Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: wKkZ4PFmFnOHHhaEGYEZVUA8fG8I5+4DxfmUOvvItrA=
Subject key identifier: 33:23:84:AC:96:75:15:6C:A3:21:BF:CD:20:A6:0D:12:53:20:84:A9
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 01A03E294835EB0440548593DD33E0E72C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 13:01:27 +0000
Manifest this update: Wed 26 Aug 2026 13:01:27 +0000
Manifest next update: Thu 27 Aug 2026 13:01:27 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: Jzcg8YVbrZbR5OAQzNF7vHNdPfHWC0XGtOu04SE8vfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:29:48:35:eb:04:40:54:85:93:dd:33:e0:e7:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Aug 26 13:01:27 2026 GMT
Not After : Aug 27 13:01:27 2026 GMT
Subject: CN=332384ac9675156ca321bfcd20a60d12532084a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:78:82:8a:1a:a9:ea:cd:84:e3:a1:bc:7d:
ee:84:11:99:c2:94:e9:ad:b7:93:4f:5f:d0:4c:6f:
6c:a4:14:5f:a5:f7:ea:1b:34:03:8b:7a:55:c8:3e:
7d:18:0c:88:d7:ea:51:fb:a4:b6:bf:fd:dd:c5:41:
30:e2:21:12:55:e7:28:8e:f0:fe:2d:30:45:b5:72:
cf:62:88:2c:b7:5a:79:3e:62:7a:41:da:2d:83:a5:
6d:c7:fe:81:25:fe:d4:40:e7:16:64:25:41:c0:39:
31:85:0d:c3:01:f8:ab:89:00:5c:3c:c7:42:68:26:
0a:17:7d:46:60:88:36:c3:32:87:98:df:77:bc:ae:
39:8e:05:32:a6:0b:4b:2e:fc:95:6a:ef:4b:91:1c:
d1:6d:25:34:1f:02:27:d0:04:c7:e8:3a:03:64:8d:
22:6a:58:b8:f5:bb:c5:b6:a7:58:4e:70:e6:e9:a9:
c6:74:6d:ea:61:b6:8a:44:37:c8:f0:ca:14:ad:23:
51:17:34:dd:af:12:10:04:c7:99:1d:8b:14:a0:f5:
ec:d5:e5:91:c6:67:0b:c1:3a:14:74:3c:fa:87:b6:
73:27:5b:72:1e:0a:6a:d5:d1:81:72:fa:0c:7d:fe:
c4:68:9f:68:13:a2:a2:20:f2:1c:f1:ef:44:90:8e:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:84:AC:96:75:15:6C:A3:21:BF:CD:20:A6:0D:12:53:20:84:A9
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b3:8b:c4:66:32:71:8a:88:bf:8e:fb:aa:81:3b:98:07:d7:
f2:ac:ed:fd:9d:24:02:dc:be:cf:3f:6f:7f:da:71:39:f8:95:
35:96:f9:07:68:ef:d0:4a:bc:8f:6d:a3:6a:8d:45:75:7c:e1:
91:96:59:a7:7e:c7:8d:7e:3e:c3:64:15:62:66:3a:47:4f:9d:
9d:ad:90:9f:f5:43:3d:eb:55:75:6e:80:63:5d:4b:d0:60:b9:
2e:84:32:b1:d2:40:70:11:95:4c:f8:1e:49:cd:db:8e:61:c5:
2f:f4:c4:26:55:fd:d5:49:d5:a9:4a:36:14:bf:ab:68:cf:7c:
38:e7:ed:96:1e:b1:97:cc:7a:1c:13:11:8c:ea:86:91:da:9b:
4c:20:a1:1d:3d:15:35:e3:73:76:28:4c:4e:7d:a1:8c:8d:71:
08:d9:ef:8d:09:0c:62:ad:4e:eb:27:2f:ae:1e:c9:79:9f:47:
2d:f8:87:18:6b:c7:6a:7a:cc:88:1a:aa:43:28:bc:2c:32:5f:
5e:88:8b:c0:df:13:aa:4e:ef:c9:2b:f0:49:29:46:7d:da:be:
a5:c2:6b:6d:8e:59:ee:30:36:e0:fa:a4:05:38:4c:53:3f:da:
92:83:75:1c:f4:17:0e:bc:1d:6d:08:45:35:dd:f8:81:54:ae:
7f:db:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:56 2026 by rpki-client