
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: c1xRKooUyc1wG2R4gsBZOYQ9z6MzFHFLdJrGiDWESFI=
Subject key identifier: 05:06:59:A2:78:C0:93:68:C8:69:65:30:2C:6F:85:E1:36:43:8D:4B
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01A0D3F0B05C950E74C9965F3FEA3040C724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:02:41 +0000
Manifest this update: Thu 24 Sep 2026 15:02:41 +0000
Manifest next update: Fri 25 Sep 2026 15:02:41 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: Th9l96MpzjvFdCrstWzS6x2RtHlTlg6KZMpI2R3q7Mg=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:b0:5c:95:0e:74:c9:96:5f:3f:ea:30:40:c7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Sep 24 15:02:41 2026 GMT
Not After : Sep 25 15:02:41 2026 GMT
Subject: CN=050659a278c09368c86965302c6f85e136438d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:43:c9:c5:a9:da:8b:f3:69:a9:d7:14:b0:
d5:b8:d9:83:a1:d7:98:c7:b1:ff:4c:47:80:d6:52:
3f:8d:40:00:bb:0a:54:b8:bd:20:f6:53:c1:63:48:
74:fa:46:26:d2:c9:c7:f7:12:65:b1:63:28:48:27:
c6:f8:4f:5c:29:32:7b:96:bd:52:56:dd:57:c5:86:
57:7e:99:1d:47:c9:13:b3:da:31:01:19:a2:00:62:
a3:b2:5c:68:7f:56:f5:e4:7e:69:49:3e:8c:9d:94:
ed:f7:13:0f:c7:99:37:56:79:c5:c9:2c:48:ef:99:
62:8d:08:41:ad:4b:f8:6a:cd:98:72:97:f3:9d:c5:
47:a3:6e:35:4e:6f:aa:20:6f:29:8a:32:80:81:bf:
32:db:21:d1:79:da:b7:29:f6:c9:76:fa:74:7e:64:
94:37:4a:0d:e7:38:ee:d1:65:19:06:aa:8b:c7:6b:
ef:fb:e6:95:47:0e:1e:71:10:17:23:53:07:3b:49:
7f:a3:37:d8:59:e7:b7:92:de:e5:01:4c:a6:fe:53:
09:79:d9:90:64:2d:40:af:b8:21:71:a4:6b:1c:2d:
eb:47:0f:7b:93:14:a5:dd:d2:26:37:ca:80:8a:69:
f3:a0:fa:3a:3d:6c:47:8b:03:d0:cc:ca:88:7e:95:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:59:A2:78:C0:93:68:C8:69:65:30:2C:6F:85:E1:36:43:8D:4B
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:1b:8e:6b:36:c6:b2:95:64:e6:a5:3d:47:4c:73:ea:2f:
f8:37:9d:df:4d:7f:23:ea:eb:99:69:30:f4:68:45:df:d2:3e:
dc:02:f0:b5:4b:98:9a:11:c8:96:02:86:8b:2d:c4:0b:b5:86:
c1:45:4b:de:bf:ad:dc:9b:96:53:42:3c:b5:68:0e:67:79:53:
88:33:5e:f1:06:be:2b:e8:0e:55:59:24:24:47:9b:00:5c:75:
cc:6b:f5:4d:d6:99:6f:03:9f:f5:57:f6:79:8e:ee:e4:e7:8f:
01:27:fc:7d:64:77:ef:79:a5:13:4e:b7:ff:32:1f:37:53:0a:
98:12:a8:1f:4b:fb:5b:9e:93:94:31:85:37:43:04:8c:2a:49:
10:29:e7:81:43:2f:22:9d:0e:f0:e1:81:b8:f9:29:b5:cd:c2:
19:58:4b:65:9b:0c:0e:cd:90:6c:66:41:00:57:7b:59:9f:4d:
3f:0b:7d:43:17:94:60:ff:cb:75:ff:c5:c3:4e:ed:13:87:01:
8c:97:c4:06:83:9f:cb:2e:a3:8d:4e:86:f5:09:40:e8:2c:14:
68:75:62:f8:2c:fc:ed:0c:7b:5b:9b:bf:b5:2e:c3:73:02:1d:
be:67:7b:12:26:86:a1:59:d2:3b:cb:50:8f:5c:86:4a:38:60:
e4:cb:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:00:59 2026 by rpki-client