Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier: kZIxhwYMrgVQ9Aom+1itvIgLpzSzhcnytoPVyS4QOxs=
Subject key identifier: D0:C0:AF:FF:62:CA:86:41:33:12:A8:C1:98:50:BE:D7:18:C5:9C:31
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01A0D2DDF5C1BF3C82F2AA0DED9292988C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number: 1A8D
Signing time: Thu 24 Sep 2026 10:02:36 +0000
Manifest this update: Thu 24 Sep 2026 10:02:36 +0000
Manifest next update: Fri 25 Sep 2026 10:02:36 +0000
Files and hashes: 1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
2: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
3: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: c1AvZU0Bunr6QYhy452DZCF9wP8QDVvWBxXa3WCWA/4=)
4: rcD1dohMBrT0sIUfDYqyK5wqUuA.roa (hash: LHJxJ8uhzAWPnNINZvl3itiKDSVQRmXMQ+MPHPp9DtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:f5:c1:bf:3c:82:f2:aa:0d:ed:92:92:98:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Sep 24 10:02:36 2026 GMT
Not After : Sep 25 10:02:36 2026 GMT
Subject: CN=d0c0afff62ca86413312a8c19850bed718c59c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:ab:6b:67:32:84:c0:4e:d9:d4:39:01:4a:
60:66:d5:8c:d7:44:d7:e8:a7:38:f8:38:2a:34:fa:
f7:40:cd:0d:d3:97:1d:37:70:ee:e2:7b:db:09:dd:
cc:41:55:d9:3e:02:aa:2a:c1:9a:da:3a:72:0a:d4:
9f:12:5b:16:0a:89:cd:4d:48:62:09:bd:71:ed:90:
a7:c5:7f:a6:e2:bd:2b:43:85:af:f2:7c:73:d4:f6:
bd:f2:9d:15:21:e1:8e:67:56:fd:47:d4:60:4e:dc:
d5:61:4d:52:7f:90:cf:ed:90:9e:f5:8f:49:e7:72:
b3:1a:db:be:05:dc:ba:71:21:3e:92:6a:f8:e8:57:
b4:aa:5b:ae:e2:72:5c:db:76:42:f0:44:48:a8:53:
9d:82:e5:b8:09:af:2e:b0:25:2c:d1:7e:8d:91:8e:
2f:7a:82:ec:a2:e8:e3:f7:d3:26:25:bb:22:ad:62:
c1:5c:45:c0:ff:0d:2f:3f:07:ec:ab:24:76:68:d4:
d9:27:37:ff:ce:2e:9f:1c:b6:4f:05:1b:10:2f:3c:
3a:cd:79:6d:87:70:f9:cd:6d:e2:2b:f4:28:d4:f5:
cb:a0:22:b0:09:b4:0c:f0:5c:5f:8c:2a:6e:48:84:
42:ef:77:08:03:83:ea:94:6d:99:81:39:28:78:65:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:AF:FF:62:CA:86:41:33:12:A8:C1:98:50:BE:D7:18:C5:9C:31
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:c2:1f:10:dc:8e:a2:c5:cb:cf:b5:79:dd:e6:d0:28:fe:
03:f8:1f:b0:78:ae:57:64:59:c7:ed:c2:b1:db:e2:3b:f3:84:
9c:dd:be:f2:9f:df:cf:0f:6b:b2:ab:27:d2:00:9f:ff:ce:db:
2b:ff:5b:5c:ce:56:31:f6:0f:d9:0c:61:5a:70:6b:87:f3:c2:
93:65:2f:3e:27:00:9f:24:77:b6:cd:95:18:7d:5a:4a:28:e9:
56:a4:c3:ea:25:5b:d3:5f:b9:17:fa:e4:ec:f8:e2:0b:41:7a:
91:02:66:6c:f5:81:19:48:4c:fe:fb:74:ee:dd:5e:20:ac:e7:
50:10:55:d2:b0:2b:3d:ed:eb:b9:22:a8:7c:ac:6f:09:d9:7b:
bb:bb:ac:e5:ec:2a:85:0d:15:75:f6:61:e5:2c:a8:d5:7d:ca:
0f:e2:87:71:45:5c:f2:d8:98:8e:5f:fe:46:d6:d9:4d:eb:81:
41:bc:cc:51:8e:f7:a1:62:a2:c3:72:6c:4e:98:fd:3f:72:8f:
9b:c5:8e:93:b5:c1:16:52:ef:23:90:a4:1d:a1:e9:a0:47:af:
03:00:e1:2a:ba:51:9f:ea:db:8b:a7:77:af:47:52:bb:9d:0b:
13:bb:bc:4f:13:8d:a0:db:b7:15:06:c0:06:23:d5:67:7d:67:
0f:36:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:41 2026 by rpki-client