Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: hblWQPjGa5cgfeDsLxojLTws+cC+hiY7MDUNZMSVsxI=
Subject key identifier: 81:7B:7A:ED:E6:6C:AB:F4:17:F8:ED:69:FC:2C:3E:E3:90:72:05:2C
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 01A0F67B88EB167263800145E90ADC99865B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 1246
Signing time: Thu 01 Oct 2026 08:01:26 +0000
Manifest this update: Thu 01 Oct 2026 08:01:26 +0000
Manifest next update: Fri 02 Oct 2026 08:01:26 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: wy+PnOyFWGatrPNW2aY1G2be5EyLrk/DHMffr4bqyJ4=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:88:eb:16:72:63:80:01:45:e9:0a:dc:99:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Oct 1 08:01:26 2026 GMT
Not After : Oct 2 08:01:26 2026 GMT
Subject: CN=817b7aede66cabf417f8ed69fc2c3ee39072052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:ab:36:37:e8:97:08:9b:f4:dc:7d:b2:99:
44:6c:5d:4e:7e:5a:bc:39:c1:d3:d8:64:b0:a1:12:
16:6e:d1:bc:43:61:d1:f0:80:96:5c:a3:b3:0e:f8:
11:84:ce:15:ee:71:d3:52:7a:13:4a:f2:2b:c9:3e:
9c:49:01:37:46:99:df:3d:f7:eb:6a:94:c4:34:91:
92:66:e9:76:86:79:9e:27:1a:e1:a0:99:81:85:f9:
2d:b5:cb:64:ac:c1:f6:a3:13:3e:3a:d7:17:26:24:
76:96:76:10:dc:7e:2c:2e:c3:67:16:d7:20:97:7d:
80:88:86:2b:d8:b7:54:83:91:f7:c7:d6:75:15:45:
f8:23:86:5b:6a:e4:d4:22:1a:c9:4b:94:28:83:8e:
e9:65:7a:84:d0:be:34:56:db:db:9e:0e:81:8f:83:
b1:94:c3:01:43:93:66:e2:6b:1b:1c:cf:a3:38:9c:
73:26:d5:72:f6:40:f2:c1:d2:bd:71:0c:ac:2f:0e:
16:0b:41:f6:a8:da:ac:4a:8e:16:bf:e6:9a:ea:ce:
b8:a8:98:b1:e6:a5:b8:e0:79:29:8b:4e:f7:53:c8:
b7:b2:77:4d:1e:06:2b:96:fa:03:5b:e3:2d:5f:15:
dd:2c:8f:e8:67:0a:35:0e:ae:04:2b:a7:f4:06:10:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:7A:ED:E6:6C:AB:F4:17:F8:ED:69:FC:2C:3E:E3:90:72:05:2C
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e9:4f:18:69:95:a4:af:fb:85:17:e5:c3:97:5a:1f:58:2f:
b1:41:13:6d:0d:b7:5e:c4:2e:cd:8c:ae:57:88:b8:06:8a:f2:
4f:53:d9:a7:0a:3e:ba:b4:d4:cf:7a:5a:b1:8a:e8:ef:4b:23:
5c:9b:9f:f0:8c:57:84:a8:e9:ee:6d:0d:7d:f4:ac:01:30:63:
61:39:50:a2:75:0b:c1:3a:d7:f4:f7:8b:8e:fd:95:7d:dd:72:
f3:a5:18:14:20:bd:0b:9c:ea:e5:f2:09:c3:b7:13:a2:b4:58:
fd:76:be:ef:e5:22:57:94:b1:bd:05:1f:fb:22:e7:71:f9:b5:
80:88:90:cc:99:5a:b9:f9:64:75:94:9e:d1:ce:b8:80:20:5b:
08:c8:7c:33:a5:b8:a2:44:18:f2:15:38:31:c9:28:31:c8:5d:
cd:db:1e:4a:3f:5e:bb:c3:76:23:38:3f:62:ee:38:b5:17:a7:
7c:de:77:95:65:22:fa:df:d9:01:67:6f:77:00:94:85:3a:bb:
5b:1f:91:5b:18:80:b7:3c:34:32:dc:ee:b7:8c:88:36:bf:0a:
c7:53:13:5a:b6:7e:73:b7:78:9f:e7:69:1d:9a:17:59:29:13:
ce:be:f0:ab:ae:e8:80:23:be:cb:a0:3b:35:08:88:a7:a3:38:
a8:93:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:51:19 2026 by rpki-client