Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: YfOS2Go3XwZgmDi3p4J/RD7DDg8VTxXMeyBpV+3oS3g=
Subject key identifier: FD:76:76:9A:66:03:C9:FF:38:EC:A7:B0:4C:55:F8:E0:DB:3A:40:13
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01A17A71B50F355611ED2784EF67380C4D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 23:00:34 +0000
Manifest this update: Mon 26 Oct 2026 23:00:34 +0000
Manifest next update: Tue 27 Oct 2026 23:00:34 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: WhKMn6ckUWgR/YKyzzJ0ejOWON67ykPsEr5SmyFd/Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:b5:0f:35:56:11:ed:27:84:ef:67:38:0c:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Oct 26 23:00:34 2026 GMT
Not After : Oct 27 23:00:34 2026 GMT
Subject: CN=fd76769a6603c9ff38eca7b04c55f8e0db3a4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:1f:02:52:b8:f7:fa:57:0c:cf:d1:8e:34:
20:33:ae:0c:39:14:00:bf:3b:b2:5c:3b:9a:c7:e0:
40:d1:23:bf:41:7a:62:29:02:42:44:3b:4d:d5:e6:
aa:49:83:f5:93:e8:3a:82:ca:4c:67:4e:1f:16:2b:
14:35:2a:2e:b7:46:3d:e6:f2:5c:0d:bd:e0:d2:82:
5a:2d:f0:ee:e9:ab:4d:0f:ca:3d:6a:24:99:b9:73:
74:74:3f:bf:de:53:54:f7:eb:02:65:ae:78:66:46:
f0:8f:ea:b4:f0:07:e6:d2:97:f2:7c:78:cf:f3:2e:
f8:4c:20:03:ba:1f:3e:c1:d3:0e:f1:29:86:9e:fb:
e2:f1:65:97:0e:62:ee:cf:2c:98:52:62:56:5a:80:
47:20:16:67:0e:fe:9c:8b:e4:75:e3:ac:11:25:e6:
e5:50:4b:16:46:19:5a:69:8b:61:9c:6d:f0:f3:33:
8c:76:46:24:11:e8:93:29:4b:59:18:e4:23:7d:b9:
38:dc:ed:5d:6b:d1:52:5e:13:49:5a:fa:a7:f5:be:
55:29:ce:de:77:4b:33:2e:a3:4c:b8:96:8a:02:dc:
11:08:d0:a5:85:5f:e2:b7:dc:0e:7b:16:bc:75:17:
d3:27:24:5c:a1:c2:63:d7:4d:00:4b:c7:81:67:08:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:76:9A:66:03:C9:FF:38:EC:A7:B0:4C:55:F8:E0:DB:3A:40:13
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:52:4b:61:50:ed:bb:b4:bf:54:0d:6e:1a:33:bc:24:d1:36:
65:6b:5e:1b:dc:03:63:8b:6b:e4:46:d9:f6:99:0a:65:eb:f9:
58:75:ed:ca:8e:27:2f:e6:39:3f:9a:eb:01:4b:9d:99:0c:75:
e4:b6:5e:5e:d6:c9:48:91:af:a0:83:ba:25:ca:ac:0d:1f:f6:
43:a7:80:8c:a0:d0:6c:00:c0:76:b5:cb:fd:b9:bd:4d:40:b9:
59:8a:8f:9a:3f:a2:fe:5c:75:9d:fc:16:9c:44:5b:96:e4:a4:
6e:70:9a:c9:06:3d:6f:a1:66:11:f9:79:e4:26:a8:15:0f:4f:
4a:94:20:ef:5b:dd:26:c5:03:82:0a:15:4c:8d:76:1c:37:70:
76:8a:ac:dd:ff:8d:d4:ee:9e:db:d3:0e:29:53:95:26:85:b8:
94:1f:bf:76:78:e0:8c:3f:95:0b:a2:ef:95:0d:a9:3c:b0:e2:
0e:89:a0:c4:33:ec:fb:17:46:cb:07:4c:95:6b:5e:17:dd:ce:
39:41:4d:67:70:ff:aa:e0:48:25:50:73:c7:b7:f0:5d:b7:ad:
2c:80:f1:c8:45:d5:67:46:96:26:06:0f:c4:b0:31:e9:a5:9e:
7e:78:9e:62:92:72:c4:a7:7a:e4:fc:8a:2d:42:32:54:1c:82:
5b:20:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 10:42:26 2026 by rpki-client