Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: m4kIWEUESdSTuxi4Keep6xY0+850yhzDc/L346r7x5U=
Subject key identifier: 16:1E:54:AC:DB:69:7A:C3:63:AB:45:14:32:15:73:64:83:BD:5F:26
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 01A0D538D108C8935EE41336868D2E1D0D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: 018E
Signing time: Thu 24 Sep 2026 21:01:05 +0000
Manifest this update: Thu 24 Sep 2026 21:01:05 +0000
Manifest next update: Fri 25 Sep 2026 21:01:05 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: HUivLS9KiB8V4FNx7cDHJHFvGSpL97aknLSrOl5jZxc=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:d1:08:c8:93:5e:e4:13:36:86:8d:2e:1d:0d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Sep 24 21:01:05 2026 GMT
Not After : Sep 25 21:01:05 2026 GMT
Subject: CN=161e54acdb697ac363ab45143215736483bd5f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:1a:f9:e2:91:bf:45:2d:53:27:b8:bb:f2:
de:eb:7e:39:4f:cb:80:27:57:1d:08:0e:42:98:48:
d4:98:51:54:22:a3:b7:23:85:77:4c:ef:af:b2:00:
a1:60:0a:74:d9:88:cb:b2:67:b8:31:3c:a0:84:fb:
6f:c6:45:3b:45:92:8d:10:38:1b:7a:4c:77:49:95:
7d:52:84:c2:95:91:63:0c:56:24:91:8c:72:45:13:
0e:fc:8e:ce:5c:c2:29:a4:71:8c:95:e1:4b:43:d3:
aa:46:15:89:5b:67:73:5a:fa:ec:6a:d3:8c:d2:40:
6d:04:7e:5d:83:85:b1:d9:ec:a6:f3:20:3a:a6:f0:
89:55:3a:ff:f9:ee:24:3c:01:62:04:64:12:41:23:
77:6c:98:5e:de:67:5f:ef:29:10:4f:e7:22:e6:52:
df:4a:74:62:65:2c:b1:ac:11:55:6b:44:1f:54:d4:
a5:d3:87:12:8f:aa:01:62:6e:f5:23:18:95:72:4a:
12:5a:3a:47:e1:c0:83:db:8f:94:6e:70:0c:2f:e5:
63:77:09:9d:0d:3b:ea:0a:f4:67:28:a0:1e:0b:1f:
e3:b7:1c:55:4e:65:aa:2d:bf:ff:7a:76:46:1e:e2:
2a:47:92:1c:f7:c9:bb:45:d3:1d:c4:21:c0:6a:20:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:54:AC:DB:69:7A:C3:63:AB:45:14:32:15:73:64:83:BD:5F:26
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:eb:ea:cc:15:2f:30:51:e3:14:5b:98:fb:92:dd:4c:f5:f5:
5c:40:0a:4c:a6:86:42:05:14:e2:a3:bf:54:33:3d:fe:2e:c8:
45:0b:4d:33:52:9b:ae:c7:e2:c7:15:87:b6:83:c7:5d:ed:75:
1f:df:11:ff:2c:19:7f:71:77:00:86:37:75:e8:e7:46:d7:f1:
cd:e8:15:92:3e:f1:a2:c0:6d:df:0f:0e:7f:fc:9d:36:46:40:
f0:b4:39:27:0a:8e:72:61:be:81:80:e2:1e:ca:63:da:58:93:
cd:59:89:70:fb:4e:d5:0f:58:b0:96:59:11:3b:38:02:fa:6e:
cf:0e:68:c0:39:56:ea:b3:2d:e1:4c:be:bb:fc:e6:96:86:58:
aa:28:66:1c:c2:72:4c:ff:d5:e6:0e:c4:fc:29:e2:70:e4:dd:
6b:66:09:e5:fe:00:17:d4:e2:f6:40:4c:78:3e:19:20:22:3c:
03:c1:a9:5a:73:a3:e0:57:47:21:82:f2:89:46:c8:a0:46:ea:
21:c9:f0:a6:70:43:6c:85:7e:06:29:a1:52:9f:31:c2:f7:84:
37:3c:6b:67:2c:a3:1d:dc:c8:4b:1c:ae:91:9c:6e:77:4b:cb:
90:05:84:75:2f:74:6a:4b:7b:75:77:f6:20:c4:51:17:77:b2:
7e:da:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:34 2026 by rpki-client