Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: uXr/9uZpK9gYh24TDZ6oQ3HSEvtvXX73ZVgjWdqIIfw=
Subject key identifier: ED:46:0E:1A:98:FA:38:49:1C:27:C2:88:01:9B:25:ED:41:5C:F2:6F
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01A0EBC0B8B0A322F15548B5ECCE8110265A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 12CA
Signing time: Tue 29 Sep 2026 06:01:10 +0000
Manifest this update: Tue 29 Sep 2026 06:01:10 +0000
Manifest next update: Wed 30 Sep 2026 06:01:10 +0000
Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: UWX3T1J2mTHXutM7dhifE9QfgM1DmbpRrSp435vB7xc=)
2: NoeCXcWV3UgWHPP_KjkTczKK_Xc.roa (hash: fQmf+0QjeWGgS66kmRBZPjLky3GL2ce/S+K3VIzYjtw=)
3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
4: eFgaCfFQ4wnN2TLjUx11IbfSUic.roa (hash: PRgXnTA2HUCK93Q2oPHby6jgjDBYph2NqjlwyNitfzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:b8:b0:a3:22:f1:55:48:b5:ec:ce:81:10:26:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Sep 29 06:01:10 2026 GMT
Not After : Sep 30 06:01:10 2026 GMT
Subject: CN=ed460e1a98fa38491c27c288019b25ed415cf26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:ee:a4:5c:ff:22:42:a2:67:af:7f:e6:c9:
e6:a0:d8:a2:30:93:07:a3:6c:62:94:5c:48:99:4c:
38:6d:65:5e:23:de:c2:a6:30:3b:1b:e7:20:6d:5f:
ac:39:80:bf:77:cc:cb:f8:4f:f8:b8:a1:15:fb:f6:
3f:56:db:7b:b2:45:dd:15:90:da:31:3d:d5:29:6d:
2b:5b:0f:94:b7:5f:7c:70:0e:e9:4d:ac:a3:0d:4e:
2d:21:b1:41:41:41:2c:72:96:51:13:87:3a:fb:5f:
00:9a:e5:ff:e4:6d:76:a4:3d:68:cc:1e:63:5d:dc:
be:20:e8:01:6f:4b:12:6e:2a:57:79:f8:d9:ef:35:
f7:8a:ec:2c:51:40:5f:79:d7:d4:0a:e9:1d:16:10:
80:b1:3c:5b:d9:91:ed:f7:d2:3c:a5:7c:62:a2:88:
d9:16:67:f3:cf:f8:a0:15:81:74:82:52:50:b7:85:
1d:b1:89:b7:29:a7:c1:dd:53:bf:8b:86:0f:ee:8c:
a5:32:e8:f2:4e:d9:89:f1:36:96:3e:69:16:63:99:
4f:fd:da:ad:ab:fe:3e:da:da:1a:14:5f:5b:55:e0:
af:c0:60:29:93:4d:b5:44:48:f8:e7:dd:6e:9c:b8:
30:14:59:7a:c1:f6:68:31:4a:d0:63:81:7c:50:78:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:0E:1A:98:FA:38:49:1C:27:C2:88:01:9B:25:ED:41:5C:F2:6F
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:2a:cf:61:b1:96:84:9e:b6:1f:d7:03:6c:86:34:70:04:
d2:20:5b:a2:64:a6:9d:45:af:a4:7b:57:d3:c4:b6:a6:a0:1b:
63:30:47:08:23:e1:80:ca:ce:31:8e:09:53:85:4c:71:03:31:
2f:78:61:5e:ff:aa:d6:f0:de:69:64:24:2e:0a:98:df:55:dd:
3c:fb:2e:a2:0e:0a:cf:d7:13:6a:26:81:44:e7:c1:bf:a1:d8:
07:dd:f3:ab:4a:57:20:f2:a5:52:56:bd:70:e7:11:c8:e2:2c:
b1:f7:0e:8b:94:9b:3a:f6:ed:2f:e6:4e:15:74:df:2c:2e:8f:
03:8e:67:2e:ed:de:97:14:92:73:e0:5a:1f:bd:9f:73:f0:74:
84:9b:64:cc:a9:43:37:16:d3:3b:ee:71:18:5b:9d:2e:b9:a2:
7d:e6:f2:6f:c6:23:db:95:bb:28:d9:65:ba:fc:94:19:70:af:
e7:60:ce:f9:be:67:89:55:7c:e9:26:cf:69:95:06:b4:e4:b8:
62:e2:06:7b:a0:aa:d7:e2:37:4e:b8:02:71:bf:f0:64:c2:45:
b3:47:4c:2e:0e:b3:4d:02:fb:d9:f1:cc:30:a9:00:82:25:5b:
bc:72:ab:92:36:8f:71:03:38:52:52:ec:c4:75:93:14:0c:03:
95:aa:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:33:12 2026 by rpki-client