Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: c4WuacQ6wul9zaeLEc/Be3baVTErP57GzcK/BT+1LQo=
Subject key identifier: 71:5C:A7:3F:C1:AB:9A:6D:21:6F:E2:E6:B4:A9:E8:00:6B:0B:A4:EA
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01A05A442ECECA2E740C9BF6C157B21243D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 17B3
Signing time: Tue 01 Sep 2026 00:00:12 +0000
Manifest this update: Tue 01 Sep 2026 00:00:12 +0000
Manifest next update: Wed 02 Sep 2026 00:00:12 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: 2VSTBx92kG6qd0vsLlf3FipqeC/2V57ZETzS54zpO4M=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:2e:ce:ca:2e:74:0c:9b:f6:c1:57:b2:12:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Sep 1 00:00:12 2026 GMT
Not After : Sep 2 00:00:12 2026 GMT
Subject: CN=715ca73fc1ab9a6d216fe2e6b4a9e8006b0ba4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:b4:74:6e:81:bb:23:ee:3b:0e:b7:c6:73:
81:ec:23:76:84:98:e2:db:97:9f:10:ae:5e:6e:c7:
e7:9d:ba:21:4c:c6:e8:b3:e9:8b:46:c7:d4:3c:9d:
0e:04:0d:fb:29:b7:2c:ef:a5:9d:41:03:2b:0a:ef:
48:42:8d:42:8a:03:9c:2a:6e:90:0c:f2:6a:7e:ed:
e6:ce:18:a1:94:dd:2b:91:90:a7:3e:16:c1:80:18:
5a:35:a7:1c:17:69:30:ed:08:7b:b5:5c:44:ee:d4:
8b:99:81:6a:32:7b:ae:cd:6c:b0:55:78:eb:7b:44:
eb:c5:66:b5:29:f7:c6:d2:07:50:7f:46:2c:d1:0d:
1e:1a:bc:63:41:f6:ac:ce:c0:ed:32:fd:52:8f:ce:
89:50:ea:7f:fc:08:c2:61:89:46:5b:96:e0:91:65:
b0:ec:b9:bb:9e:a3:03:84:cc:cf:64:3c:20:54:7c:
3d:55:21:cb:81:d6:94:b8:ab:cd:60:75:d0:14:57:
1c:24:a6:8e:fd:70:fd:df:53:38:4e:79:78:1b:0a:
66:8e:8e:75:7d:b6:22:80:c7:43:a5:c4:6c:d6:3c:
93:69:c9:d2:ce:62:d2:d7:3e:23:de:2d:15:ef:64:
6d:92:4f:2e:44:10:a6:d0:9f:0b:6f:ea:f9:2a:3f:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5C:A7:3F:C1:AB:9A:6D:21:6F:E2:E6:B4:A9:E8:00:6B:0B:A4:EA
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:78:48:66:d8:61:f6:4a:4a:aa:5f:05:fd:a9:bd:c1:13:75:
6b:22:82:a1:7a:a8:23:92:ce:7b:40:b4:aa:60:16:d7:b2:4c:
7a:46:27:cb:4b:f6:3d:30:af:3b:35:4b:7d:a7:1a:33:fd:8f:
9a:cb:0d:6c:bb:bc:99:9c:b0:08:0d:9c:a6:bd:e0:2f:8d:b0:
db:ed:2c:0c:3e:fd:90:18:9c:a9:32:a1:57:8d:50:fc:5f:a5:
68:0b:f8:87:60:5d:5d:fd:ad:a1:a3:2a:c1:dc:b0:8c:af:d8:
0b:f4:ac:42:d6:57:18:3b:c2:14:7d:d0:3d:9a:3d:0b:62:2d:
78:29:5b:63:1c:33:06:bb:d6:d2:c4:58:0f:0d:28:b3:4d:88:
f4:33:14:c2:17:10:7f:2c:74:33:66:6a:f6:f2:20:5b:02:8d:
57:59:37:1e:6b:6d:c0:df:22:d9:88:72:18:63:cc:42:9a:86:
1a:d6:cc:15:1c:00:1b:a7:ca:0d:26:bc:52:7e:ef:bb:18:4b:
7b:fe:04:a7:d0:2a:c4:f4:ab:a7:44:c1:75:a6:21:6d:39:fe:
4e:2b:fa:0b:eb:d0:fb:7a:73:e2:85:ad:29:c9:75:17:40:05:
02:fb:be:55:6e:46:56:19:37:a2:e4:98:7c:2b:41:2a:6c:34:
6a:d7:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:54 2026 by rpki-client