Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: H9yuzLd0DBLQAS6xtNaod49ruEm9fAfKpol6yaR5pNY=
Subject key identifier: 77:46:AF:FA:6D:F2:24:81:6F:15:F0:DD:F7:A4:60:02:C6:48:4A:B5
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01A0DE73B77A044E378EB562D4D0DC374317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 176B
Signing time: Sat 26 Sep 2026 16:02:00 +0000
Manifest this update: Sat 26 Sep 2026 16:02:00 +0000
Manifest next update: Sun 27 Sep 2026 16:02:00 +0000
Files and hashes: 1: Iria4wIw1fU8cA4sqt1elN464-4.roa (hash: ISbIWO425ImSYvAJvg4vsV9/XdUj9FmYfNuddwC0P7Y=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: lCfFJX0Te2QbN25EhP/rie4UzPKl80cM67OBEJBlNyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:b7:7a:04:4e:37:8e:b5:62:d4:d0:dc:37:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Sep 26 16:02:00 2026 GMT
Not After : Sep 27 16:02:00 2026 GMT
Subject: CN=7746affa6df224816f15f0ddf7a46002c6484ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:64:82:35:76:80:76:87:47:e6:12:b1:52:
60:00:ea:d8:d3:51:13:c9:24:a2:1a:97:d8:a8:bc:
f3:31:ac:ee:2c:85:3d:e1:6f:ce:5c:f8:0a:7e:7f:
50:9b:86:d4:18:5e:12:91:15:18:25:80:ea:ba:b7:
70:42:6f:d9:9b:6b:76:f5:00:51:01:cc:c5:13:f9:
6f:a0:6e:57:52:68:23:31:3b:eb:bb:ba:9b:ad:07:
28:58:f2:e9:ae:4a:4e:73:73:96:ee:e9:b3:20:84:
32:6a:e1:ed:ab:7c:71:10:57:f9:c1:3d:50:9c:43:
af:35:d2:36:fb:d3:a8:cb:66:59:20:9c:4c:e7:21:
dc:cb:33:ef:4b:1f:27:9e:8c:b0:84:9c:3d:55:cf:
8a:a6:03:cb:6a:41:56:54:97:43:5c:5b:05:80:55:
f3:3a:f1:6f:38:a5:46:29:6e:3f:0b:02:f5:71:9d:
b4:2f:21:8e:16:86:35:ea:57:af:dd:bd:13:9f:79:
20:f8:fd:ff:2b:99:66:3a:48:ce:76:4a:da:1d:5c:
a3:71:86:cb:30:3d:a0:ac:40:b0:a5:37:b8:bc:da:
d2:1c:55:3f:c5:df:61:90:74:50:40:7c:78:05:9f:
c1:a3:36:fa:c0:b4:bb:48:b9:12:47:40:8f:27:36:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:AF:FA:6D:F2:24:81:6F:15:F0:DD:F7:A4:60:02:C6:48:4A:B5
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ad:ae:b0:fa:e6:6f:d6:1b:3a:b8:43:95:3c:6e:bd:6d:7c:
44:d9:d1:3e:26:4e:d8:bb:e3:2d:b1:e2:2e:b3:63:36:85:e4:
f3:12:59:e6:0e:d9:37:47:06:ee:2f:76:01:0f:a9:63:99:51:
01:7d:ad:94:92:82:bc:d3:98:f6:ad:ce:0e:fd:96:11:a8:dd:
c7:ef:20:07:df:e7:19:b2:4d:d6:9a:a8:67:22:c5:65:0b:83:
ac:c3:12:16:ec:5f:3a:64:f8:11:5f:bb:02:9e:29:d2:ac:92:
72:47:65:94:d7:3a:15:f6:79:5c:43:39:09:5e:42:2e:a0:45:
26:33:d8:e2:1a:e7:80:e7:b9:ac:8b:b6:0f:d6:7d:0e:ad:71:
eb:71:32:37:2b:2b:80:02:80:cb:cf:6c:26:f1:13:72:73:67:
69:7c:a6:26:df:16:02:fe:8b:e8:05:23:76:7f:88:4e:30:7b:
40:b4:c8:04:bb:59:bf:7c:37:28:10:1e:21:88:d6:c0:22:fe:
8b:97:f6:ea:d2:ce:dc:01:dc:54:22:22:86:7f:b5:b7:f0:d4:
3d:c4:c9:ea:0e:b5:e9:6d:a9:f6:f5:54:df:f9:1e:d9:6d:78:
18:cf:5a:0f:75:88:96:d5:c0:ac:87:53:8b:81:8d:b2:a3:74:
28:1d:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:10:10 2026 by rpki-client