Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: hf62dl0vZ1Zl5y2U9LwCeV4dzwPghEN75gOgi/xDMWI=
Subject key identifier: 62:EB:7D:4C:1A:11:9C:6C:E0:4E:75:1F:75:22:A9:1A:03:41:BA:D6
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01A0D15BA779FE40842A1CCE5B1D7A33C3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1A34
Signing time: Thu 24 Sep 2026 03:00:39 +0000
Manifest this update: Thu 24 Sep 2026 03:00:39 +0000
Manifest next update: Fri 25 Sep 2026 03:00:39 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: AQgDoOyT4MpZqCKeongMg8OhW7MwfNvcWWVmb7gF4K8=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:a7:79:fe:40:84:2a:1c:ce:5b:1d:7a:33:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Sep 24 03:00:39 2026 GMT
Not After : Sep 25 03:00:39 2026 GMT
Subject: CN=62eb7d4c1a119c6ce04e751f7522a91a0341bad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:a1:ae:39:fe:a4:de:a3:fe:65:29:c0:48:
8b:cd:c8:a5:53:ef:13:bc:16:55:7c:16:ad:fb:4f:
83:9c:47:57:8e:48:17:88:82:d7:c3:06:97:1f:c8:
8f:87:55:39:7c:c3:6c:ad:55:74:cd:6c:4b:31:d6:
81:4a:2b:1a:4e:a8:38:46:52:90:5d:16:d3:6d:5a:
b7:39:e2:cc:4e:f5:be:f2:e7:18:b7:85:db:d0:90:
8b:07:4f:27:6c:e5:22:50:c4:ac:40:10:45:a3:88:
4d:f3:11:7e:da:72:55:68:01:92:23:ba:bb:31:82:
51:c8:d4:40:e3:16:5d:ff:9b:49:9a:37:a5:a2:1c:
be:40:82:c8:39:48:8c:07:06:16:69:42:76:42:0e:
be:f8:b6:70:4f:82:c7:f0:dc:ca:65:cb:16:27:eb:
8b:d5:e7:38:43:78:1b:57:7b:83:ae:5d:0e:15:7c:
a1:90:d1:9c:50:e6:bc:58:a5:82:bc:45:41:5a:69:
13:69:f8:01:80:b9:57:d7:10:53:a2:b6:92:39:92:
9e:d1:77:61:4a:c8:f2:a9:d4:dd:ad:bf:af:ad:75:
2a:36:8f:19:df:89:76:a9:42:06:52:8a:30:81:f7:
e9:11:31:30:24:7e:01:81:63:9a:80:1c:17:e1:0f:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:7D:4C:1A:11:9C:6C:E0:4E:75:1F:75:22:A9:1A:03:41:BA:D6
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:71:4f:80:ce:59:a5:94:1d:2c:46:77:9c:40:7d:b7:4a:
c7:ac:18:f3:73:f1:80:30:d9:0f:c3:03:7f:91:19:5e:7f:b9:
dc:31:e2:e1:71:3a:a5:93:97:78:39:b6:64:0c:a1:b8:25:48:
15:c4:3a:50:3e:76:29:90:73:05:de:15:b8:eb:e9:05:4d:68:
03:1f:a7:a6:f5:6b:6b:86:a7:9d:51:7c:c5:d0:b4:aa:60:c4:
9f:5d:2f:cc:d3:93:f3:ca:ea:ff:39:b8:8e:5f:d3:1c:22:44:
bf:73:4c:36:90:90:25:ef:34:93:f6:fc:c6:af:0a:5f:e5:f1:
26:93:45:10:d4:68:a8:9c:90:92:07:66:22:83:ee:2b:b0:b2:
73:f3:4a:ec:73:0f:3f:57:86:1d:e3:48:68:cf:f7:56:50:ac:
19:e6:07:18:6b:1b:b2:8d:98:20:22:4d:28:e2:11:90:a6:2f:
de:af:30:10:1c:ed:f9:74:75:d5:19:66:f6:6b:60:07:fa:47:
e9:2e:bd:a1:07:20:61:42:c1:4d:80:16:a7:96:67:3f:09:5d:
7e:77:d0:53:31:1c:f0:55:63:50:e6:fe:ca:de:e4:34:3a:d0:
1e:eb:bc:d9:d6:14:61:10:14:cf:e0:8d:c9:5d:e3:ae:04:c2:
ab:57:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:39:14 2026 by rpki-client