:c8:d4:50:82:5c:f9:99:10:11:a5:99:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:80:B3:8A:C6:92:62:D7:72:77:B0:90:2A:AC:93:08:FE:CC:63
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:59:d3:dc:96:d3:55:3d:ce:7e:4a:d8:74:39:df:c7:21:9b:
52:e9:03:3b:18:3e:28:bc:f9:0b:07:85:be:4d:48:56:e9:a2:
83:94:6b:c9:40:34:c1:03:b4:3f:76:bd:1b:62:6e:8d:db:37:
67:71:0c:cb:95:21:d3:cc:dd:06:94:85:ad:ca:d0:54:a1:41:
0a:d0:14:f8:da:9c:1b:58:16:34:a0:45:a8:a1:38:17:e9:73:
23:f3:b6:d6:37:bf:2b:58:97:89:c4:f0:be:85:ec:61:00:ee:
16:f1:6a:9a:9e:1d:ea:35:f5:0a:3e:b9:c2:7c:37:89:7a:de:
f4:e6:02:6c:10:9d:01:49:48:09:bf:57:48:88:7b:cc:0a:e1:
61:1b:57:c3:43:a6:3c:e8:20:96:e8:c4:da:70:17:4e:16:bf:
2c:f7:74:72:ac:33:1b:78:5f:fd:5c:bc:af:a6:3f:3c:60:99:
79:87:d4:74:6d:93:1a:ce:0e:03:0c:75:e0:a8:3b:ba:4e:91:
2e:be:31:d1:03:1b:ac:0c:a2:e3:8a:2f:6a:b6:e9:65:b9:93:
d4:58:2d:36:22:61:d8:6c:e7:03:b0:3c:f5:99:ab:0d:91:2c:
04:81:88:e5:cd:82:4c:2f:8d:0b:06:ef:d2:09:33:19:ea:7d:
0f:cb:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:45 2026 by rpki-client