Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: So5pb+OeJcQ6D1zhZqoaKe10yJYjKjrh6W1yJKTttVk=
Subject key identifier: B1:5C:30:01:1C:A3:AC:06:FF:69:AB:0A:02:73:DC:38:6C:10:2C:81
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01A11ABE18A855A71DC1B17B37B55181FD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 09:00:28 +0000
Manifest this update: Thu 08 Oct 2026 09:00:28 +0000
Manifest next update: Fri 09 Oct 2026 09:00:28 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: 2JoRR92Es1RwEyEtiX32qFbcWUZ5TjiGLtxkZjtG51c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:18:a8:55:a7:1d:c1:b1:7b:37:b5:51:81:fd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Oct 8 09:00:28 2026 GMT
Not After : Oct 9 09:00:28 2026 GMT
Subject: CN=b15c30011ca3ac06ff69ab0a0273dc386c102c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:9c:9a:7b:f2:f6:17:23:44:45:58:79:49:
e7:a7:aa:19:be:71:1c:80:5e:4a:f9:40:b4:a9:71:
79:f6:f5:8b:4f:b7:53:4c:31:80:f8:e4:9f:a9:71:
12:56:48:00:83:26:8a:89:54:fd:da:b4:8e:2e:d5:
0e:97:b9:e9:7e:1e:c9:d4:7f:4a:04:b6:7f:17:cd:
f6:fc:ef:66:34:12:51:bd:19:e7:96:6f:67:28:8c:
d0:15:fe:12:2c:f1:ff:30:dd:61:9a:91:ee:84:73:
b8:28:70:65:3f:a5:4f:d1:11:2a:35:54:dd:85:a5:
04:59:ee:05:2d:ec:3c:0c:7f:d9:8c:af:13:8e:5a:
86:f6:73:e8:ad:f1:04:ab:46:60:ee:51:1b:59:94:
2e:0b:b3:3e:e2:6a:91:d8:1a:97:5b:e8:74:3d:80:
69:a0:88:4e:51:15:6b:6d:d3:b8:6b:be:c4:f7:5f:
aa:10:e4:c6:30:f7:1c:e6:5f:7d:b4:fd:f5:57:fe:
aa:ae:fb:d7:bf:5f:3a:af:b7:eb:d6:12:2b:85:ea:
a6:5d:a9:82:42:71:1f:72:c5:70:fb:3e:41:d0:d1:
08:e8:e5:b3:8c:c6:6a:30:d5:c2:0d:64:64:85:aa:
d2:c9:ea:7a:18:b1:bc:28:ed:9b:11:0f:35:f4:88:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:30:01:1C:A3:AC:06:FF:69:AB:0A:02:73:DC:38:6C:10:2C:81
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:44:4e:13:c8:b0:06:3e:f2:ab:a0:f6:5e:f5:f3:0c:8f:34:
37:a7:02:37:8f:9a:90:74:d4:01:c6:1b:37:78:b6:35:4b:27:
29:9c:a0:c1:9e:90:d5:8b:96:02:d6:ff:ec:5b:59:b4:d0:86:
55:66:47:71:72:01:f0:53:d7:98:3f:78:a3:2f:35:89:ef:af:
7c:90:3b:aa:98:ba:06:87:82:f9:88:76:57:54:aa:9f:77:df:
28:dd:46:00:17:13:33:f8:3e:8a:ce:57:5f:c6:a5:2d:99:d6:
1f:ce:c3:8e:0a:ef:85:8c:fa:24:fd:9d:8d:21:c8:7b:c8:79:
70:e0:1c:56:4b:05:67:5e:e9:66:3c:74:2f:cc:9b:5d:d7:fb:
91:71:22:a0:4e:fc:de:44:48:4e:27:c7:aa:f4:0d:5d:ed:16:
ce:cf:ba:f8:e1:49:10:36:00:a6:6a:26:44:5e:7b:a7:df:1d:
e5:fa:f1:81:37:f5:87:21:e3:51:43:33:17:1d:75:1e:52:8a:
ad:26:1a:de:13:23:8e:fa:c9:f2:98:21:04:24:1a:73:d4:a7:
5a:93:3e:05:bb:9c:4f:fe:2d:7e:a3:c2:b4:af:9f:0e:f2:fb:
b6:85:91:80:2b:0e:1a:49:2f:12:3e:91:24:2a:1d:dd:19:99:
7f:77:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:16:11 2026 by rpki-client