Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: +3vloGGRGhnDaNwPT4Uo6+SjZolk9khAkNTX1W/PifM=
Subject key identifier: B1:95:7C:72:AF:78:A5:3D:C9:75:AA:09:0B:9F:A8:37:9E:16:BC:11
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01A1536521A4B718611B4232410303012266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1834
Signing time: Mon 19 Oct 2026 09:01:39 +0000
Manifest this update: Mon 19 Oct 2026 09:01:39 +0000
Manifest next update: Tue 20 Oct 2026 09:01:39 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: saWfKZlDwckA6jIqVPASgM6vKf7It7rSZ1H3/ufLaJw=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:21:a4:b7:18:61:1b:42:32:41:03:03:01:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Oct 19 09:01:39 2026 GMT
Not After : Oct 20 09:01:39 2026 GMT
Subject: CN=b1957c72af78a53dc975aa090b9fa8379e16bc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:c6:85:57:e2:ff:a5:13:7e:1c:b4:08:b0:
d5:e8:59:9f:19:18:db:87:6f:a7:f0:65:7d:72:c5:
c2:c8:3f:08:e4:95:47:ea:65:e2:c4:57:d7:34:a9:
2d:09:2f:09:89:e5:ad:f8:97:4d:2f:bd:86:99:16:
ad:60:c5:86:a5:b7:f8:c6:50:d8:a5:75:31:9a:3e:
fa:ef:76:09:32:9d:a0:10:87:14:74:c4:40:5d:73:
20:2d:6c:e1:74:df:36:b1:d4:7b:68:50:63:66:08:
75:0f:a8:5e:b9:f9:45:01:20:7a:57:5b:76:92:98:
7c:1d:79:36:92:14:d9:2d:4c:a1:54:bd:12:24:5e:
b0:ae:fd:19:83:fc:c4:b1:1f:72:b5:ec:a8:88:e4:
b2:d3:c3:3c:6d:f5:72:b8:3f:4b:3c:35:c5:11:ab:
46:8e:6f:d6:81:89:1a:17:c2:4a:bc:59:38:17:f3:
d9:42:23:b8:90:df:54:9e:61:c5:d0:35:f2:26:d7:
48:01:ff:3b:dc:74:34:90:f1:e0:86:db:fd:fa:c6:
52:5b:e2:ea:ac:0d:48:c2:6e:23:fd:ab:bf:0d:a7:
e2:d7:a7:5d:d9:fd:1a:fe:d8:2a:a2:19:85:75:81:
44:2b:67:62:52:54:39:84:88:6b:28:c3:41:36:47:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:95:7C:72:AF:78:A5:3D:C9:75:AA:09:0B:9F:A8:37:9E:16:BC:11
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:65:43:fd:22:fb:df:51:0c:9d:04:41:89:a1:4f:ff:22:
55:66:d1:37:c5:68:5c:d8:7c:bf:0a:a6:d5:06:c8:72:45:9f:
cc:4b:4b:06:dc:70:f7:ed:3c:06:5b:ca:cd:86:72:22:b9:90:
ce:38:6c:66:ff:17:fe:ee:31:01:f8:b0:10:4b:42:66:e1:7d:
50:c4:d2:ef:8c:28:e5:81:e1:2d:05:ec:9b:f7:be:88:66:a7:
e2:1c:47:e0:bf:62:d2:89:5a:ec:88:e2:17:d6:22:7c:d3:b3:
8d:d7:f9:e5:dc:a4:fe:ba:8c:9f:92:d7:ee:b7:35:5d:a4:ae:
1d:c5:c4:0c:fa:95:8f:32:c9:b8:0b:df:aa:02:62:88:68:7b:
98:9a:0b:76:1a:ff:ce:86:db:fb:dc:ce:3b:ed:b6:b9:58:73:
b0:b9:d1:7e:24:52:84:ea:c8:6a:cb:9f:62:cb:f3:cd:fe:65:
b1:c1:75:19:9a:dc:6e:1e:bc:7e:65:7b:27:f7:f1:b7:fc:a4:
e6:39:22:55:0d:6e:2b:12:08:9b:e7:d2:79:d7:36:a7:6f:3d:
2b:b8:b2:0a:f8:2c:c4:eb:97:8a:c3:a3:8a:f4:e4:05:9a:d8:
5d:4a:8c:0b:a8:29:87:b1:c5:95:3e:40:18:6b:03:8c:53:ce:
2f:44:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:27 2026 by rpki-client