Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: NZKWbsGS0ZszCNx9oIhB9FZw0ReX4UR5y2oixeGbY2M=
Subject key identifier: 99:FA:C6:33:1B:E2:B8:A6:8E:C8:A9:F6:07:6C:BF:8B:D7:B4:87:12
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 01A0D83B3C8D5E74F84F2FFDA262AB7EE01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1733
Signing time: Fri 25 Sep 2026 11:02:35 +0000
Manifest this update: Fri 25 Sep 2026 11:02:35 +0000
Manifest next update: Sat 26 Sep 2026 11:02:35 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: kjL0aogBtNb4H/rFS5ryVRVzQqt9Pk4TL881eSPPIdo=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:3c:8d:5e:74:f8:4f:2f:fd:a2:62:ab:7e:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Sep 25 11:02:35 2026 GMT
Not After : Sep 26 11:02:35 2026 GMT
Subject: CN=99fac6331be2b8a68ec8a9f6076cbf8bd7b48712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:66:e6:60:c5:3d:7b:04:d4:a2:d2:a2:e9:
dc:60:5e:f4:44:02:05:64:7e:2e:f3:35:9c:47:34:
20:4b:5a:f1:a3:15:67:a8:48:93:f3:49:d4:17:82:
47:be:19:24:99:dd:68:8a:c5:40:ca:c2:ec:ae:e8:
10:ba:f9:2d:94:51:34:59:4d:4a:24:60:c2:ce:70:
1b:c4:94:7a:db:3b:c3:36:74:e1:f4:40:5a:1e:5b:
2c:c5:5d:42:81:88:45:97:69:07:af:55:34:7c:72:
2b:99:7a:f8:d7:83:ec:8f:28:db:0c:16:60:eb:0e:
1b:df:50:87:8e:77:20:ed:79:72:93:fe:fa:5d:1b:
11:32:72:28:64:99:4b:f9:e0:b6:21:45:3e:84:55:
15:49:c2:e0:27:32:90:65:14:ab:b9:37:89:4e:b8:
c6:a3:27:32:30:c8:9b:ce:a2:99:82:f3:e4:64:25:
f6:11:67:60:c3:ab:e4:36:a1:21:c5:03:00:53:99:
80:cb:2c:95:19:5c:07:cc:a2:6e:d7:fe:b9:10:ae:
37:1c:03:f8:6b:03:ac:02:1f:97:13:af:8c:6c:de:
34:a3:3a:b2:e2:a9:7b:ce:50:19:c4:3e:6d:a2:2e:
3b:34:0f:40:24:b8:8c:d5:5e:ce:a3:12:b3:87:60:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:C6:33:1B:E2:B8:A6:8E:C8:A9:F6:07:6C:BF:8B:D7:B4:87:12
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d8:1f:33:67:e3:75:08:4d:0d:80:c5:94:ea:2f:e3:1e:41:
36:c8:28:d5:dd:75:2f:df:9d:ef:41:47:77:04:b6:1e:fc:c8:
48:c1:01:5f:82:ae:63:7d:45:c5:60:24:d1:7d:45:b7:5f:44:
8b:ee:08:20:f5:9f:9b:a3:f7:2a:bc:6e:b9:2c:a5:4a:49:dd:
19:02:84:9d:3a:cb:d5:b6:b7:54:ba:bc:40:f7:59:c4:e8:a2:
61:72:cb:03:83:de:d2:cb:89:fc:29:99:dd:98:4b:bb:96:76:
7c:f1:3e:8d:65:4a:dc:1f:03:22:c1:c2:30:25:eb:71:96:2d:
4a:d1:fb:0d:12:f3:41:c7:c4:57:38:90:94:e1:5b:86:67:41:
5d:15:fa:a0:eb:de:68:50:3a:35:5d:21:1e:e7:ac:37:75:2c:
0e:8b:68:9d:6b:ed:e7:18:6f:a1:30:db:3e:b3:a5:57:b3:5f:
50:56:0b:20:b2:4f:30:59:81:a8:17:c7:11:22:d9:97:15:14:
df:16:f8:e7:24:92:14:ef:ff:d7:0f:51:32:2f:e6:39:35:7f:
8a:7c:18:2b:ac:fa:bb:a5:58:d4:5a:a4:f8:70:86:8a:ae:95:
a0:9a:26:2c:94:8e:07:5b:e8:41:81:7b:1b:a3:ea:ed:a1:91:
d1:fc:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:02:56 2026 by rpki-client