Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: EZR2FgddphmKrTNLW26Y6AAHPLlNOpnSFtlhm1dCf0k=
Subject key identifier: 2D:C0:81:9F:60:58:3E:6C:92:EA:22:93:39:13:B7:16:A3:06:1E:B1
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01A0D4261C8DE97A790BBBA10640D785E31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 1703
Signing time: Thu 24 Sep 2026 16:01:02 +0000
Manifest this update: Thu 24 Sep 2026 16:01:02 +0000
Manifest next update: Fri 25 Sep 2026 16:01:02 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: 5sGAxcLJisO4IRXT+JOhKabCHFxmxNPvc2T0Xsl5bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:1c:8d:e9:7a:79:0b:bb:a1:06:40:d7:85:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Sep 24 16:01:02 2026 GMT
Not After : Sep 25 16:01:02 2026 GMT
Subject: CN=2dc0819f60583e6c92ea22933913b716a3061eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:f6:58:6e:79:89:7b:9c:54:d8:9d:32:6f:
4d:1c:cc:4b:21:f1:d3:1b:99:3c:27:b5:18:5a:c1:
f5:12:1a:3b:b5:22:e7:6a:ac:70:be:3b:46:d7:4f:
c8:60:fc:c9:82:a3:b2:a6:34:c9:51:ad:5c:61:69:
5c:db:cd:db:0a:1f:22:01:0e:e9:38:1a:5e:12:67:
41:6f:e7:4e:3a:4f:e8:52:25:0f:66:56:7f:41:ee:
ff:09:79:53:09:b8:e0:3c:47:87:42:8f:45:74:19:
72:68:23:4f:7e:2a:ce:98:63:55:a6:f0:a9:fb:2b:
5d:aa:ca:c3:14:8b:0c:c0:cb:23:00:e9:f8:ee:45:
b2:cf:12:de:55:b0:73:6f:6b:73:fb:58:06:8b:b5:
b8:d6:25:7b:bf:f3:57:e7:c5:7a:77:a1:ad:5f:61:
3d:75:ef:45:b3:9a:e8:64:5e:3e:25:4c:0a:1e:82:
2f:6a:eb:58:a0:ba:c8:c0:63:94:61:25:2c:b4:f4:
40:f8:4d:3e:11:20:0d:2c:c2:7c:60:68:42:89:05:
c0:64:06:1b:c8:55:fa:71:60:e3:b7:dc:75:49:39:
24:be:cf:10:74:a5:2d:50:28:09:2a:c9:36:88:c8:
06:68:f7:02:ab:b5:94:23:be:ad:66:d3:c2:ad:7b:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:81:9F:60:58:3E:6C:92:EA:22:93:39:13:B7:16:A3:06:1E:B1
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:77:0f:02:db:72:fe:11:94:6a:e4:f7:fe:22:33:82:5e:28:
e5:65:77:cb:30:df:39:4a:d3:96:63:c3:ba:e4:52:d2:0c:81:
2e:2b:93:e3:95:4f:ef:50:a5:f1:dd:81:d1:d0:f9:4f:e3:d8:
5b:96:48:54:77:66:ac:01:9f:b1:22:8f:64:82:42:58:4a:af:
58:82:d5:71:02:46:de:33:63:b8:4e:d5:97:00:8f:64:7b:80:
c4:2e:a2:14:9b:d3:3a:9a:9d:84:af:08:3b:26:99:26:18:92:
aa:e2:7b:20:f7:04:52:96:83:a7:03:9f:11:0d:e0:98:da:5d:
a1:f4:ea:91:fb:36:a3:7f:f5:ed:6c:84:fe:4f:18:c9:1c:ee:
61:42:ee:a4:93:d0:e1:c4:1d:d1:2f:65:7b:ba:62:33:c6:f6:
ef:7b:88:42:a2:b8:a8:1d:62:ae:76:79:9b:05:75:df:42:bb:
da:f4:00:1a:12:2e:13:fa:15:1d:f0:02:89:07:cf:75:c4:83:
b8:dd:6c:76:35:f7:d8:8e:da:bc:1c:bb:12:5b:65:ef:32:57:
a9:47:89:e7:55:d3:38:40:a7:2c:ba:ab:58:9d:76:ec:c5:af:
ac:8d:88:f6:e1:c2:77:3f:d8:34:93:a6:41:c4:9c:0c:63:2d:
1d:0c:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:43 2026 by rpki-client