Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: CpQj32VwfK0KpoqQpYBL6Wj0m2E5bvDxb+/Nsh73V4U=
Subject key identifier: BC:27:F5:5E:9C:E7:73:0E:AE:89:C1:4B:59:D0:1D:12:34:54:3A:A8
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01A06DCBE558BC8A84C9B78AF3B54416FF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 19:01:14 +0000
Manifest this update: Fri 04 Sep 2026 19:01:14 +0000
Manifest next update: Sat 05 Sep 2026 19:01:14 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: rlhmhpmW0s564q9Eo2LHQWiXz7dj8smT1i0QVgp81NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:e5:58:bc:8a:84:c9:b7:8a:f3:b5:44:16:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Sep 4 19:01:14 2026 GMT
Not After : Sep 5 19:01:14 2026 GMT
Subject: CN=bc27f55e9ce7730eae89c14b59d01d1234543aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:8c:e1:da:ce:18:03:23:ff:82:33:46:d9:
ba:9e:6a:f7:73:2e:f8:38:49:7e:b1:41:97:cd:e0:
e8:22:aa:d4:9a:55:a1:da:bc:19:e8:4b:c7:c8:2e:
0c:47:88:53:87:e4:e1:73:35:8c:d6:ec:69:e9:4b:
1c:b6:36:b3:f1:30:36:08:3f:0f:8a:4b:85:98:12:
09:bd:92:cc:94:3f:39:a2:9c:c6:1e:1b:f0:e5:79:
fb:e0:57:21:e5:42:ec:59:6d:c6:d5:2c:60:c3:c0:
96:7e:28:e6:78:b4:5c:9d:21:f8:1b:7f:80:a4:d0:
12:17:2e:b9:c6:0f:c3:ef:8f:68:9e:6b:b3:ee:8d:
18:c9:8b:c6:cf:9a:1b:76:77:89:12:cf:ab:89:63:
3f:59:2c:46:d1:fd:46:27:0f:87:e0:d2:7b:83:ca:
1d:4c:f0:92:c4:5f:57:69:40:fe:b4:14:73:32:e4:
81:12:bc:fd:12:ad:b4:2d:16:7c:39:61:cd:c0:d5:
50:c9:7e:da:57:ab:b0:65:a3:eb:6c:15:51:a4:9a:
07:39:e5:0d:8b:5a:2e:09:22:a3:7c:8b:80:79:22:
07:d7:7d:b6:fb:3f:78:71:27:6e:28:49:8a:25:5b:
80:3a:64:8d:02:0a:eb:c7:37:02:c2:e5:23:9d:26:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:27:F5:5E:9C:E7:73:0E:AE:89:C1:4B:59:D0:1D:12:34:54:3A:A8
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:26:94:f8:17:99:3a:76:82:1c:9a:ca:6f:f6:66:a5:a2:4d:
c0:48:d1:74:05:f4:e2:c1:af:d4:50:7c:4b:56:4d:4a:74:1b:
5f:5b:17:a1:00:04:85:49:a9:9c:d9:4f:e9:99:0e:28:88:91:
20:fc:d5:fa:97:a5:ef:be:46:49:21:d1:38:aa:70:af:86:1a:
cc:18:6f:44:ce:3d:9c:e2:81:96:89:00:bf:18:99:41:0b:cb:
05:c2:a9:30:b4:e0:04:ec:da:66:78:82:e0:3d:fa:8d:cd:93:
75:15:02:fa:ea:34:f9:fa:bc:e1:18:42:cb:c0:c2:fe:65:25:
6f:6d:4b:e5:06:cd:48:20:01:c9:ae:ae:57:54:a7:78:36:5c:
e0:e9:cc:02:61:83:8a:1b:34:22:8e:04:13:66:20:3f:78:c1:
36:8e:42:19:3d:06:77:d8:e9:20:9a:35:51:db:69:02:99:c7:
4c:23:bc:57:6c:89:f6:c3:47:61:4e:24:64:55:db:2c:54:01:
52:61:94:99:d3:fd:19:dc:46:69:cb:f8:3e:3f:0a:ea:fa:0f:
54:97:0b:d6:30:94:1c:2a:98:46:2a:f5:11:65:74:09:5c:9b:
e3:71:97:51:35:e7:c5:23:1d:0b:25:c6:82:16:f5:10:96:cb:
8f:44:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:36:14 2026 by rpki-client