Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: oA7j9e2CAc0UwzCOjdFNCWvYB/U3uQqCttDuFmfy2RU=
Subject key identifier: A3:BA:6C:16:B3:27:AA:B0:FB:11:86:0F:C5:52:96:3C:76:CF:7E:CE
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 01A0D6BA3A2E468960D67F6D278746AA4B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1665
Signing time: Fri 25 Sep 2026 04:02:03 +0000
Manifest this update: Fri 25 Sep 2026 04:02:03 +0000
Manifest next update: Sat 26 Sep 2026 04:02:03 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: iriWeK/BwVxuGGD+rV69ASj5P0OTj1fy0UIq+msfR8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:3a:2e:46:89:60:d6:7f:6d:27:87:46:aa:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Sep 25 04:02:03 2026 GMT
Not After : Sep 26 04:02:03 2026 GMT
Subject: CN=a3ba6c16b327aab0fb11860fc552963c76cf7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:11:56:a9:1f:4e:21:a0:c8:4f:58:4b:b7:
cb:29:d1:19:70:99:ec:59:58:48:e4:26:0f:72:f3:
19:6b:9a:89:18:31:be:23:84:72:13:3e:96:80:ec:
1c:a7:7e:4f:5c:81:cc:e5:b7:41:30:10:4a:40:64:
91:13:6d:a5:5f:7e:46:8b:d2:cc:e1:7b:46:b6:b7:
02:32:50:d8:8b:3c:98:78:cf:dd:dd:88:6d:0d:1c:
a8:09:99:c8:f5:a7:45:11:f7:7b:70:3a:19:f0:fe:
f7:62:c4:b9:ef:e0:9a:ed:86:77:e7:2b:4e:1f:72:
d0:86:bc:bc:23:1e:d4:f3:5c:89:ec:1e:2b:86:d8:
2f:cb:08:94:d7:53:89:b2:0c:18:8c:e8:c8:2a:00:
31:08:af:9b:ae:a2:a8:0b:2d:50:7f:7e:c0:eb:d0:
c9:a6:0a:95:d5:c5:a9:20:0a:74:77:dc:29:bb:88:
ef:0a:c5:a9:fb:cc:d1:21:90:d6:c2:6b:ea:7a:21:
9b:e4:f9:70:56:c7:1e:21:8c:17:63:df:bc:f2:c6:
30:c9:9a:82:8c:65:4b:4f:ba:b7:79:04:94:2c:17:
8f:2f:b2:e4:f6:fa:eb:0b:82:e6:36:75:3e:06:db:
68:ff:ea:6f:92:27:2c:fa:87:33:e8:eb:fb:55:3c:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:6C:16:B3:27:AA:B0:FB:11:86:0F:C5:52:96:3C:76:CF:7E:CE
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dc:ab:84:75:99:4b:24:1b:d4:93:11:38:9a:a7:f4:d5:8f:
c6:5a:75:85:fb:84:6b:31:9a:a8:3f:62:13:3c:ef:40:da:1c:
23:3f:6d:f7:67:2d:fd:7a:41:b8:f0:e8:3e:65:95:e3:0c:92:
c7:bf:57:42:20:ab:19:10:97:dc:47:e9:a3:6d:da:c4:7e:df:
22:16:29:f1:5a:57:3a:1e:9c:69:83:bc:47:3f:09:12:f0:b4:
39:e4:fd:03:42:9d:04:f9:ab:fd:95:18:37:15:7b:9c:96:f0:
42:61:96:1a:af:b3:cb:6f:66:49:9e:b7:64:9e:54:4f:20:67:
88:b8:b0:29:44:79:a4:be:ea:a7:f8:94:b7:a6:b2:14:3c:ba:
10:45:77:b2:38:4d:df:f8:ea:51:6a:cc:e8:41:43:c4:70:70:
bf:5a:61:fe:f0:e0:3b:b8:58:a0:06:ad:18:c4:59:80:74:30:
f9:b3:6a:a4:2a:8c:89:9d:52:b6:72:e7:4b:b5:48:09:50:55:
6b:bd:94:eb:55:a9:04:52:27:ce:02:e2:23:d4:15:ac:e2:78:
ef:ae:28:5c:53:cd:f9:94:f9:37:9a:16:98:35:9c:b1:42:40:
d4:a7:b8:48:e1:8e:05:9d:5c:32:c8:14:0f:3d:99:d6:f4:f5:
ee:70:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:47:49 2026 by rpki-client