Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: H0P29vgFoWeU7ZGSzBlUqwTQANZ7rRMMmvGTT5T57iA=
Subject key identifier: C0:74:71:6E:61:9F:59:C5:23:5E:78:9C:3E:09:65:20:3B:98:A7:40
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01A155535D475A33C5040EE9AC72F9FC578E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 171F
Signing time: Mon 19 Oct 2026 18:01:29 +0000
Manifest this update: Mon 19 Oct 2026 18:01:29 +0000
Manifest next update: Tue 20 Oct 2026 18:01:29 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: 17Bz7wuL/BjkKZFPCEEzUsgebPJbgurKVzUGZaSlUSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:5d:47:5a:33:c5:04:0e:e9:ac:72:f9:fc:57:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Oct 19 18:01:29 2026 GMT
Not After : Oct 20 18:01:29 2026 GMT
Subject: CN=c074716e619f59c5235e789c3e0965203b98a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:c7:c3:cc:6b:a8:b6:aa:f9:7c:b4:7d:0f:
e6:f1:c0:39:57:cc:3e:77:90:1d:04:21:a1:ae:e9:
f6:80:c9:77:3f:11:f9:87:64:f8:d1:08:f8:75:c3:
45:57:b7:c5:3b:16:91:67:1f:97:50:1e:b8:a1:bb:
51:7b:19:30:18:9e:d6:ec:a3:36:bc:67:be:54:1a:
ba:47:49:c3:21:05:16:ba:2f:91:74:56:5a:f7:b1:
c8:81:9b:7a:25:d2:85:30:8b:8a:ca:40:ec:f5:e6:
bb:18:c9:bf:a9:5d:d0:a2:1e:a0:05:04:f1:97:b1:
09:43:7b:7e:69:56:4a:f5:d7:ab:81:ca:bd:78:90:
ca:2f:7a:7d:d8:b5:7e:74:30:ba:28:2f:67:e3:56:
6f:60:c6:62:19:7f:88:61:6d:b6:a1:87:21:08:f2:
e1:6c:63:58:73:0a:45:5c:cf:7b:ec:c6:4f:68:05:
03:3b:b8:3a:57:7d:cd:38:f7:48:1d:a0:86:11:b7:
10:f1:3e:94:d3:c7:a4:c8:0c:06:72:e1:9a:b5:dd:
2f:47:15:1c:fb:9c:b8:3a:63:13:01:b0:a8:6c:8d:
f9:ab:f6:0f:07:ae:53:09:10:80:32:c8:c6:ac:28:
20:91:1d:57:b1:ff:c6:9d:40:54:62:17:12:4f:d2:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:71:6E:61:9F:59:C5:23:5E:78:9C:3E:09:65:20:3B:98:A7:40
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3a:f6:5e:f8:cf:f5:db:65:01:e5:00:b9:55:73:3e:b1:0c:
f7:a8:6f:80:95:a0:0b:ca:da:9e:03:a8:3c:c9:6d:ab:33:a6:
a8:b3:3b:a0:31:d1:f4:90:3b:12:ac:d1:5e:9c:79:54:ec:c9:
63:f8:78:ed:54:a9:50:1f:f0:80:e1:98:c3:1c:2f:68:2d:a2:
65:53:38:73:30:1c:77:3c:68:08:eb:b7:e5:52:f6:30:98:c6:
97:ec:a2:19:1d:38:55:1a:14:fe:bb:97:33:a9:d1:9e:7e:ba:
f0:9d:55:a7:b7:27:f6:4d:0b:f2:7b:92:6c:a7:05:01:a8:43:
01:8f:70:95:be:b9:f3:bc:c5:8e:d7:03:5f:9c:ce:f3:34:df:
99:c3:86:5b:2b:4c:81:5e:da:23:fd:a9:17:ab:54:16:d2:f9:
db:d1:02:58:d9:a7:df:41:d4:b5:5a:8e:72:d5:65:8d:50:16:
96:18:58:ce:e0:dd:29:17:40:ad:b5:ab:68:9e:76:59:61:06:
b8:fd:43:b2:0f:60:1a:bf:88:0c:16:f7:27:ac:72:ae:33:44:
df:cc:64:eb:0e:4c:61:12:34:ca:1a:31:a2:c6:8c:7a:54:de:
49:5c:e2:be:e9:8c:db:63:cf:74:65:68:23:8b:1b:b4:99:9e:
61:73:30:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVU11HWjPFBA7prHL5/FeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4
MDcyYTAwHhcNMjYxMDE5MTgwMTI5WhcNMjYxMDIwMTgwMTI5WjAzMTEwLwYDVQQD
EyhjMDc0NzE2ZTYxOWY1OWM1MjM1ZTc4OWMzZTA5NjUyMDNiOThhNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfHw8xrqLaq+Xy0fQ/m8cA5V8w+
d5AdBCGhrun2gMl3PxH5h2T40Qj4dcNFV7fFOxaRZx+XUB64obtRexkwGJ7W7KM2
vGe+VBq6R0nDIQUWui+RdFZa97HIgZt6JdKFMIuKykDs9ea7GMm/qV3Qoh6gBQTx
l7EJQ3t+aVZK9dergcq9eJDKL3p92LV+dDC6KC9n41ZvYMZiGX+IYW22oYchCPLh
bGNYcwpFXM977MZPaAUDO7g6V33NOPdIHaCGEbcQ8T6U08ekyAwGcuGatd0vRxUc
+5y4OmMTAbCobI35q/YPB65TCRCAMsjGrCggkR1Xsf/GnUBUYhcST9Kr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB0cW5hn1nFI154nD4JZSA7mKdAMB8GA1UdIwQY
MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct
Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0
LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTr2XvjP
9dtlAeUAuVVzPrEM96hvgJWgC8rangOoPMltqzOmqLM7oDHR9JA7EqzRXpx5VOzJ
Y/h47VSpUB/wgOGYwxwvaC2iZVM4czAcdzxoCOu35VL2MJjGl+yiGR04VRoU/ruX
M6nRnn668J1Vp7cn9k0L8nuSbKcFAahDAY9wlb6587zFjtcDX5zO8zTfmcOGWytM
gV7aI/2pF6tUFtL529ECWNmn30HUtVqOctVljVAWlhhYzuDdKRdArbWraJ52WWEG
uP1Dsg9gGr+IDBb3J6xyrjNE38xk6w5MYRI0yhoxosaMelTeSVzivumM22PPdGVo
I4sbtJmeYXMw3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 23:49:31 2026 by rpki-client