Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: cGThWaLXGRLZzZ2QmoCZY9DzaxB0+RlJgaLZfTVxccg=
Subject key identifier: EA:9F:3F:ED:4B:91:C6:5A:0A:F3:03:89:E5:41:D4:FB:74:CB:27:6F
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 01A0DACD6F1FA06AA40BB3F7732DC2EA2044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 1278
Signing time: Fri 25 Sep 2026 23:01:31 +0000
Manifest this update: Fri 25 Sep 2026 23:01:31 +0000
Manifest next update: Sat 26 Sep 2026 23:01:31 +0000
Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=)
2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: 7fsgQJaRmpHS2LgvYoDKHYvNflty+Enz/8COeQFN0MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:6f:1f:a0:6a:a4:0b:b3:f7:73:2d:c2:ea:20:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Sep 25 23:01:31 2026 GMT
Not After : Sep 26 23:01:31 2026 GMT
Subject: CN=ea9f3fed4b91c65a0af30389e541d4fb74cb276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:80:f6:f1:a3:3b:19:07:e8:58:9e:94:37:
4d:dc:da:a7:51:b6:83:5d:68:6d:85:3d:24:10:8c:
e9:ad:02:b5:9b:2a:c6:60:13:8f:04:fc:e8:a9:02:
fd:cc:e2:6e:00:8f:0b:d3:80:58:c3:55:2d:f4:aa:
82:a9:c9:e2:28:38:98:a9:6b:2a:a5:0a:a6:0c:0f:
2a:20:c4:04:b7:f5:5f:d1:03:53:d7:2e:85:71:37:
ba:91:c0:78:8b:fe:fd:45:ba:c2:be:19:83:e5:07:
f1:55:b6:31:12:01:41:2b:a4:46:5f:23:47:ae:30:
7a:ee:1a:46:04:3e:3b:dc:99:23:2e:9a:93:f6:91:
38:85:de:0e:1f:e3:2d:c2:b1:56:b6:0d:48:7a:5d:
fc:fe:ce:bf:70:da:fa:e0:3e:71:09:bc:51:f1:bb:
11:80:df:fb:e2:1e:84:3c:0c:a2:72:57:0b:8f:53:
52:d0:68:e8:9a:a3:9c:23:ce:bf:ee:05:f0:1d:96:
a0:ef:34:4a:e4:4c:33:47:c9:62:9b:b8:2a:d0:a1:
af:be:c2:9f:7b:93:b9:4e:3f:a3:ec:8d:06:e7:f8:
41:18:30:ca:7d:54:3a:be:5b:71:8f:88:9b:ab:74:
e0:be:59:a0:c8:99:32:ad:4d:48:d5:e1:b1:3e:2f:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:3F:ED:4B:91:C6:5A:0A:F3:03:89:E5:41:D4:FB:74:CB:27:6F
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:b8:cc:2e:5d:a4:36:29:5f:e1:8d:44:9b:e8:b8:ec:b5:
61:ce:aa:bd:23:25:7b:24:f6:df:d9:ab:a9:72:1e:48:d1:b4:
e9:f6:0d:66:b2:15:4b:99:b4:a7:18:1f:32:cb:f2:61:0e:59:
bd:92:ab:1a:72:01:d2:ee:8b:60:5f:53:f9:e3:28:57:67:ba:
17:17:51:29:f5:25:27:7e:3d:23:78:d1:9f:e4:5e:04:d7:8f:
e9:28:5c:ca:15:90:02:06:60:81:fb:96:11:06:0f:04:a5:ee:
ba:d7:dc:4b:3d:4c:a1:55:d8:76:a9:0f:ad:87:f5:10:32:6b:
76:12:69:ff:a9:2f:f5:25:1f:1b:a9:64:d9:f6:7d:52:7a:10:
84:32:a4:8a:65:48:a8:53:27:72:c2:79:b7:c9:8b:f2:23:93:
00:07:48:8a:68:4d:3a:09:19:67:c2:0e:cf:1c:e3:21:87:c7:
17:03:46:ef:83:57:58:b2:61:8b:6c:32:01:d9:85:7d:d9:70:
8c:2d:c7:b4:ec:a6:77:5c:6a:6b:54:0d:a2:86:75:d5:df:c6:
b3:0d:42:a1:cd:d2:dd:39:84:8b:54:28:e2:02:05:e4:c5:e1:
a5:1f:4f:d8:7c:ff:8d:00:ed:64:01:d4:fc:31:ea:98:1d:06:
6e:12:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:08 2026 by rpki-client