Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: hUW7zWlzX9QmXoVG3DS126NOtLUHybf7XQpZ+Tyq3HQ=
Subject key identifier: 93:FC:A1:41:CB:E5:0D:F9:3F:C1:3A:A3:1B:3A:42:34:CA:32:70:98
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01A0DB03FB5EDF30F2C8137B41CBC77349F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 1401
Signing time: Sat 26 Sep 2026 00:01:06 +0000
Manifest this update: Sat 26 Sep 2026 00:01:06 +0000
Manifest next update: Sun 27 Sep 2026 00:01:06 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: 7TMegj+W+hF/AnxQtFiE4cQCwcd+bSLxT7nObxR5PYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:fb:5e:df:30:f2:c8:13:7b:41:cb:c7:73:49:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Sep 26 00:01:06 2026 GMT
Not After : Sep 27 00:01:06 2026 GMT
Subject: CN=93fca141cbe50df93fc13aa31b3a4234ca327098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:ef:6c:21:81:e6:cb:17:9d:16:86:46:6b:
90:64:71:b5:bc:97:43:bb:5b:bd:38:61:49:ef:3b:
16:bb:8e:0b:73:b0:ed:69:93:7b:2a:1c:72:fd:67:
1a:49:64:3e:85:0d:c2:05:29:2d:fe:53:82:fd:fa:
ca:48:9a:d4:81:fb:96:12:24:f3:18:9b:23:47:28:
ac:e9:59:bb:dc:c4:f9:d0:f0:a4:b1:03:97:c7:39:
9a:6b:8e:62:c5:47:bc:e7:5e:87:95:0c:94:4e:46:
ae:c7:4b:47:75:fd:ed:6a:8b:f6:87:b2:a9:38:80:
30:78:e0:14:10:bc:f1:4e:2f:be:64:a3:29:29:b1:
92:fc:a5:5d:a7:1f:d1:d3:87:48:64:12:ce:eb:f1:
02:a8:06:35:60:ed:9d:9f:44:60:78:02:cd:fc:b8:
0c:4a:9e:a3:4a:52:65:21:b4:26:60:2c:16:a5:8c:
e1:e6:7c:9f:11:26:0b:c8:60:21:80:d0:dc:7f:d2:
d8:f4:d4:6c:88:8c:77:58:fe:20:fc:f3:ae:cf:b1:
cf:ce:3e:2a:17:a2:be:60:2f:fc:2c:90:83:2d:dd:
d7:d1:a1:ac:40:36:1b:14:d6:2b:66:6e:0d:80:85:
b1:08:b1:bb:ff:2a:69:ad:41:e3:30:77:19:93:31:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:A1:41:CB:E5:0D:F9:3F:C1:3A:A3:1B:3A:42:34:CA:32:70:98
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:b6:23:d6:12:14:c1:9b:c5:96:b7:f7:51:db:cc:aa:4e:
d0:a5:e1:fa:88:23:cc:fb:17:b1:38:42:6f:6b:f9:b2:5b:fb:
86:f3:06:06:e9:17:85:79:09:cf:b1:4d:7c:09:4c:5f:92:27:
0f:92:69:46:ef:19:11:1a:6b:79:51:a0:90:d3:3d:a8:9f:78:
35:d1:ff:bb:72:0f:08:12:bb:71:01:3b:8a:76:02:15:c1:b1:
8c:d2:8f:12:05:aa:eb:4c:c0:9a:69:ad:6c:a1:02:88:82:e6:
33:62:5b:05:d4:a5:2a:35:5c:82:22:bd:ba:74:a7:b0:91:d1:
4a:0a:a6:a8:75:41:27:7a:a3:59:54:b6:fb:90:f8:7f:50:5a:
29:dd:e2:ca:f6:40:5e:2a:7a:f3:43:92:c8:03:cc:78:d6:45:
29:6e:12:1c:69:98:89:6f:7c:96:7b:27:3d:ed:d4:86:d6:4c:
0c:db:e3:09:15:7b:87:5f:b1:d4:e6:3b:fa:7f:3b:a1:f6:40:
5a:3b:34:f8:a8:a7:81:49:3e:9b:ea:bb:4c:e8:05:8c:c2:16:
4b:94:04:c6:ac:53:04:96:1a:2e:bb:13:2b:6b:f6:0d:cc:a2:
49:09:f9:36:cf:ac:35:eb:d9:f7:14:ed:92:c6:49:30:60:85:
ed:9c:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:51 2026 by rpki-client