Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: F+/+RfXneCCxO1T4nllB7hbYe8D/Ym/N+JD4uMych9I=
Subject key identifier: 86:B3:76:D1:D4:1D:F3:7D:81:2B:F8:0B:8A:51:56:D4:BE:4D:4C:32
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01A0D8DEB0FB278797FD9DF57C9B94E49897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 12C1
Signing time: Fri 25 Sep 2026 14:01:07 +0000
Manifest this update: Fri 25 Sep 2026 14:01:07 +0000
Manifest next update: Sat 26 Sep 2026 14:01:07 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: ivsLkutiAmNnbAqZC9cQPxK/Bryq/9MK2kBwAmtaD3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:b0:fb:27:87:97:fd:9d:f5:7c:9b:94:e4:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Sep 25 14:01:07 2026 GMT
Not After : Sep 26 14:01:07 2026 GMT
Subject: CN=86b376d1d41df37d812bf80b8a5156d4be4d4c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:f0:a7:ff:d9:fe:dc:af:d8:69:17:38:8b:
dd:bc:fa:9e:1b:61:3c:2c:7a:21:df:03:ce:f0:f8:
68:d1:6a:61:e2:b5:e6:2e:cc:87:29:1c:72:db:cf:
56:13:a9:3f:de:3d:da:d0:16:7e:37:ba:21:ef:99:
08:f9:a3:98:7a:d3:e6:95:07:45:3a:77:8f:c7:6c:
22:d8:39:67:91:45:06:04:a9:82:8c:b3:ca:1a:d5:
e0:0e:af:00:91:d9:d4:29:1f:76:ac:c6:16:ac:03:
07:38:27:60:03:05:c4:d0:e5:65:5e:71:a3:96:04:
ca:2b:63:c2:b2:3a:5d:11:09:73:9f:ca:fc:4f:35:
81:b6:44:73:40:9e:c8:00:37:25:a7:24:a6:92:20:
6f:8e:b5:9a:d6:0e:a7:12:8b:21:d3:aa:46:3f:e5:
8d:6d:c3:8f:e5:bf:32:6e:df:f6:d3:0a:f6:5b:9d:
d0:02:8f:2f:df:34:cd:40:89:d5:3f:05:86:7e:f7:
40:cd:7f:b4:97:aa:f2:d1:be:f9:db:1e:e9:1a:96:
16:93:75:12:bf:9a:b4:a8:04:a6:09:30:e8:a7:15:
78:26:be:f5:dd:55:b3:d7:79:0a:9e:0d:75:ec:52:
50:08:d8:1a:2f:1c:35:45:fe:da:9d:bb:58:1a:a2:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:76:D1:D4:1D:F3:7D:81:2B:F8:0B:8A:51:56:D4:BE:4D:4C:32
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:9b:e5:1c:64:b4:02:cc:b9:82:73:1f:bf:79:5f:56:19:
24:31:b1:a2:f1:45:64:df:76:b7:6a:7a:c3:02:48:53:15:6a:
70:16:b6:ef:49:69:2b:4b:5c:8a:c4:b2:bc:5b:f7:1b:d0:7b:
6d:5e:83:7a:79:b3:38:c4:97:a7:a8:f2:1f:32:af:bf:36:8f:
58:9a:fa:61:9e:1a:07:f7:69:58:54:ed:cb:df:c3:be:6c:49:
9b:00:95:fe:de:76:35:f2:de:2f:dc:8d:e5:01:3b:25:a5:14:
84:5a:f8:8f:38:13:d3:fa:07:cd:fa:4b:bd:a5:39:a3:72:ab:
93:88:99:e5:79:44:82:9b:4a:e4:36:ca:cf:d3:f5:cf:c0:bf:
84:fb:35:aa:ed:08:76:3d:c0:de:fd:ee:51:2f:ab:81:ea:78:
b9:ea:c5:2c:2c:44:4d:47:fd:bc:5c:51:d3:1e:3a:8f:df:4a:
ec:cc:eb:19:42:bc:42:c9:9c:e3:b2:c1:0d:44:13:55:8e:87:
9f:1a:e7:2e:98:4c:7c:28:b6:02:53:16:b5:b2:c2:f0:78:20:
19:1d:08:9a:aa:af:b8:39:66:13:ed:10:e9:7c:10:e5:80:9f:
9c:76:a9:df:7d:54:bb:f1:1b:f5:1a:8e:9b:ae:ec:55:01:17:
b2:a3:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:10:54 2026 by rpki-client