Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: mQ0vZGkaRGJD4rmeCMRhPrEn+nIDjjjWIMJtnQa/ldc=
Subject key identifier: BD:9C:DA:D9:4C:72:DB:1C:01:63:36:B9:23:10:D5:61:B0:DF:05:58
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01A0E02AAA3348E019AE2340B00B8B7F281D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 00:01:27 +0000
Manifest this update: Sun 27 Sep 2026 00:01:27 +0000
Manifest next update: Mon 28 Sep 2026 00:01:27 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: ARXxsFf5/p9r0xlY4PR+Wog/GeKWkwpaBLoYeNzjxAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:aa:33:48:e0:19:ae:23:40:b0:0b:8b:7f:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Sep 27 00:01:27 2026 GMT
Not After : Sep 28 00:01:27 2026 GMT
Subject: CN=bd9cdad94c72db1c016336b92310d561b0df0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:f8:64:e8:9a:be:83:a4:49:ba:31:50:2a:
5a:50:88:89:7c:c8:27:c0:c7:86:6e:0e:ff:88:4a:
92:cd:b1:df:c9:27:84:b0:0d:77:f3:49:23:46:b1:
34:c7:c3:3b:72:b3:55:fc:04:4a:2c:49:f6:f9:35:
17:02:69:33:2f:b5:cc:9a:fe:ef:e1:81:ab:2e:74:
a9:0b:d2:5e:53:06:5f:97:b7:86:3c:ae:cf:70:ed:
2e:1c:d5:cb:48:fc:d9:b4:19:d7:c2:81:0d:07:27:
df:b2:b8:44:cf:4c:28:a0:6b:f3:35:cb:83:a4:45:
97:f7:1c:aa:1f:ad:c1:6f:1a:81:0d:75:d3:bd:e1:
a7:e0:76:f7:c6:6a:e3:2e:0a:d2:85:59:e4:f3:7b:
9c:8b:27:27:d3:ba:e0:1a:84:80:44:e7:29:03:91:
5b:65:81:9f:62:46:fd:c7:c1:ce:51:21:7a:21:40:
c0:f0:7b:65:bd:c5:52:de:74:0b:1f:8d:2d:4b:39:
a2:bb:58:d4:43:64:47:49:11:94:bb:d7:7c:bd:1c:
2c:51:c6:c7:cc:5c:19:2d:55:ef:fd:d7:b9:dd:54:
0b:dc:42:c9:a6:cc:e5:27:d3:d5:ae:11:07:80:67:
46:d7:14:d0:cf:8f:41:ff:6b:f1:80:91:92:f6:41:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:DA:D9:4C:72:DB:1C:01:63:36:B9:23:10:D5:61:B0:DF:05:58
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d3:4f:41:9f:b9:c6:b4:20:8c:5a:dc:6a:23:b0:70:39:dc:
a0:0a:68:1c:dc:37:ad:2a:39:43:7a:1e:d6:d6:a4:97:e5:86:
cf:f2:a9:58:bb:56:25:e5:d8:c6:c5:f9:ab:6c:ec:c8:bd:09:
34:2d:6e:a5:36:15:1c:a7:98:36:5f:89:2d:2d:e1:15:78:31:
db:94:81:6e:d5:3b:da:92:5d:b9:b9:2c:90:a8:f7:9e:e5:d0:
ed:e8:71:c7:fd:0f:ad:06:f1:60:92:87:40:1c:fb:13:45:bc:
e5:aa:20:ad:0b:f1:31:0c:8a:37:b8:a5:83:b9:95:73:90:b6:
66:02:d0:f8:5e:33:0c:ba:bf:e3:a0:3c:7b:05:e8:ec:37:34:
58:c3:91:48:77:d1:a9:bb:b4:8d:32:2c:fc:d4:27:4a:5e:41:
90:5e:bd:1e:28:b4:d3:6b:15:bb:9e:26:59:d8:1e:ed:da:0a:
82:3b:a1:00:4f:01:8f:c7:d6:4f:68:6e:23:7d:b5:d0:cd:e9:
6e:98:16:51:9f:52:46:de:ab:df:39:4e:f8:5c:1f:e8:3d:c0:
61:45:1d:5e:60:32:4e:eb:b5:45:c9:2e:2a:00:2c:73:38:f1:
4f:85:34:c6:80:b1:f8:50:cb:18:a1:3a:12:5b:67:ac:84:e2:
c3:1e:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:19:08 2026 by rpki-client