Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: l/OfhUGXb4lh9f9kNrfhai8F44jGNkIpXkjuXebkdgY=
Subject key identifier: 0E:A4:B0:45:5E:28:6B:4A:DB:90:3B:EB:35:74:65:60:61:E3:FE:EC
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 01A187F70514F37B52825ADAFC94A312BBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 14:01:15 +0000
Manifest this update: Thu 29 Oct 2026 14:01:15 +0000
Manifest next update: Fri 30 Oct 2026 14:01:15 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: VLgAmVJCQN0/aPY1yaVIUHu7mRkrX8s4y4D69SchW6Y=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f7:05:14:f3:7b:52:82:5a:da:fc:94:a3:12:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Oct 29 14:01:15 2026 GMT
Not After : Oct 30 14:01:15 2026 GMT
Subject: CN=0ea4b0455e286b4adb903beb3574656061e3feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:51:40:25:6d:72:b1:9a:fd:68:8c:ee:9d:
06:11:1c:f0:31:30:31:72:7d:5a:14:e5:06:01:9c:
0f:33:da:af:65:1c:85:f7:58:29:8a:8f:d6:03:ac:
71:da:c4:2a:d1:d8:c2:b2:6e:e0:76:93:4a:fe:06:
91:c1:db:21:c8:ab:c0:34:13:cf:7a:8e:68:c9:25:
3f:c6:3e:d6:dd:89:e3:6d:a4:8f:c8:20:91:c6:90:
d5:ff:ee:1b:5a:1e:9c:70:9a:21:f0:c5:05:43:fb:
60:9f:58:a5:1b:79:d5:87:10:70:ad:fb:50:1d:8e:
15:75:c0:c9:c5:58:40:a0:ec:13:df:5c:a6:c3:16:
ba:d5:9c:13:dd:48:38:38:bb:53:e7:67:45:ed:6e:
f1:d0:7b:f0:18:ca:a1:e3:bb:17:a0:02:4c:12:a9:
a0:f0:a3:77:9e:47:52:72:d2:50:cb:03:d5:a2:48:
ae:f7:b8:00:b2:9d:31:16:75:50:f4:a7:4d:90:91:
18:62:f3:79:ce:e6:ad:ed:12:14:2a:60:a3:be:cc:
97:fc:8d:c3:dc:c9:6f:9a:e3:da:f2:7c:31:58:18:
d4:24:aa:a7:05:b9:79:03:ac:6d:49:c0:c1:0f:81:
49:b1:e8:68:3f:f8:34:ed:38:e5:28:54:f0:00:cc:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:B0:45:5E:28:6B:4A:DB:90:3B:EB:35:74:65:60:61:E3:FE:EC
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:f7:7c:64:80:10:ec:5f:b0:62:2e:23:bf:00:3d:d0:3e:
0d:0d:7e:e2:00:bc:c9:7d:5f:57:29:f1:69:b6:5f:89:e0:09:
50:07:86:26:c9:41:2b:6b:e9:90:2c:58:39:00:64:32:8e:da:
2d:ad:8e:2b:93:bb:b6:8f:cb:c9:04:04:0a:e8:7e:8a:a4:e9:
67:ee:bd:fc:82:a5:a9:a0:31:32:db:8d:08:71:19:e6:42:e2:
46:41:82:a2:d3:5d:8a:06:09:be:46:63:7c:ee:17:d3:8e:5d:
8d:a8:93:19:60:f3:b9:37:5a:bd:ba:50:8d:5a:c2:80:b0:9e:
23:ae:2c:99:52:d7:9d:82:93:c4:1a:a3:fb:18:9a:90:58:24:
71:d2:3b:d8:d4:d9:66:8a:76:72:1a:a1:02:58:e2:a8:a3:dd:
d0:53:4e:42:4c:56:63:29:06:a2:c7:8e:24:0c:9b:f5:9a:c0:
01:d9:0f:e0:95:b3:9a:c7:c9:5d:55:85:2f:0f:3d:04:26:cd:
bc:ed:56:e2:23:f1:6f:19:88:29:b1:36:a4:ad:61:c8:ff:8e:
d7:85:6a:b8:fc:1a:3b:4a:b1:dd:b8:fc:10:e1:0e:aa:f5:cd:
74:26:fa:2d:6c:b6:52:de:bc:f3:42:e2:48:e2:e8:40:15:0f:
c7:81:48:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGH9wUU83tSglra/JSjErvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjYxMDI5MTQwMTE1WhcNMjYxMDMwMTQwMTE1WjAzMTEwLwYDVQQD
EygwZWE0YjA0NTVlMjg2YjRhZGI5MDNiZWIzNTc0NjU2MDYxZTNmZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XhRQCVtcrGa/WiM7p0GERzwMTAx
cn1aFOUGAZwPM9qvZRyF91gpio/WA6xx2sQq0djCsm7gdpNK/gaRwdshyKvANBPP
eo5oySU/xj7W3YnjbaSPyCCRxpDV/+4bWh6ccJoh8MUFQ/tgn1ilG3nVhxBwrftQ
HY4VdcDJxVhAoOwT31ymwxa61ZwT3Ug4OLtT52dF7W7x0HvwGMqh47sXoAJMEqmg
8KN3nkdSctJQywPVokiu97gAsp0xFnVQ9KdNkJEYYvN5zuat7RIUKmCjvsyX/I3D
3MlvmuPa8nwxWBjUJKqnBbl5A6xtScDBD4FJsehoP/g07TjlKFTwAMyqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6ksEVeKGtK25A76zV0ZWBh4/7sMB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclz3fGSA
EOxfsGIuI78APdA+DQ1+4gC8yX1fVynxabZfieAJUAeGJslBK2vpkCxYOQBkMo7a
La2OK5O7to/LyQQECuh+iqTpZ+69/IKlqaAxMtuNCHEZ5kLiRkGCotNdigYJvkZj
fO4X045djaiTGWDzuTdavbpQjVrCgLCeI64smVLXnYKTxBqj+xiakFgkcdI72NTZ
Zop2chqhAljiqKPd0FNOQkxWYykGoseOJAyb9ZrAAdkP4JWzmsfJXVWFLw89BCbN
vO1W4iPxbxmIKbE2pK1hyP+O14VquPwaO0qx3bj8EOEOqvXNdCb6LWy2Ut6880Li
SOLoQBUPx4FILA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 21:27:20 2026 by rpki-client