Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: n6WELmLXOJT7uk8SJGUCCU7dxAdCkf024tP35Q89bbs=
Subject key identifier: E5:D6:09:56:B2:15:64:6C:C2:80:D2:5E:1A:03:F1:AE:36:B9:CA:F3
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01A12730D4D6423AA162B2FDE51B64D128C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 1388
Signing time: Sat 10 Oct 2026 19:01:13 +0000
Manifest this update: Sat 10 Oct 2026 19:01:13 +0000
Manifest next update: Sun 11 Oct 2026 19:01:13 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: JWG+RjAjovnLHnQu1msIoPYeM+EC+EJTlKga25uunfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:d4:d6:42:3a:a1:62:b2:fd:e5:1b:64:d1:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Oct 10 19:01:13 2026 GMT
Not After : Oct 11 19:01:13 2026 GMT
Subject: CN=e5d60956b215646cc280d25e1a03f1ae36b9caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1e:bc:94:b3:f1:8c:90:bc:2c:89:0c:61:15:
7a:47:e5:a3:6d:2a:b1:1a:bb:f7:5e:64:c0:24:84:
75:89:37:b8:46:74:65:ce:d0:42:ca:75:da:c5:b7:
c8:ea:13:55:bf:ff:d8:78:77:ea:a7:26:83:95:db:
f3:07:9c:91:d0:e8:dc:6d:6a:71:c6:0c:be:9a:73:
df:1d:80:7d:63:22:ac:20:90:99:bd:c1:44:71:07:
43:dc:61:a7:18:0b:b3:f2:b6:c7:eb:25:76:27:d3:
89:d1:86:52:4a:1d:07:bf:f8:c0:50:94:d7:ff:5a:
db:39:90:af:8c:bc:ba:0c:54:5e:04:b5:71:11:a2:
5b:d5:db:3f:58:6b:d1:46:25:95:ae:87:da:41:0d:
23:c6:8d:46:38:0b:0e:39:4d:fb:7a:1b:d0:b4:4f:
3c:6c:cc:66:bb:25:c8:bb:2e:1f:16:69:92:57:96:
8d:43:76:3d:8e:f9:70:45:23:cc:18:1d:64:6b:63:
ca:17:58:fe:36:d8:b6:74:61:0a:1d:af:ab:a9:7b:
03:6e:88:fe:de:d9:e6:14:85:ab:38:83:9a:5a:70:
0c:b1:e7:92:4f:11:08:18:f2:39:27:89:8c:f3:e9:
b1:9d:a2:c5:61:1e:a6:4e:bc:44:28:51:a1:9f:0a:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D6:09:56:B2:15:64:6C:C2:80:D2:5E:1A:03:F1:AE:36:B9:CA:F3
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:f4:13:da:41:94:79:e8:83:20:eb:74:8f:be:e1:48:5e:
0f:c2:ef:55:6a:17:4d:ba:84:59:9e:29:55:2d:26:89:cf:22:
3c:c1:cb:7e:f0:d0:1e:d0:7d:5f:3a:65:00:f1:07:d3:bc:de:
6f:d8:e8:ff:51:5a:96:3c:33:ab:f9:8e:ae:bc:a6:d3:f3:41:
3b:34:ac:95:be:20:19:cd:b9:8d:a9:65:db:3f:22:a7:e5:d4:
cf:5d:2f:3d:e5:0b:41:e4:88:19:f6:a6:1d:12:ad:45:fc:a6:
c8:bf:8c:90:e7:7f:27:2d:1b:35:10:58:b3:01:74:61:a6:bf:
cb:cc:80:38:78:87:d6:31:25:65:37:b7:8c:4c:cd:26:e5:6c:
fb:ac:7a:5f:62:24:ab:7f:4f:25:c3:10:3d:a6:9c:f4:87:e4:
c5:db:64:02:db:64:bf:cb:03:4e:7b:ac:a0:4a:85:6e:fc:30:
27:e5:fb:07:c5:09:e4:88:9f:31:05:6a:08:1c:8a:1d:59:ed:
ae:eb:e2:26:d9:e4:e5:70:7e:ba:20:2b:b6:04:41:d8:47:3f:
8a:d0:4a:61:3b:d3:7a:48:b7:5d:88:78:cd:c2:7e:4c:3b:25:
b1:8c:11:72:2f:b4:75:b2:af:f5:44:49:a7:2e:31:6b:48:93:
b0:b7:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:38 2026 by rpki-client