Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: HVMZ492WYGhIia+Alh+FVwT2d14tnoGI++i/HMqFQQQ=
Subject key identifier: 49:A5:5E:94:47:24:EB:9A:49:C5:53:AA:A9:5C:06:2D:80:69:DB:4B
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01A0D538E701F7B8696C5B09BBBB53809939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 21:01:11 +0000
Manifest this update: Thu 24 Sep 2026 21:01:11 +0000
Manifest next update: Fri 25 Sep 2026 21:01:11 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 9KmzpJzzVW6WxnkZp4Yk3uovikUMfhDi4zmPyMhzefM=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:e7:01:f7:b8:69:6c:5b:09:bb:bb:53:80:99:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Sep 24 21:01:11 2026 GMT
Not After : Sep 25 21:01:11 2026 GMT
Subject: CN=49a55e944724eb9a49c553aaa95c062d8069db4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:7f:ba:e8:97:c5:9d:5d:a1:e9:a8:32:2c:
6a:68:73:87:9e:91:44:8c:d2:f7:b2:f2:67:b4:52:
cb:1c:36:09:15:79:59:1f:0f:d9:6b:b0:01:88:95:
06:ae:02:44:5e:31:41:3b:36:c4:d5:21:03:4d:66:
30:af:f3:48:50:47:f6:c5:38:44:25:e8:b1:16:6a:
a9:85:14:8c:5f:91:cf:79:ef:1e:cc:af:6d:69:54:
4e:66:51:db:92:27:24:be:a1:44:08:7d:bc:a3:eb:
01:82:92:b3:8c:a4:8f:b4:29:82:b2:6c:a5:e6:f0:
fe:05:d0:46:50:60:d1:36:91:b2:2d:e3:5b:86:97:
8e:47:2a:8d:a4:50:8e:02:ed:c2:77:68:57:49:83:
a1:b8:6c:07:61:e1:7a:9f:ec:75:de:04:94:1a:cb:
b4:ab:23:1d:ce:86:3d:fd:0a:68:67:26:21:13:9a:
fb:84:f8:24:0a:49:98:77:04:a2:93:4a:00:01:74:
f2:d9:31:69:f2:5f:d5:9a:c6:ae:fd:d1:03:1a:84:
e2:4a:e5:f2:ec:41:4c:49:f2:f8:10:b5:49:20:fa:
38:da:1b:ad:68:ef:ca:22:6c:cc:4e:2d:06:25:51:
c1:0e:73:79:7d:7a:ab:a3:83:61:f5:8a:b5:8d:10:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:5E:94:47:24:EB:9A:49:C5:53:AA:A9:5C:06:2D:80:69:DB:4B
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:98:d4:dc:c1:20:72:fc:8d:fe:65:22:19:4c:52:fe:89:
16:1b:67:43:e2:27:22:41:3b:4a:27:ca:78:d6:bc:c4:00:69:
22:9b:2b:73:06:44:8e:d9:6f:ba:da:39:5b:05:97:46:50:49:
c4:84:e2:4a:3c:96:b6:20:22:5c:16:c5:a1:a3:26:30:0e:c6:
51:40:62:4d:8c:22:e2:19:c2:89:a5:dd:6f:79:7b:a6:47:ee:
37:28:cd:31:60:09:51:66:b5:8d:8d:b9:e4:c2:c0:64:5c:83:
a0:62:9b:b5:1a:61:f4:27:be:21:63:8f:22:1b:b6:7f:d1:b2:
ef:74:fa:d0:6b:12:22:1a:da:1e:bb:e1:23:af:e6:e3:c7:f7:
fc:5f:2b:81:c5:c1:a4:97:63:76:8a:85:09:94:cc:ca:f6:0a:
df:c5:af:0c:37:64:e9:cf:e9:6b:28:09:b7:a5:7c:c8:f1:54:
e6:bb:c9:84:24:4a:35:0e:7a:d0:fc:f5:c1:a3:89:e5:2d:a4:
42:8a:ab:c3:2e:a4:86:59:c8:d1:ca:bc:dc:36:ab:de:f7:ea:
54:a3:4d:fc:76:da:d3:f8:1f:9a:a1:ba:c2:5b:9d:8b:12:30:
03:9a:cd:83:d5:3b:b8:3f:b5:dc:be:64:28:ba:16:a5:28:84:
1e:e6:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:22:15 2026 by rpki-client