Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: rn8SVQUA9kqw9wNOZKNtFw4YNL+3rpXcrEk40mpS7AI=
Subject key identifier: 05:45:20:77:13:8D:36:16:30:F1:9B:50:5E:EA:D8:6B:EA:97:39:3A
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 01A0F6B2AFE8FE5625CB2DE48F7A70A83787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 09:01:40 +0000
Manifest this update: Thu 01 Oct 2026 09:01:40 +0000
Manifest next update: Fri 02 Oct 2026 09:01:40 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: UkJSUOYX4IpmAUVmPf2gqu8rbjCqapOh8w/swZ9QWUI=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:af:e8:fe:56:25:cb:2d:e4:8f:7a:70:a8:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Oct 1 09:01:40 2026 GMT
Not After : Oct 2 09:01:40 2026 GMT
Subject: CN=05452077138d361630f19b505eead86bea97393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:09:45:71:e3:56:fa:f1:d8:5d:95:bd:28:
51:6c:53:67:ca:41:30:49:08:b7:57:8e:3c:12:61:
f8:d5:2b:38:70:bf:43:35:b1:2b:0f:d0:2a:16:95:
60:71:d8:d3:45:85:a6:8b:7a:fe:74:e5:3a:5a:1b:
54:12:c8:7b:13:f3:9d:5b:97:70:09:d0:5c:3f:cc:
78:18:3f:fd:d0:0c:a3:9a:4e:0e:9b:bb:7b:bf:9d:
fc:a2:94:03:15:9a:06:ab:ef:bb:55:7f:60:85:9b:
2c:66:50:3d:fb:ea:8e:41:13:de:4d:67:a6:c5:dc:
5a:f3:88:d3:9c:ee:02:c0:fb:f9:b8:da:c8:7f:21:
15:ee:44:dc:ee:c2:5e:e5:99:77:77:90:d1:89:68:
98:84:c1:25:2c:bc:28:73:31:f9:cc:3a:72:4f:84:
22:4a:87:51:56:d5:ec:ed:98:8b:6c:63:cf:88:5a:
b0:75:52:06:cd:64:87:cd:a0:1f:f9:04:3a:6c:27:
78:16:86:fb:92:0d:2d:d7:93:73:7f:d6:09:5e:6c:
f4:7a:db:74:3e:50:4b:87:8b:b2:59:79:88:ee:a6:
92:c4:c1:2d:ee:4e:97:7c:ab:5c:32:68:8a:d4:a7:
d1:11:7f:47:e8:e1:52:b0:98:ff:5f:d5:75:86:15:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:20:77:13:8D:36:16:30:F1:9B:50:5E:EA:D8:6B:EA:97:39:3A
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:a6:b5:ba:3a:12:c2:48:36:cd:9f:8c:31:83:f0:5c:d7:
c2:5d:c0:8f:a2:c5:e0:8b:67:d7:b3:11:ef:f8:d2:e6:9a:bd:
30:61:2d:ac:e7:79:12:92:58:4f:95:a1:6e:27:67:ac:72:af:
91:77:4f:24:cc:11:e9:49:c1:f5:af:91:76:a4:6a:98:21:b2:
9b:7c:72:e4:0c:cd:93:7a:04:eb:b3:05:e0:be:dd:20:6e:26:
0e:09:a7:f5:01:f2:ed:40:12:da:8e:75:02:99:13:e9:07:30:
fc:7c:29:7f:f3:ba:7a:8b:18:ad:87:22:26:dc:f1:4c:3d:a3:
b1:bf:b7:d6:f0:d6:38:63:28:56:e8:91:e1:11:34:94:78:af:
88:91:c4:b3:89:26:9e:ac:e2:77:88:0c:4d:57:f9:1b:7e:cc:
2e:98:b5:65:42:19:8b:2a:1a:8a:99:c3:be:dc:7f:c7:a5:c8:
1f:75:16:71:7f:10:88:b3:25:36:d9:bc:75:79:0b:b8:65:3d:
07:8b:22:aa:e5:c6:5c:9a:f5:41:3f:85:c6:bf:e5:37:f0:9e:
3c:41:e8:b1:62:28:b7:05:4d:c3:97:44:f3:c4:69:ff:5a:57:
4d:b9:88:54:9c:ed:0b:17:aa:ac:0e:46:45:6a:a0:23:77:17:
8e:78:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:19:47 2026 by rpki-client