Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: /OT6pIJJe4GtyM3+ks6DQw67sFEUUjqpaQtGOMtHk2Q=
Subject key identifier: 84:C1:E4:0A:39:C3:33:91:10:2E:92:2E:8E:B1:76:F6:2A:66:F1:5A
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01A02431BF6EE141A911DE8021546A7AFC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 17CC
Signing time: Fri 21 Aug 2026 12:00:35 +0000
Manifest this update: Fri 21 Aug 2026 12:00:35 +0000
Manifest next update: Sat 22 Aug 2026 12:00:35 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: gMjWwzwX9Mt9tWAgJc/hfIvtFNIYsdvKIzrD0nkEQGw=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:31:bf:6e:e1:41:a9:11:de:80:21:54:6a:7a:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Aug 21 12:00:35 2026 GMT
Not After : Aug 22 12:00:35 2026 GMT
Subject: CN=84c1e40a39c33391102e922e8eb176f62a66f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:e2:11:0a:3a:43:b6:97:03:19:9d:11:03:
23:55:0b:02:75:89:16:91:40:5e:44:30:a9:2c:fd:
39:8c:70:a9:06:ae:02:6b:88:eb:dc:ad:45:b8:45:
46:43:1f:59:81:fa:05:c4:a4:85:b4:d0:a3:7e:73:
c9:f9:e4:c5:f9:12:24:a9:56:d3:7a:4e:e6:16:4e:
1b:c5:e7:56:e1:3b:66:d0:37:fa:f6:30:20:8c:c3:
e4:49:c2:09:a2:cd:7d:e1:f7:5d:02:07:44:ef:95:
a8:26:cb:58:4b:6e:cc:ca:b1:04:e3:a3:df:8a:ee:
f2:31:09:ad:f8:c7:84:1d:a5:d4:00:57:95:70:b8:
13:ce:e4:1a:d3:3a:8c:d9:fc:96:48:9d:8f:53:fd:
82:38:23:1d:1f:63:8e:45:12:3d:b2:c2:b1:c2:a1:
0b:94:69:98:64:79:95:c0:a3:49:c3:a3:88:13:db:
a4:d4:6d:e0:66:d6:f0:b8:48:64:8a:ef:16:59:6a:
72:a6:88:63:d2:9c:eb:b4:fb:7f:10:e0:a3:3b:14:
c1:3e:84:81:ac:ec:87:26:56:c5:3c:03:4d:f8:57:
7e:e8:99:ea:67:f6:fe:1c:fd:62:20:c8:02:20:c2:
fe:73:4a:d6:b0:d0:ef:7b:c2:05:7a:6a:87:44:98:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:E4:0A:39:C3:33:91:10:2E:92:2E:8E:B1:76:F6:2A:66:F1:5A
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ec:fc:22:ae:47:a6:47:f9:b7:d5:fb:cd:fd:3a:06:66:f1:
1b:9e:45:8f:40:67:0c:40:aa:ca:fa:15:7a:28:0d:81:f4:ba:
9a:d1:e1:e0:ee:f9:35:8b:6a:c7:65:b2:07:e9:d0:1e:ec:c6:
ab:9a:40:21:bb:84:ba:d4:f7:51:4a:ea:ec:ad:11:16:bc:8f:
52:66:c9:dc:8a:18:45:60:f1:4a:27:42:91:aa:a4:77:42:d0:
6b:1b:bd:50:b0:83:52:da:49:23:4a:1d:91:b1:3f:63:d7:dd:
76:40:ab:f2:76:cf:3a:69:6f:ea:1e:95:42:f5:bb:65:ce:8a:
d7:a2:d6:d3:e1:39:a0:99:97:3a:a3:2d:52:9a:2e:85:66:73:
f9:3c:08:11:c8:50:ec:ac:c3:15:3a:6f:d4:32:a3:08:31:62:
4a:de:ed:29:d9:2b:aa:f6:9a:44:bc:41:1d:e3:f0:23:91:58:
7a:11:9b:54:b5:21:58:11:c7:6b:d5:68:09:80:29:07:ad:97:
67:c9:d6:dc:8b:cf:8a:fa:60:b2:15:9f:28:e7:6d:cc:da:b8:
32:77:8f:f1:ac:4d:9b:95:4d:81:b1:9d:0c:7b:e9:7e:89:84:
c1:f0:1e:75:ff:e4:63:80:85:66:03:80:d6:cd:64:13:d5:76:
3f:47:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:34:07 2026 by rpki-client