Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: QhHKQVXEalaP1eLnpCRyBecqifIIc++Mvk43bY0nUEU=
Subject key identifier: 10:73:D7:D9:71:EC:B4:A5:42:C5:63:69:B7:A2:A9:2E:ED:36:C5:1E
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 01A0CFDB3C4047A06F58AFBF92EC09A9928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1A7A
Signing time: Wed 23 Sep 2026 20:00:46 +0000
Manifest this update: Wed 23 Sep 2026 20:00:46 +0000
Manifest next update: Thu 24 Sep 2026 20:00:46 +0000
Files and hashes: 1: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: mGTuO48ekEL2Uss3OozzOxjZRx2X9CSjFcQ5FKV4E2U=)
3: euy-jk1gO1wrAYZN4p50UuYsEPs.roa (hash: KSckesEUkDLC/vCF7oLNqmhTklvyJBTosAv+lpvioKk=)
4: saXncTu8Jyn9wHWn8gtxElcn7uk.roa (hash: IsO7tvAcqIRqvr9qvI5jdboB3g/FW6hvUsM1vnYO7yQ=)
5: t7vrOp3nsycdnJxMZ5NoWiSkRSY.roa (hash: b9S+rL7jAdeW6E9Q/4UXcld20c94fuGo0soey73m5u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:3c:40:47:a0:6f:58:af:bf:92:ec:09:a9:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Sep 23 20:00:46 2026 GMT
Not After : Sep 24 20:00:46 2026 GMT
Subject: CN=1073d7d971ecb4a542c56369b7a2a92eed36c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:57:90:a9:0f:32:bb:f6:ba:91:67:0b:2a:
80:5f:5c:c8:b0:ae:4e:a8:a1:83:a0:28:a5:44:04:
e9:ad:b0:fb:5a:7a:4e:5f:c0:20:d2:ff:cb:ac:49:
b6:bb:17:42:46:1e:6d:c0:ee:4f:a1:b2:b9:73:87:
48:00:35:12:0a:19:a2:f3:d7:37:b7:68:a1:d6:76:
07:80:2c:82:bf:c7:ae:db:dd:3f:08:0e:d8:4f:d2:
c5:c6:51:ac:40:e3:7a:21:8e:67:12:6c:b9:5a:3a:
6a:ad:2f:54:bc:c0:ea:08:0f:f0:07:d8:7c:16:47:
d2:ba:1a:26:41:83:b2:41:57:dc:4e:8f:12:64:0c:
31:88:c1:17:f3:75:dd:ea:db:96:9a:93:a7:3d:81:
71:4e:ca:3e:9e:16:fe:3f:45:36:5a:99:4d:84:4a:
3f:d5:db:39:80:27:12:c7:76:52:c6:53:56:a3:42:
7b:22:ed:09:27:ef:0d:17:b3:f3:bd:7f:4d:93:c1:
7c:42:81:ec:ab:d5:cc:90:6f:9d:be:fe:e3:d7:d9:
78:88:70:2d:54:72:e2:c2:66:5a:8d:68:eb:87:ff:
c8:7c:8f:26:75:2c:eb:49:a3:ab:8a:5a:8c:10:83:
2d:4b:cd:6d:ad:c2:58:68:8d:30:79:8c:c2:91:5a:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:D7:D9:71:EC:B4:A5:42:C5:63:69:B7:A2:A9:2E:ED:36:C5:1E
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:15:27:6c:15:c7:1d:0b:fb:08:a8:b4:cb:86:f3:1d:cd:
05:ea:9b:c2:29:b6:5e:af:39:19:0e:1f:af:17:60:52:32:77:
8b:c7:19:5f:d8:41:3c:11:3b:35:8e:9c:49:ec:3a:14:af:d0:
09:5d:59:8b:7d:01:2a:7e:5d:00:01:bc:3b:cd:4a:5e:49:cf:
8f:37:de:fc:ee:f7:5d:cd:6d:07:16:61:a7:ef:8d:04:dc:d3:
cc:16:2b:98:f7:ab:fd:f8:76:c3:af:5c:cc:f2:53:29:3c:63:
de:c4:b5:09:39:62:11:25:96:55:88:84:df:d9:dd:6e:48:95:
8e:2b:4d:93:2f:39:d2:9c:24:bc:af:6f:34:85:7d:a7:6c:61:
e8:6a:be:a9:c1:2a:b4:c2:e2:76:f1:af:a2:c3:00:34:49:24:
50:1e:b4:8f:7e:f3:a1:a5:af:6f:c1:62:ff:55:04:f7:64:9b:
e6:8c:14:7f:0e:c0:0d:0f:86:90:53:f7:4a:cf:90:7a:74:9b:
18:f0:2c:50:2c:0f:51:39:32:20:b2:56:05:86:db:a2:c2:fc:
2c:5b:23:05:20:83:48:6e:eb:bd:7a:c1:61:8c:e9:0e:2f:5e:
28:09:1a:92:04:11:87:cd:a1:41:86:78:c3:7c:fa:6c:b7:b7:
34:5a:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:12:43 2026 by rpki-client