Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: kekzSwi0HLdtSmtGlfuEILmDc7EbtWNgUkmU7qB695s=
Subject key identifier: 63:5C:41:C3:FC:B3:1E:C7:18:95:C5:64:76:DD:4B:C9:58:54:49:E3
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 01A103C9487EF218A54AB174B2675CD50FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 0443
Signing time: Sat 03 Oct 2026 22:01:25 +0000
Manifest this update: Sat 03 Oct 2026 22:01:25 +0000
Manifest next update: Sun 04 Oct 2026 22:01:25 +0000
Files and hashes: 1: AFumXuOXKbFW_VkGOp5C3uN9vdM.roa (hash: aE6C4dtIcbKwEv5eXKa14vptksNPYJV0xnZklbhvP6E=)
2: Y4PPIpkii_K_B3es2z2wg-o0K4g.asa (hash: E0zhRt7/fWPWPotvek7QQ9QAuuv2LHcZSkRznjzV2UQ=)
3: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: 6Tw90O2FHSFIV4kWmxJzCEU61CvsM6Hm3nv2igb1Qeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:48:7e:f2:18:a5:4a:b1:74:b2:67:5c:d5:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Oct 3 22:01:25 2026 GMT
Not After : Oct 4 22:01:25 2026 GMT
Subject: CN=635c41c3fcb31ec71895c56476dd4bc9585449e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:d6:8d:81:a8:4e:33:7c:60:a0:d8:38:21:
85:7c:4b:bd:de:06:1b:90:e6:bb:19:e1:71:84:f8:
3c:c2:d7:64:67:3e:c6:79:19:89:5a:46:a5:1b:18:
86:7b:09:f3:ec:b4:83:87:24:68:a1:15:a3:18:30:
02:d5:ec:8c:6d:15:e0:ec:78:8c:31:ed:6b:63:1a:
08:d4:92:dd:cd:20:61:10:c2:65:1e:ed:14:7f:f2:
a4:56:60:f2:f1:c9:fa:17:e1:87:ad:b8:6c:e4:80:
de:83:10:bd:c2:b2:75:fc:70:f1:77:cc:f4:ae:9d:
96:27:60:45:b9:29:6e:af:ee:12:20:ed:b0:9e:da:
00:fa:1f:f3:f4:e6:7b:b6:f7:c0:62:fc:3e:6d:31:
82:79:c2:8f:f9:06:d0:99:b9:7f:68:6d:1e:0e:a6:
3b:ae:14:79:c7:c2:91:48:ad:36:b6:ce:45:7c:46:
5a:98:1a:dc:ad:b2:21:b8:da:4f:25:97:67:d9:93:
d4:72:40:f3:da:20:97:0d:3b:98:b7:cc:14:19:d8:
ed:9d:10:ea:53:31:ad:f1:b3:8e:e5:6b:05:cd:0b:
b2:2f:72:f3:f3:73:5c:5d:72:30:f0:58:ee:aa:4b:
f3:74:6e:51:3a:26:67:12:4b:4e:2c:95:9a:0b:eb:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5C:41:C3:FC:B3:1E:C7:18:95:C5:64:76:DD:4B:C9:58:54:49:E3
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:38:e5:6d:c1:99:64:c9:89:5c:e9:8a:7c:82:8f:c8:65:
a3:e2:49:9e:f8:4d:79:49:a4:19:e8:de:7d:d1:48:04:21:11:
f2:c4:ce:90:35:82:e3:d8:d2:71:a5:57:13:a5:97:c3:00:52:
e7:78:ec:b1:e7:83:ac:b3:3b:eb:f0:5e:d3:47:0b:3d:60:08:
4f:db:10:b6:02:6b:67:7b:1e:22:9c:92:05:e8:95:3d:35:7f:
df:3f:71:e2:9c:dc:72:db:fb:61:46:1a:48:88:5d:ca:e2:4f:
2f:09:26:fb:ed:c4:0c:d2:40:22:a2:f2:79:d3:ed:33:f4:0a:
31:05:ec:f4:80:31:50:89:cf:0a:45:28:19:d4:b1:aa:d0:15:
4a:bc:cd:6e:e1:e0:38:ee:ac:7c:ee:41:54:3d:df:a9:3f:4e:
04:1f:f3:ce:cc:eb:6d:54:f1:f1:ef:c6:f1:ea:80:08:64:41:
b9:88:6e:5c:a3:89:db:05:c8:2b:77:74:f8:23:35:c2:35:31:
9f:3f:5c:92:18:42:c7:a0:0b:c7:77:1b:94:ea:c3:1c:08:2c:
6f:fe:92:72:12:ba:00:6c:12:41:c1:1e:a2:c2:99:6c:8f:85:
09:34:4d:4e:e7:05:e2:09:81:23:6a:a7:62:b2:42:e7:c8:72:
4d:00:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:35:02 2026 by rpki-client