Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: nkw8hh1+WXaWCtfBLuOXfGEvfjjzLdMX2aVuvvupKBA=
Subject key identifier: 78:9B:49:79:B4:9D:E1:42:35:0D:BA:7A:A6:FD:82:92:B5:A6:E9:2A
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A06E7124D8A11FF1A5FA0A47C7771256CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1913
Signing time: Fri 04 Sep 2026 22:01:43 +0000
Manifest this update: Fri 04 Sep 2026 22:01:43 +0000
Manifest next update: Sat 05 Sep 2026 22:01:43 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: KpFR0KtnFU3pQKpS/vqr9aZzH3ziPk8Eu/me3dXjYLQ=)
3: xGq1gAr_KK1wFSAmfr2LKGJvUNk.asa (hash: YYD3QqVh2P4eGz8z5m6Y8La0oMvGrQPkxmhrVB2u3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:24:d8:a1:1f:f1:a5:fa:0a:47:c7:77:12:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Sep 4 22:01:43 2026 GMT
Not After : Sep 5 22:01:43 2026 GMT
Subject: CN=789b4979b49de142350dba7aa6fd8292b5a6e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:e6:e9:c4:df:30:7b:40:3b:76:1a:33:99:
6e:45:dd:fe:a3:a1:80:93:5a:25:3c:01:af:f1:5d:
27:6b:2a:d9:be:c8:3b:af:d5:29:90:c5:7d:83:72:
7c:98:c7:3e:5e:b5:9b:61:82:c9:c9:45:5b:15:20:
e8:5f:45:3a:d4:35:fd:c0:19:07:1a:53:ab:ce:89:
ec:f8:30:69:5f:35:91:1e:37:8c:4a:2e:7a:8f:4d:
94:d4:46:17:db:92:88:9e:e7:46:4e:5e:44:e5:d9:
36:85:13:31:d7:95:7e:89:14:14:e0:27:ea:29:bc:
03:a1:44:4d:99:f7:0d:ec:45:d2:75:e7:40:fd:68:
51:f3:88:21:44:f1:e0:6d:75:c8:de:45:21:6f:ed:
7a:a2:ff:1b:a2:5c:3c:8f:88:bb:69:1d:5f:68:17:
89:fb:59:2d:a9:4d:71:d6:6b:de:96:da:80:c0:2a:
6b:4f:8f:14:a6:b1:b8:53:c1:8b:f9:68:a8:21:d1:
47:64:0f:e2:3b:f5:27:c1:8e:d2:37:a4:03:5c:b5:
19:bf:8d:64:d6:31:6b:7c:bf:e7:be:74:ef:63:d1:
a0:b4:f2:cd:e2:bc:86:0b:98:e1:f6:55:57:3d:30:
00:0c:7b:75:25:d6:83:24:fd:96:f7:e2:31:41:f9:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:49:79:B4:9D:E1:42:35:0D:BA:7A:A6:FD:82:92:B5:A6:E9:2A
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:7e:84:1c:95:4b:92:39:b9:c5:61:8d:c7:4c:11:30:6c:
d9:c0:ae:26:f0:23:b7:75:fe:b0:b6:34:43:c9:26:90:f9:2b:
c2:32:ed:bb:75:bd:7d:1b:bb:18:36:46:a8:d2:f1:50:d7:71:
69:ca:4d:2a:85:5b:0b:f7:59:05:61:e5:5b:b0:50:bb:5b:01:
8e:0c:43:61:23:00:d6:a7:8f:10:eb:2a:36:28:6e:87:ed:ec:
51:42:8b:3f:a1:f2:68:0b:94:27:d0:b3:2e:77:de:bb:b5:98:
02:53:6a:cf:6c:11:e9:92:ef:02:6b:68:57:41:3e:0e:a6:51:
88:b7:36:94:4c:98:f3:06:48:33:b2:65:80:2c:ea:d1:45:01:
68:d1:4a:36:5a:0d:3b:e6:f8:64:8e:39:8e:e0:73:5b:12:79:
65:e7:78:8f:c9:7e:fa:04:76:32:73:5d:26:94:f1:90:25:53:
10:06:70:9a:e7:21:65:5e:21:bc:43:a7:ef:b1:c2:98:c3:b4:
93:fb:15:71:f3:53:60:77:f1:e1:dd:53:7e:f6:2d:51:79:47:
b7:b2:07:17:9f:eb:e5:0c:d6:7a:3c:4e:2a:45:96:c2:f0:86:
5c:a5:97:4e:e0:05:60:fa:92:34:74:2d:fd:90:bc:c2:e3:14:
55:bd:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:29 2026 by rpki-client