Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: XyfYeq2gLKLfZpCfEPfnmLdpCdOmCHJAn2Fgq5ZISIM=
Subject key identifier: D9:31:B3:8A:1C:B2:A5:46:9B:50:1C:8C:78:56:EB:EC:9E:40:E2:A4
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01A130A2AB2A0BC1919E6B7FCBE22E4DEFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1857
Signing time: Mon 12 Oct 2026 15:02:09 +0000
Manifest this update: Mon 12 Oct 2026 15:02:09 +0000
Manifest next update: Tue 13 Oct 2026 15:02:09 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: P0MknqQUeV10nVP+S1+TImbWKBscgeDuWuFk2Idu1Gw=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:ab:2a:0b:c1:91:9e:6b:7f:cb:e2:2e:4d:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Oct 12 15:02:09 2026 GMT
Not After : Oct 13 15:02:09 2026 GMT
Subject: CN=d931b38a1cb2a5469b501c8c7856ebec9e40e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:ff:db:b7:a0:65:08:46:7c:c1:8a:7b:98:
d8:70:2a:46:d7:aa:0e:fd:d6:76:c8:37:4c:b7:29:
51:e8:01:f2:a3:53:9a:93:10:ba:bb:3e:66:ff:7a:
44:15:4b:da:73:81:7e:d0:c2:9e:28:cd:cb:0d:57:
9f:81:2e:47:ae:49:18:ba:10:bb:69:81:f8:28:39:
9a:d5:0f:c3:53:8b:ae:4a:73:2e:ec:10:df:0f:5f:
ac:da:90:cd:f6:3f:a2:67:6a:6e:4a:0c:81:09:60:
e3:00:6f:56:45:2b:fc:ab:99:79:9d:96:30:01:ee:
12:32:b5:ef:17:df:1e:6a:20:d6:09:0f:db:cb:ce:
c4:ec:a4:97:6d:d4:2c:b6:4f:dc:d5:66:e7:46:1d:
01:f5:40:f4:55:11:fc:9c:53:87:c7:8c:df:d6:45:
bc:03:96:02:b7:57:15:df:04:63:32:1f:62:84:31:
46:fb:77:57:29:45:d8:b4:76:e3:f0:66:0f:2f:c3:
28:05:4d:22:1d:7e:c1:76:4c:0e:26:98:79:67:e4:
fc:45:12:7e:f6:19:c1:aa:73:e0:44:1e:5f:0a:4c:
8e:db:90:93:10:86:3c:2a:a7:fe:76:ca:36:c6:4e:
a7:a9:92:d9:56:27:31:db:37:23:e4:d4:27:f4:93:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:B3:8A:1C:B2:A5:46:9B:50:1C:8C:78:56:EB:EC:9E:40:E2:A4
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:6c:aa:83:59:cc:70:42:4f:a3:4d:bf:17:df:53:bd:71:
28:c1:c6:0c:48:e5:97:0c:32:71:6b:1a:74:9c:60:66:6a:23:
c5:35:3e:e4:c4:4a:90:9c:42:d6:f0:59:bf:7f:b3:11:be:02:
d0:db:e5:35:23:54:da:d1:04:6b:f8:c0:93:67:91:bf:31:8e:
ed:d8:cf:66:c4:66:60:0f:79:4c:cd:9b:6c:34:72:76:1d:cf:
77:28:77:e1:ac:c3:b3:48:47:bd:51:f7:64:8a:4c:9a:be:b2:
c5:49:f4:81:5b:5e:fe:3e:f8:ea:7d:1b:e1:a6:12:63:23:a8:
67:cd:b9:57:de:2e:9c:d2:b1:bb:61:90:0b:96:84:0a:f7:0f:
26:e8:c9:1b:e2:2b:af:c6:bb:1b:65:96:85:71:63:9e:c7:db:
dd:f9:8e:47:4d:6d:f6:e9:45:28:57:ae:3d:8d:e5:cc:0d:2c:
14:b8:1a:51:79:d5:e5:93:f4:86:27:f6:dd:e9:3d:42:28:38:
80:67:e5:e1:eb:14:77:09:ce:c0:47:b7:80:71:bc:34:36:13:
1d:0b:39:06:aa:9e:2b:ff:9c:e9:76:e0:37:97:1b:51:b2:92:
ff:51:50:0a:85:16:94:da:05:60:5f:9c:91:d0:04:f2:e9:9a:
40:7a:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:21:07 2026 by rpki-client