Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: Tndn60FwDE0vkkdE4RO4ch1T1CzLUcUREXF7eGQyXD8=
Subject key identifier: 4A:99:EA:71:CD:AA:77:B2:FD:42:FD:75:D2:01:90:CF:3F:E4:FB:20
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 01A08A8C82D4488F197AD1745D8B9C6CF1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 14AD
Signing time: Thu 10 Sep 2026 09:00:59 +0000
Manifest this update: Thu 10 Sep 2026 09:00:59 +0000
Manifest next update: Fri 11 Sep 2026 09:00:59 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: ce+UM8IsGaPAfIWJCTwBZN7OwT8AVKEeouRNZthYKYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:82:d4:48:8f:19:7a:d1:74:5d:8b:9c:6c:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Sep 10 09:00:59 2026 GMT
Not After : Sep 11 09:00:59 2026 GMT
Subject: CN=4a99ea71cdaa77b2fd42fd75d20190cf3fe4fb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:2f:bc:f1:5d:f8:da:c6:8f:b7:ca:27:20:
54:8a:07:d5:36:41:db:6f:74:d9:a2:d1:a5:98:9f:
2f:3b:45:61:60:90:7c:7a:46:02:78:d5:c0:ec:57:
e8:78:a8:72:02:9b:a0:b8:21:7f:9e:a3:c2:8d:82:
62:72:13:db:4d:4c:44:46:c4:d2:c1:1a:46:d1:4d:
5b:ab:54:f1:39:73:4e:2c:21:4a:f7:49:92:0e:79:
5f:4c:d5:3f:c2:b2:4d:41:1f:02:c0:12:5c:30:53:
25:91:9e:a0:97:40:13:ab:86:e5:10:35:09:ea:23:
6b:4f:7c:22:97:0a:87:bf:a5:a0:ac:8c:c8:af:df:
25:02:87:02:fe:23:71:bb:00:7b:7c:56:27:2f:6c:
c1:cd:d6:05:2d:c7:47:30:1f:68:72:8b:73:e9:a7:
db:17:92:e7:a0:c2:d0:e6:a6:64:e4:83:c8:b5:ba:
d5:e4:89:5e:eb:b1:35:a3:8e:f3:82:51:91:1e:24:
8d:72:29:dd:13:ef:5d:52:4a:72:2d:56:bc:d3:7c:
5b:23:1a:67:3b:91:fa:11:31:2b:fd:d9:5e:16:85:
2b:a6:e6:56:71:e0:17:d0:30:10:a9:01:7b:22:13:
e0:0b:47:13:40:74:78:41:7f:6b:34:f6:89:c2:02:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:EA:71:CD:AA:77:B2:FD:42:FD:75:D2:01:90:CF:3F:E4:FB:20
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:c9:69:03:ba:23:7b:74:53:10:48:b7:ae:c4:a7:d1:6f:
2b:cd:a2:10:3f:3b:89:68:ca:15:7d:d6:15:f9:de:16:50:b3:
f0:44:82:a3:4a:fc:1a:fb:5e:37:4d:40:50:d2:39:d8:df:f9:
83:50:6d:53:cc:0d:b7:0f:16:7c:07:92:c5:ca:c5:81:28:5f:
d0:64:b0:a3:d0:17:6b:a7:5a:b4:2a:55:40:06:32:8c:f7:27:
db:53:e8:71:0c:c1:ac:e4:e7:ad:13:e0:7f:a1:d9:46:35:bc:
f9:7a:4c:07:92:69:77:d3:10:d0:90:c9:f7:5f:ca:28:8b:09:
6f:a3:ce:45:d4:91:02:83:ca:9c:97:77:85:33:d3:2d:ee:2e:
09:e8:cf:87:a4:8f:be:35:e1:8c:59:7d:88:91:ad:c8:3c:3e:
1f:33:35:35:c9:a2:66:1a:3d:2d:ec:36:de:06:30:d1:d4:38:
2d:b0:7c:4f:10:90:90:36:c7:a4:5e:ad:c3:7d:ec:57:2a:f6:
83:ce:90:17:86:a5:76:20:89:de:6f:7d:fa:fa:68:92:6f:0e:
24:56:54:73:70:c3:27:6e:89:81:a9:44:69:a8:d2:58:c9:60:
cf:cd:d1:a8:52:67:c9:a1:17:1d:bb:5e:15:cb:57:22:90:8f:
93:28:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:44 2026 by rpki-client