
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: iQUSNSos8694iOtdSAHZfRrfw8zA0k3Z0a65NlZbMo4=
Subject key identifier: 02:94:2A:27:61:22:9D:16:F7:83:44:81:4A:69:9F:FC:9E:64:1C:91
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 01A0D0800CF0CD04984F6A451A3220D508BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 07D9
Signing time: Wed 23 Sep 2026 23:00:47 +0000
Manifest this update: Wed 23 Sep 2026 23:00:47 +0000
Manifest next update: Thu 24 Sep 2026 23:00:47 +0000
Files and hashes: 1: L2JBwXn0_M5VePo6q3NCFb8xLnM.roa (hash: UZ+pSOfmFCdt9QWA2qepdtq6OMmO8+hZ5Y2AO5lO+NE=)
2: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: T+T/hN0UTIrMPojJx/AXbZuyEf7X0m1WhzMphoMWErM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:0c:f0:cd:04:98:4f:6a:45:1a:32:20:d5:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Sep 23 23:00:47 2026 GMT
Not After : Sep 24 23:00:47 2026 GMT
Subject: CN=02942a2761229d16f78344814a699ffc9e641c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:9d:b1:f9:e0:67:dd:76:ff:35:6d:1b:ac:
12:21:7d:e8:80:f9:9e:9c:64:60:fe:9c:c8:8c:7b:
57:3d:2b:d7:61:2b:12:65:da:65:e2:fc:92:d9:5f:
0f:86:22:4d:15:98:22:08:19:05:78:08:de:4c:f4:
55:97:85:59:59:26:92:e9:97:97:2a:d5:12:d1:0d:
5f:3f:c6:81:81:ab:33:c4:ee:ae:19:4a:92:27:4b:
d3:2d:05:d7:3f:60:0b:18:fc:c3:46:14:a4:7c:07:
cb:f1:5e:b2:4d:d2:07:50:6f:75:0c:c6:e1:c6:ce:
17:f6:1d:0f:0c:1a:f1:72:10:f8:ed:b9:8c:01:5c:
4c:d0:6c:45:ec:85:ed:94:fc:52:f2:46:d8:61:f2:
b7:9a:b6:08:73:ed:52:b7:ff:26:c1:ca:f7:3d:a6:
f7:a0:2e:6f:7b:9a:d3:5f:9b:80:f0:f4:30:1b:60:
d0:d2:a7:5d:73:bc:a5:68:15:3b:ef:ea:fc:88:9e:
20:b3:66:ad:93:d9:49:07:d1:44:45:4c:b1:91:6a:
47:72:05:ea:b7:4d:62:da:81:76:b9:11:f1:ff:61:
bf:71:07:f8:3d:b2:07:3e:56:15:0c:34:8f:4c:ed:
e4:35:df:c8:bd:8e:a0:b8:6b:28:18:8e:83:b3:c2:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:2A:27:61:22:9D:16:F7:83:44:81:4A:69:9F:FC:9E:64:1C:91
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:55:7f:d1:c0:88:bc:96:e8:ee:32:86:f6:68:3b:9b:91:
29:8e:73:19:f6:53:84:28:c8:7b:4a:ed:eb:cd:33:fb:b8:88:
8d:d5:d8:9e:b6:01:a7:bb:50:f9:c3:98:9b:c7:fe:8a:48:a6:
63:1a:cc:a9:3b:b2:79:2c:7c:82:ef:95:6c:d1:c8:76:ef:5f:
ce:d3:28:c5:d2:eb:44:84:c8:a0:9c:e7:03:55:75:8a:d7:51:
73:b0:1b:ad:0d:69:56:37:dc:d0:df:4b:9c:f1:d9:76:fa:af:
43:1d:a9:f5:a8:68:2c:b4:fb:53:d4:4e:32:a0:b0:2a:87:c3:
ae:8f:bf:ad:8e:a3:54:35:be:18:4b:b8:10:e4:c4:3b:66:24:
e4:51:d0:76:cd:d4:d3:ff:a8:08:fe:01:f4:49:62:f7:69:de:
90:03:00:5a:27:d5:06:0a:18:f1:d4:d9:bf:72:8a:d1:82:0a:
32:b5:8a:62:3b:14:2a:b2:80:e7:35:19:93:df:e9:4e:b0:fb:
11:d9:c2:0a:07:28:d5:e8:ed:22:cd:e5:0c:1f:5b:b3:8c:24:
9f:c8:be:85:c7:bc:44:bb:99:c7:8e:2e:08:38:e9:0c:99:5c:
56:e5:ad:43:1d:12:4d:55:70:46:37:28:b6:53:d4:fa:67:5a:
aa:ef:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:30 2026 by rpki-client