Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: P3QCmUMYHQDXiOT+BDHmOC9E2u6rzbtyaFliA1U16Xo=
Subject key identifier: E2:9B:F3:1F:4B:34:4D:02:9A:EF:56:4F:A7:87:7C:B5:4F:D6:5E:08
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 01A114BC7B8F13F101300BDE9689AE3434FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 05:00:58 +0000
Manifest this update: Wed 07 Oct 2026 05:00:58 +0000
Manifest next update: Thu 08 Oct 2026 05:00:58 +0000
Files and hashes: 1: EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa (hash: DiOXAHVLFTKKr3dT1PY1tAEci/bbe0sz/zVufkS6kQs=)
2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: qDjfXh0MHUXG7qNyf2z2XYXLS5mo7E6AmsT+VaDJqII=)
3: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:7b:8f:13:f1:01:30:0b:de:96:89:ae:34:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Oct 7 05:00:58 2026 GMT
Not After : Oct 8 05:00:58 2026 GMT
Subject: CN=e29bf31f4b344d029aef564fa7877cb54fd65e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:01:0f:f6:bc:60:c7:0d:b1:db:20:e0:ec:
c0:7e:fe:0d:d0:8c:6e:fd:ed:da:7a:b8:c0:4d:6d:
81:ab:26:95:6d:00:63:d4:d0:ac:c3:eb:0e:f2:18:
d6:0e:82:c4:28:b2:2b:86:32:dc:31:ca:09:c1:3c:
53:de:1c:88:3b:aa:09:57:29:db:92:1d:09:0c:37:
77:7f:58:48:fb:03:0c:3d:34:c3:06:ef:83:95:9b:
b5:73:6e:72:e4:45:b9:86:84:7f:ca:57:a6:34:1f:
a6:22:d1:39:95:e2:57:9d:44:af:b2:87:46:e2:3a:
43:75:b0:9f:e6:7a:94:f0:98:45:2a:e1:91:8c:4e:
40:98:bc:3c:d1:3a:c6:9e:48:19:b3:86:62:2e:37:
07:5c:cd:bd:83:cc:e6:e5:bc:2b:a4:78:11:97:0c:
47:3e:3c:33:c0:45:5b:4d:4b:6d:f1:61:14:e3:a8:
20:1a:fe:c8:09:9d:32:4b:ea:52:2c:d8:a5:82:39:
15:fe:34:83:0f:23:f5:55:86:17:91:69:bb:84:55:
4b:26:0a:0c:3f:20:94:3b:a7:e4:e4:76:cf:72:09:
a0:aa:a2:25:1e:78:39:5a:85:b7:f8:1f:a7:80:98:
1e:b9:fa:46:0d:f3:5c:62:ce:3e:90:ed:24:df:35:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:F3:1F:4B:34:4D:02:9A:EF:56:4F:A7:87:7C:B5:4F:D6:5E:08
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:75:1e:36:04:10:b0:93:96:ac:89:91:ae:56:0d:80:5f:40:
69:2d:79:aa:32:81:51:53:9c:8a:f1:df:12:28:fb:d0:ce:e5:
87:a9:bb:5d:35:7e:85:b7:6c:35:f1:7a:a6:f1:ed:16:42:de:
5a:37:51:be:0c:45:55:6c:55:8d:64:c1:d6:82:fe:10:bd:0d:
1d:a7:3a:5b:22:6c:75:45:2e:48:19:bf:c3:78:ce:c8:22:3b:
4d:d9:d1:57:23:42:ac:5e:97:01:ac:04:5f:df:e1:0a:78:04:
26:84:9a:e5:6c:c9:63:a3:5d:62:22:d0:f8:f6:f7:af:20:c3:
cd:a4:7a:89:83:48:ec:83:70:35:05:81:f3:ad:51:05:24:b8:
ed:26:0a:b9:06:31:7f:a2:fa:0b:c6:dc:af:67:3d:b8:c6:e4:
97:1b:76:4a:7a:65:9c:86:cb:1b:b8:4b:ff:15:7f:13:cf:20:
b5:16:4e:45:12:01:f8:02:1d:6d:bc:39:dd:77:d5:e0:0c:b7:
a4:fb:ad:b0:22:c3:1f:61:92:12:9f:9a:bb:81:d8:6a:1a:40:
35:f3:7f:39:52:e1:72:eb:f5:fb:ca:8d:f3:03:99:0c:46:03:
d5:e2:59:52:a0:71:7c:29:b3:ee:98:12:69:9d:93:e4:f5:1b:
40:f5:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:55:28 2026 by rpki-client