Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: ibd3Dr5vHwn+GlBhoORfLWpA3PJ0+8J1mpPMQiQG+FQ=
Subject key identifier: CA:50:8F:4D:54:E7:69:56:DF:82:15:48:57:E6:C7:E6:AC:4C:F4:20
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 01A0D3B8E1ACE93B62A62BC6EAA45B743936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 1440
Signing time: Thu 24 Sep 2026 14:01:43 +0000
Manifest this update: Thu 24 Sep 2026 14:01:43 +0000
Manifest next update: Fri 25 Sep 2026 14:01:43 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: Ld5pQP4iOKJEXDlXi3KVIUDKdvL3F8hc+q/6IYaU3XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:e1:ac:e9:3b:62:a6:2b:c6:ea:a4:5b:74:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Sep 24 14:01:43 2026 GMT
Not After : Sep 25 14:01:43 2026 GMT
Subject: CN=ca508f4d54e76956df82154857e6c7e6ac4cf420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:bb:00:53:2d:50:bd:fd:ef:b7:86:9f:2a:
da:3c:d8:0d:c3:e5:5b:9f:62:5a:7f:8f:0f:6a:97:
52:6f:cd:32:6c:c7:d7:da:a2:57:a4:9c:f3:3f:ea:
ed:99:01:d8:0b:ff:21:35:e9:79:ee:9e:f2:f6:86:
33:c8:87:31:f5:c4:9b:9e:e6:4c:11:57:c7:70:b4:
48:f8:a2:4e:4a:92:bc:91:eb:25:2a:68:18:a4:39:
3d:b5:0a:b2:9a:1f:56:df:d0:56:7f:cf:98:61:58:
e4:7c:c6:18:41:85:5e:7d:a0:bc:62:18:f3:db:b5:
d0:9a:a0:b9:6c:35:84:83:c5:69:d6:83:d9:19:ac:
22:8b:cc:a2:16:06:f1:7e:df:70:e7:ea:c4:39:c6:
1c:ed:33:f5:0f:79:db:d6:2a:11:00:e2:07:f7:22:
31:f1:e1:90:39:e4:0c:cc:f1:73:ca:ce:fa:5e:a1:
1c:40:95:a9:4c:c5:b7:94:94:0f:43:ea:bd:2f:bd:
44:3f:5b:af:ab:c6:ef:9f:c8:b1:25:02:d4:38:bb:
15:b7:c6:03:1b:60:2b:77:85:57:6f:3f:89:90:ba:
22:31:83:19:50:0e:5e:dc:db:5b:cc:07:f3:1b:50:
df:8c:3c:70:bc:30:88:d9:32:a3:dc:42:f4:90:bb:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:8F:4D:54:E7:69:56:DF:82:15:48:57:E6:C7:E6:AC:4C:F4:20
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:36:85:02:8b:60:d3:7c:2d:b9:e9:1f:a7:e0:3a:69:af:bf:
97:60:bb:41:c5:4a:94:f1:03:5a:35:19:00:75:79:69:92:b6:
1b:10:a0:2b:07:f6:9c:ae:84:db:c5:84:82:fa:de:88:64:94:
51:80:00:cb:3d:da:bb:8f:89:59:2f:ae:f6:0a:1f:f6:e0:3f:
ad:3a:bd:c2:ab:94:8f:ee:3a:92:79:dc:07:5a:10:1b:30:fa:
5e:a4:f6:18:3f:41:f5:0b:92:93:6b:86:8f:6a:35:3d:a7:13:
62:89:fa:da:c4:93:6a:fb:e3:6b:3b:2c:bf:90:a2:5a:60:b6:
d4:c5:02:e0:5d:e8:71:41:10:7f:e0:37:bf:e9:5a:89:3c:98:
7d:8c:6f:59:65:d2:4f:de:2a:ee:34:41:a7:99:13:b8:4d:bf:
6d:09:1d:93:2a:a9:cf:34:9f:ec:a8:74:ae:6d:72:de:c5:b4:
77:d8:1d:d9:79:f9:ce:93:6d:be:f1:93:0b:3b:60:08:4b:d8:
5c:d4:90:df:62:30:e6:57:c0:46:0b:0c:69:fb:97:0a:1c:42:
6d:79:a0:64:e4:35:bc:24:28:42:85:dd:aa:20:5b:46:e2:4f:
47:9b:a3:db:0f:49:8b:00:0d:1f:cb:a3:1c:b0:ef:c8:e1:0c:
be:40:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:58:35 2026 by rpki-client