Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: VKyi4cZ9hMBZEk6WeQjU9HOqlnqHcNXQMXzUhtb6w5w=
Subject key identifier: F6:6F:18:DE:D5:29:C3:FA:6C:64:5C:F7:E8:5C:E3:58:62:3C:50:5F
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01A020C3253626B35DA19E691C7CC20ACC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 08DF
Signing time: Thu 20 Aug 2026 20:00:54 +0000
Manifest this update: Thu 20 Aug 2026 20:00:54 +0000
Manifest next update: Fri 21 Aug 2026 20:00:54 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: jNaIMMJC9l5fAeHqggN9kPgeelQ93RVxnhtlc98Gfls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:25:36:26:b3:5d:a1:9e:69:1c:7c:c2:0a:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Aug 20 20:00:54 2026 GMT
Not After : Aug 21 20:00:54 2026 GMT
Subject: CN=f66f18ded529c3fa6c645cf7e85ce358623c505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:bf:e9:38:f2:40:e2:01:a2:7f:87:c5:06:
74:12:3a:6b:d1:5c:2b:e9:81:11:36:8f:ab:31:5e:
b3:4b:e2:b8:fd:97:06:9b:b0:e4:c4:af:5e:4b:5a:
f2:ce:2e:69:89:53:62:29:f2:1d:1c:ea:9f:34:80:
74:06:65:3c:7c:16:93:99:06:d1:e2:71:3e:dc:41:
e9:02:c1:98:65:47:40:15:74:db:04:51:94:f7:eb:
90:ae:5b:c0:41:d6:54:a5:2b:6c:f6:50:bd:73:6f:
4b:32:15:5d:c0:37:f2:d7:65:49:c7:3d:5a:97:14:
18:56:ec:2c:04:69:16:82:6b:86:d0:d4:b9:fe:75:
94:79:b5:31:3d:ee:e0:fb:01:c0:65:cf:5c:4b:33:
13:69:79:72:79:86:ff:47:9b:93:a5:6b:f8:a9:4a:
fd:39:8c:0d:90:41:92:3d:5d:a9:9b:3a:fb:8d:5d:
b1:cd:4d:39:41:3f:ac:5a:52:34:87:62:70:3e:b3:
6f:bf:10:fe:fa:16:f2:05:dd:d4:7c:93:b6:5c:b1:
ab:0d:7c:84:e8:69:6f:9c:be:79:90:26:b6:ec:66:
fd:e2:d6:c9:b3:90:65:c9:a9:56:2c:b3:fb:0d:be:
7c:fe:df:af:c2:99:27:00:d8:aa:17:14:ab:22:fc:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6F:18:DE:D5:29:C3:FA:6C:64:5C:F7:E8:5C:E3:58:62:3C:50:5F
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:92:3b:12:22:9e:d9:e1:8c:6e:b6:24:14:18:9c:0b:67:e5:
06:e2:51:3d:6e:13:71:ef:3d:78:93:f5:d0:9f:86:3f:7f:e3:
aa:2b:5a:f6:26:d0:11:74:46:74:ef:91:f8:65:21:e0:20:25:
6e:3c:38:05:9f:31:23:70:f4:5a:78:06:dd:f5:2d:1d:fb:17:
8b:0c:90:0b:94:7c:1c:fd:05:ac:b9:37:02:c8:58:5a:f8:77:
14:f2:ed:f2:da:b7:90:76:58:8b:91:63:a9:e2:e2:1d:e6:69:
b1:6a:0e:87:c6:bf:ae:58:b0:d3:86:89:0a:b1:61:85:ca:99:
4e:ca:95:f8:15:5c:45:74:35:9b:0a:34:f7:b7:71:74:79:aa:
69:af:b0:29:7b:05:4a:4b:12:80:20:82:8a:6c:53:ba:39:8c:
24:f0:f0:c0:29:47:35:39:3d:23:69:9c:f2:4b:d8:7c:3e:a0:
62:96:a8:fe:82:69:ca:66:5f:56:08:e4:34:52:47:7b:24:01:
ca:a0:3f:5d:fb:9e:35:fb:ad:99:20:89:e5:21:45:6a:ba:99:
37:c5:61:7e:45:ee:67:35:40:9a:58:36:69:19:d6:5a:ef:a0:
f8:8d:8c:c1:2f:27:52:1d:9b:ad:dc:d8:51:41:89:dd:f8:4a:
c9:88:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:05 2026 by rpki-client