Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: uRyGQaRk87wygDZZg125q8wN7X39F7n0KEMC2/w3QiA=
Subject key identifier: 36:E6:3D:EF:10:04:2E:5B:A3:67:D3:E3:2C:37:1B:1F:BC:F1:96:74
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01A0FD58E103FECFFBEA63BE9A4CBA0BBA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1A86
Signing time: Fri 02 Oct 2026 16:00:55 +0000
Manifest this update: Fri 02 Oct 2026 16:00:55 +0000
Manifest next update: Sat 03 Oct 2026 16:00:55 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: VZh4sdH0j+m5qdCaG2bXok8JyoU61zw2E8vNbW9h1a8=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:58:e1:03:fe:cf:fb:ea:63:be:9a:4c:ba:0b:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Oct 2 16:00:55 2026 GMT
Not After : Oct 3 16:00:55 2026 GMT
Subject: CN=36e63def10042e5ba367d3e32c371b1fbcf19674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:4f:af:4e:00:40:ac:56:42:a4:e8:28:fe:
a7:32:a5:e0:02:e7:ce:d8:59:c2:a0:db:ce:77:28:
d0:26:ce:ae:0d:d4:51:6c:7a:63:d3:64:88:c1:33:
90:c6:4a:f7:58:23:69:fc:a0:54:78:f0:f0:7e:8a:
c0:36:a5:63:01:64:1d:4c:9d:e5:1e:4f:a9:c8:6f:
f4:34:79:9e:35:36:9f:bc:54:b6:87:33:22:4d:3c:
e4:06:a3:83:c5:a8:51:fe:74:80:5b:6f:74:34:04:
d7:d7:cf:f7:72:d7:ac:be:35:44:c7:fa:a1:fa:53:
f7:d4:0a:9b:ee:1b:ed:68:34:fb:1b:7f:68:13:0d:
26:53:15:70:07:d8:fa:e0:30:c9:65:d2:5a:fa:e7:
26:ee:1a:17:29:32:9f:ad:89:fe:d5:6a:b1:76:ee:
fc:d0:fa:3c:80:5d:16:52:c3:a0:a1:67:ec:19:a9:
09:55:c6:a9:4b:c8:32:d8:a7:85:69:15:a8:f8:72:
84:67:72:73:ee:3f:61:c4:fd:ae:ac:19:7c:0e:3a:
d6:0e:90:62:b1:88:c8:bd:81:24:ea:7c:2d:db:9c:
90:b1:7a:f4:d2:bd:8e:0b:c5:1b:56:f1:70:27:a9:
50:48:5f:65:d6:d7:59:37:7d:b7:97:e1:84:bc:db:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:3D:EF:10:04:2E:5B:A3:67:D3:E3:2C:37:1B:1F:BC:F1:96:74
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:c8:24:bc:e9:28:de:c1:32:85:c0:07:9f:e8:9f:28:19:
9a:3c:9f:d5:e3:8b:2d:76:41:86:af:5c:65:be:d9:49:98:e6:
07:a1:cd:0a:10:e6:52:f5:92:dc:ed:90:07:f9:03:84:64:0c:
66:6f:61:1a:d4:d0:aa:f6:3a:ec:e9:fa:ab:c7:2c:f6:72:32:
ef:bd:c7:0d:47:59:c0:bd:ec:4f:e0:46:31:55:7e:fc:bb:6e:
20:d3:5a:d0:69:24:be:23:af:4c:73:fe:6a:47:a5:f2:3d:84:
c5:74:b7:24:7d:e3:d6:dc:f8:37:51:29:ec:62:a1:d8:22:17:
31:47:b4:9e:f1:3c:d8:44:7e:b6:9b:7e:2a:a6:5d:69:bb:4f:
6f:b2:67:f1:fc:94:16:4d:8f:39:59:4f:39:2e:f1:2d:20:4f:
1f:d7:39:13:48:fd:84:bd:b6:2d:b9:1a:c1:24:17:29:f8:44:
36:ec:b2:5b:90:ca:66:c3:65:8a:e9:a6:19:0e:46:32:27:a5:
2f:d4:26:30:63:3f:ca:bb:e8:a0:d1:52:18:8b:43:44:06:09:
73:09:df:7e:27:cd:2a:07:d9:eb:ed:86:ff:7e:82:ae:0d:c1:
2f:b7:be:9f:b3:49:17:e0:4a:36:c9:ab:43:84:3c:ad:b4:d2:
45:fb:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:06:30 2026 by rpki-client