Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: bAL7vTrzFNV8nsQBYoEeCqgfqce21qCErklwprNgHBI=
Subject key identifier: A8:20:AB:B5:A0:9A:0C:89:8E:B1:23:4A:D4:56:3C:B0:A7:1C:69:B3
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A165A2590F53D0AA17CE670EE8FAC048F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1993
Signing time: Thu 22 Oct 2026 22:01:40 +0000
Manifest this update: Thu 22 Oct 2026 22:01:40 +0000
Manifest next update: Fri 23 Oct 2026 22:01:40 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: BQLsfSPpvCzS5ipwZZbtMtuHsw30ih7QmV0IiEJc3Yk=)
3: xGq1gAr_KK1wFSAmfr2LKGJvUNk.asa (hash: YYD3QqVh2P4eGz8z5m6Y8La0oMvGrQPkxmhrVB2u3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a2:59:0f:53:d0:aa:17:ce:67:0e:e8:fa:c0:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Oct 22 22:01:40 2026 GMT
Not After : Oct 23 22:01:40 2026 GMT
Subject: CN=a820abb5a09a0c898eb1234ad4563cb0a71c69b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:e5:78:5b:85:94:33:0c:e8:a9:4a:e4:ee:
29:d2:18:7d:6b:60:c9:11:d3:0d:d6:38:35:8b:41:
cc:0e:5c:64:4b:18:61:26:d3:e2:e0:1c:b7:21:6a:
a0:cc:cb:0c:1a:47:5a:71:17:d7:d7:10:62:3a:9d:
1b:28:cf:80:ce:b2:33:75:e4:15:cd:72:0a:54:99:
15:a2:c8:31:5e:e2:b8:bc:0e:a8:27:e7:ae:af:d6:
51:d2:e3:8e:e5:0b:7a:57:fd:fd:3b:57:f7:99:e3:
7b:07:6b:7c:58:a7:1f:d7:31:18:d2:50:6d:5b:67:
79:21:1f:3e:f2:d8:bc:73:c4:2b:9e:56:80:01:6f:
32:db:ff:d9:fa:fc:70:fc:42:5b:06:b5:c6:14:7e:
9d:37:af:6b:85:93:af:f2:3d:38:14:95:2d:7e:ba:
4e:9c:94:d7:2a:ac:00:c9:51:40:08:e0:46:cd:33:
c0:53:3b:66:b5:0f:6b:14:5a:7b:90:5c:f0:cf:18:
72:ef:02:d1:13:b3:75:2f:ac:84:82:7d:e6:51:03:
f2:37:27:7d:db:b6:e5:37:a3:21:45:99:5a:3b:90:
9b:79:00:14:1c:36:a1:a8:95:f4:3f:e5:1a:0e:af:
5a:e3:bd:66:59:52:b0:80:1c:61:53:8e:3c:4f:50:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:20:AB:B5:A0:9A:0C:89:8E:B1:23:4A:D4:56:3C:B0:A7:1C:69:B3
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:99:9b:e4:be:6b:c1:11:fd:02:3f:13:a5:8e:6e:7e:e4:
23:4c:e7:09:90:85:2f:32:e2:3f:37:5d:65:06:ec:9b:7a:6e:
37:03:78:b6:c7:12:2c:e0:15:d8:48:f5:7e:00:9f:52:6f:53:
3a:98:28:b2:95:d1:23:16:b4:72:b2:50:c8:33:d0:d1:92:1b:
fc:b1:71:5e:94:60:12:61:fd:a5:bc:14:ac:95:cc:9e:83:15:
ff:8b:65:26:69:fd:c5:e1:5e:0e:30:f0:16:93:40:7a:51:e0:
39:42:3e:5b:84:66:ce:c5:86:ad:24:8a:39:c8:07:86:3e:d1:
d4:3f:19:2e:1b:2b:8a:3f:f9:30:ad:f5:52:6b:1d:65:9d:2c:
51:8c:5b:05:06:4f:2a:c3:8b:6a:28:47:f0:69:9c:02:fb:e5:
5a:14:03:a2:d8:f8:72:72:36:8e:8f:9f:14:7b:d2:a0:b0:16:
5d:2d:8e:1a:d3:b0:ad:75:cc:63:7e:a3:3a:8b:cf:17:c7:0a:
4a:a4:2e:c2:48:08:a1:5b:4a:fd:57:56:ce:82:5e:90:ce:10:
c9:6e:84:08:e3:31:b4:ce:40:b9:67:4e:0d:cc:3b:fc:bc:6f:
dd:b2:20:0d:dd:76:b5:6e:0a:be:5c:61:28:12:b9:ff:35:fa:
9d:5b:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:29:05 2026 by rpki-client