Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: t32BeqT5oqSAIZpReoDFXviL2rD80s6MCJZxA1B0vxc=
Subject key identifier: EE:FD:17:AA:B1:74:E7:C5:FC:EF:D1:36:97:18:9F:0D:F8:1F:DB:5B
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 01A0F7C53B38888D957E5E885C931D1E27B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 1A85
Signing time: Thu 01 Oct 2026 14:01:32 +0000
Manifest this update: Thu 01 Oct 2026 14:01:32 +0000
Manifest next update: Fri 02 Oct 2026 14:01:32 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: v/r0L24YxqtCjhNSd2J9cUrQRa8k6ZDSLEknvIiT2Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c5:3b:38:88:8d:95:7e:5e:88:5c:93:1d:1e:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Oct 1 14:01:32 2026 GMT
Not After : Oct 2 14:01:32 2026 GMT
Subject: CN=eefd17aab174e7c5fcefd13697189f0df81fdb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:f4:82:0f:b7:ea:ca:18:7c:4f:3f:0c:10:
54:bb:6e:b8:a9:0d:52:91:52:d6:40:75:62:11:eb:
a3:f1:5b:a1:b0:ce:89:0c:9a:10:6e:74:d0:a6:fe:
bf:b0:62:82:9c:95:77:6d:8c:aa:f5:3b:21:52:ad:
f7:1d:f1:18:8d:56:0c:ce:30:06:f7:dd:c2:eb:32:
04:a8:29:57:1c:22:c9:34:66:e9:e0:2b:ff:36:89:
20:f6:87:20:79:90:b8:b3:e7:d0:8d:4c:1d:8e:c8:
af:2d:92:b1:9b:60:5f:ef:cb:a8:40:82:79:24:40:
f3:4f:2c:72:77:31:cc:bc:26:8f:49:3c:68:bb:53:
6f:92:dd:2a:11:b6:2f:f3:8f:85:d7:69:b8:09:73:
82:57:b5:e0:64:2c:b0:61:fa:51:36:c2:e1:cb:aa:
59:e0:bc:28:4f:73:bf:ff:f1:35:2e:4f:43:60:a4:
c4:8d:37:e2:21:b7:7c:e1:45:44:ba:8c:84:23:5d:
52:0c:5f:bf:f7:c4:ae:51:56:70:08:47:77:c7:5f:
2b:6d:88:dc:2c:52:3a:69:74:0d:6d:8b:dd:25:31:
90:ba:89:62:71:d7:d3:c5:cd:0d:48:32:cb:2a:4c:
a3:a6:ca:f1:66:e1:83:98:37:8d:78:68:bf:da:3f:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:17:AA:B1:74:E7:C5:FC:EF:D1:36:97:18:9F:0D:F8:1F:DB:5B
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:fa:4b:8b:d0:a1:26:f0:9f:b7:d2:72:84:88:ed:ba:f8:
a5:97:2b:8b:cd:06:82:f9:14:4a:68:16:1a:66:45:cc:3c:49:
7d:ac:5c:35:57:64:d0:6f:8e:b3:59:82:ee:c6:02:a4:71:c7:
94:a7:aa:d4:3e:b5:47:7c:4d:a8:e3:48:f1:bc:bc:e7:7d:a3:
b7:dc:1d:20:c0:ec:dc:f7:9c:59:11:84:6e:7c:d7:06:88:aa:
25:35:67:31:7a:20:96:c2:30:48:14:71:d3:68:1b:8e:3d:1b:
69:7c:ff:b2:3d:89:09:24:e1:9f:c2:8d:a2:43:16:bd:ff:d7:
54:92:ae:1d:f5:fd:d3:11:65:1d:c3:cb:33:c1:a7:c9:b1:43:
1a:ff:29:a9:93:a2:30:05:4d:15:00:cb:5a:50:85:da:c1:09:
8f:66:1e:b0:a2:e9:23:17:77:90:2d:4f:bb:a4:83:c1:f7:90:
a4:7f:22:7c:93:ad:5d:eb:4c:a5:f8:9f:f3:34:cb:e9:c3:cf:
1a:e9:ed:60:71:7e:bb:ca:4b:e7:95:01:b4:02:09:d5:ab:b0:
ce:e3:5b:17:e9:d1:5f:38:c1:24:ff:09:12:11:be:f4:0c:d2:
bc:aa:23:f0:dc:dc:6a:b4:a6:a6:7f:37:29:39:be:6f:6f:ae:
26:c2:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:43:26 2026 by rpki-client