Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: Q6j7xyDtY58ykgYO1Im/y8WAMI5ZldJVyMfWSGaNtfg=
Subject key identifier: AB:C5:5C:15:EF:85:75:39:05:7E:DE:49:0C:FE:8E:B8:3A:D3:B6:08
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 01A105807B6FB1FD1D6AC5285840FC08C924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 06:01:08 +0000
Manifest this update: Sun 04 Oct 2026 06:01:08 +0000
Manifest next update: Mon 05 Oct 2026 06:01:08 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: YtXrUUMnxVl45wUeEzzbFz2RuMDjwnxtALLHCQ64kyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:7b:6f:b1:fd:1d:6a:c5:28:58:40:fc:08:c9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Oct 4 06:01:08 2026 GMT
Not After : Oct 5 06:01:08 2026 GMT
Subject: CN=abc55c15ef857539057ede490cfe8eb83ad3b608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:98:da:87:a4:25:63:bd:fe:eb:7c:3e:c3:
ff:40:6e:35:f4:b5:27:1c:b3:7a:1d:d4:f8:ee:94:
56:43:d5:b9:54:fe:8b:1b:fe:4a:23:8a:8b:13:ca:
8d:fb:78:50:bd:7a:30:af:8a:8d:e4:51:cc:33:9b:
1d:23:ab:fe:17:0c:42:ab:2b:f7:66:f1:91:d3:d7:
cb:97:18:75:44:cc:8d:a4:ea:70:10:ba:5e:27:90:
97:2a:88:1b:ee:b3:10:c2:9e:b2:35:d6:67:ba:ef:
b4:e1:40:c7:b1:ae:e0:20:49:4a:3e:4e:43:91:77:
cd:ab:1c:6e:e4:95:2c:70:c4:3e:40:78:43:29:df:
60:b9:59:81:48:0b:c3:fb:a2:61:15:bd:29:18:4e:
10:01:26:67:bc:6c:ea:ff:c9:04:1b:9f:df:28:86:
0f:1c:0b:da:34:53:84:b4:20:ed:19:d1:44:de:80:
7d:15:82:67:05:d2:d4:88:1d:ad:de:cd:d4:a5:ee:
8d:41:a2:c5:b8:fc:06:eb:cb:3b:a6:42:10:28:ad:
e5:40:81:6b:02:91:9a:20:f2:f4:26:cd:9c:d8:e7:
3f:9c:1a:e4:53:c0:4b:b2:41:00:66:99:2a:15:6b:
e7:77:fc:c7:eb:fc:43:dc:3a:b4:4a:35:ef:21:0d:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:5C:15:EF:85:75:39:05:7E:DE:49:0C:FE:8E:B8:3A:D3:B6:08
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:4a:e1:e8:4b:ee:a0:38:cf:27:5f:60:2c:df:16:49:df:
a2:b6:cf:8c:45:90:63:a8:48:8f:99:c4:90:58:09:6c:4c:95:
70:10:e3:0a:2e:45:1a:a3:59:86:f1:53:14:22:ad:dd:9f:7e:
05:ac:50:66:ed:ed:d9:ea:e3:57:1c:32:9d:ac:ff:53:83:de:
6d:4f:3d:6e:0f:19:06:1c:7e:1d:5d:6a:ad:41:a0:32:1d:be:
5f:42:07:bd:c5:0a:82:9c:f3:d6:25:cb:38:9a:8e:bd:c1:b7:
9b:68:f6:12:f4:4a:88:b4:7b:d5:2b:21:5e:ed:3e:73:6f:48:
ea:63:df:d8:e7:2c:ff:28:12:df:e7:4a:ea:2d:09:b6:84:91:
45:d6:8d:86:3b:3a:3b:84:23:42:65:9c:b6:ef:61:b6:63:af:
09:ba:ad:85:7b:da:b0:4a:16:1b:bd:99:36:d4:4d:90:08:88:
68:c4:28:08:2e:59:17:fd:88:0c:6f:23:77:42:dd:f4:66:45:
22:7e:4d:78:59:42:96:9c:fc:7d:1a:c9:91:f0:5e:39:42:bd:
bb:ab:cf:57:2d:67:1b:c8:48:0e:45:6c:06:9a:0e:67:d0:f8:
1f:41:3c:dc:a5:4d:18:8a:9e:33:2e:b4:7a:23:24:33:73:cb:
2a:40:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:36:03 2026 by rpki-client