Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: ZcYaRkjNx6scu2XspYT4VqGJ1ou07xdwueoddu9VfBM=
Subject key identifier: CD:6A:B6:A3:DC:F1:68:FC:9A:E6:D7:5E:20:5C:B1:33:71:E5:02:D8
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01A1291ED2F395D73E84B7FBBE2F64E91AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 1389
Signing time: Sun 11 Oct 2026 04:00:48 +0000
Manifest this update: Sun 11 Oct 2026 04:00:48 +0000
Manifest next update: Mon 12 Oct 2026 04:00:48 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: GiIHAN7Ej9oiRb4HwIeWcq0pemt6NHAlDjFDYORT11c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:d2:f3:95:d7:3e:84:b7:fb:be:2f:64:e9:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Oct 11 04:00:48 2026 GMT
Not After : Oct 12 04:00:48 2026 GMT
Subject: CN=cd6ab6a3dcf168fc9ae6d75e205cb13371e502d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:00:9e:0a:a0:3e:da:ae:a9:d4:4e:0c:ed:
42:f8:85:1f:da:3f:d2:cc:bf:71:2b:df:47:dd:83:
f7:ee:4f:03:de:32:91:a3:28:63:80:bf:0c:21:4b:
bc:07:1c:40:67:00:bc:1d:78:12:4c:b0:1f:8c:83:
b9:7f:d0:3b:ad:99:6c:33:1d:8e:c8:43:5f:6d:97:
d2:78:6c:5b:7a:ee:4b:8d:b5:14:b3:41:a5:4e:45:
4a:98:9d:24:94:4d:cf:ff:d7:f8:42:f6:86:84:72:
5f:cf:e2:f6:e1:ea:e9:36:3c:a5:60:4e:86:a1:b7:
7a:8d:27:87:11:66:c2:00:c1:95:a5:3f:64:2c:43:
9f:c4:3d:97:83:aa:19:d5:8a:89:62:40:5a:e2:3b:
49:73:dc:96:53:31:34:20:d7:19:63:7c:d4:46:c1:
22:5a:ce:76:c1:dd:9a:9b:70:94:b6:b1:db:b7:b3:
21:75:c8:f4:fe:73:0f:a0:41:0f:ca:ac:16:70:51:
7b:dd:1e:e2:a2:a0:b9:fa:d6:53:93:6b:bf:07:28:
ff:9c:17:a1:62:05:2d:cf:9c:22:e4:9f:24:ca:36:
9d:cd:ae:3e:40:54:e5:ed:75:32:ca:4e:b9:a1:f0:
cc:4f:e5:8a:73:89:0e:37:1e:a7:92:d9:ae:02:6c:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:B6:A3:DC:F1:68:FC:9A:E6:D7:5E:20:5C:B1:33:71:E5:02:D8
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:2d:fc:28:16:d0:c5:d9:44:91:35:86:a2:5d:3b:d2:09:
a4:e0:bf:7c:0f:91:da:b8:e9:e4:68:1f:7f:ab:df:7b:b2:be:
1d:de:4a:74:0d:8b:f4:e0:44:2e:9e:49:86:54:ae:96:b7:70:
7f:e7:fb:ec:52:6b:2d:bc:89:66:9e:75:62:3c:11:b3:e3:88:
7a:db:3c:e6:01:39:ce:86:40:b7:df:96:93:38:8a:32:31:fa:
52:7c:37:be:2e:41:fb:cb:19:61:ef:de:c7:c7:2b:df:64:d1:
31:88:15:f0:c2:a2:9e:7d:41:6d:b2:bf:bb:07:8f:fd:97:83:
cc:8f:90:a0:b0:bd:f3:75:3a:bd:81:50:05:11:92:dd:9d:b0:
eb:6b:b8:60:ea:f0:61:9f:9e:8b:bc:b3:c3:dc:1b:17:9c:66:
b8:ab:a4:06:d5:21:99:7b:d3:e5:88:83:2b:a1:bd:b3:da:ad:
b9:2e:86:d6:c9:63:91:7f:f9:fe:6e:be:0f:11:f1:90:cd:1f:
77:7e:be:59:65:a2:f1:6c:b8:8e:7f:5e:6f:9f:42:35:43:7f:
a7:35:8a:a2:85:df:28:4a:5b:d2:02:8b:6d:8d:c2:57:94:e3:
5a:ee:d9:39:de:c9:08:50:01:12:f2:ea:97:a8:dc:36:70:45:
65:08:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:23:42 2026 by rpki-client