Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: LAAkzqBrarKOGb2RNa202WWa6z9kX+mCTWiclr8Q4Yc=
Subject key identifier: 13:59:E0:35:CD:B2:0A:FC:39:48:0B:59:6E:8A:5B:1C:27:CA:C7:4A
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 01A130A25FD308833B47ABA6CB3DD36DB410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 076B
Signing time: Mon 12 Oct 2026 15:01:50 +0000
Manifest this update: Mon 12 Oct 2026 15:01:50 +0000
Manifest next update: Tue 13 Oct 2026 15:01:50 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: STwxUT6Prfy/oLs+tEBASukvUIYiL3cnt8UfoBVscWs=)
2: rOZu6wYLzhNpmg8j69cWttIEmiQ.roa (hash: yuT/NXTQJjp1YdXNP2jjlInGWMr7pc0nxgMJpIJbpWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:5f:d3:08:83:3b:47:ab:a6:cb:3d:d3:6d:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Oct 12 15:01:50 2026 GMT
Not After : Oct 13 15:01:50 2026 GMT
Subject: CN=1359e035cdb20afc39480b596e8a5b1c27cac74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:49:fb:7b:71:58:bb:f4:71:50:c3:98:5c:
01:47:81:88:76:b9:10:66:7a:be:c7:63:6e:64:62:
20:04:5f:91:e0:9b:f6:ae:3a:07:bf:5b:50:79:f1:
4b:01:87:c3:4b:4d:da:ae:69:85:21:ce:12:0d:76:
b6:d4:e0:5a:d2:96:6c:f7:77:31:44:75:2f:44:54:
77:86:f2:b3:66:07:60:6c:d5:b6:ba:61:e8:5c:77:
47:f6:72:62:49:ea:82:1a:d6:b2:9f:87:01:f1:36:
ad:0f:62:da:f4:ee:0e:cc:86:44:dd:7c:90:fb:05:
0d:56:ca:c0:b4:bc:e6:fe:0a:ff:e8:f4:da:21:2b:
98:98:b4:81:34:c2:fd:72:46:e6:45:89:af:11:d7:
85:92:52:a6:d4:47:72:18:a7:80:34:47:4d:70:e3:
99:d2:47:e6:51:a9:44:83:76:2a:9a:4a:97:31:de:
0b:6b:ac:94:90:7f:ca:89:d1:50:a1:30:ed:9f:79:
4b:0d:c8:79:4a:c1:a8:40:f2:80:9b:b3:b0:6a:cd:
67:7d:de:b0:71:12:1c:fc:cb:f7:cd:92:47:44:07:
bc:e2:d6:1b:0a:2f:5e:eb:78:9a:27:b3:37:1d:55:
19:80:63:5d:c5:77:ab:c8:c4:ea:c5:8a:fc:09:68:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:E0:35:CD:B2:0A:FC:39:48:0B:59:6E:8A:5B:1C:27:CA:C7:4A
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:cc:20:b7:b0:7b:dd:a4:90:24:67:b3:09:ce:25:af:d7:
51:db:05:5c:89:08:eb:f0:2b:aa:64:5c:76:f6:46:04:94:46:
39:71:4a:1a:50:23:26:81:4f:29:ce:66:aa:f8:bc:ea:71:a4:
17:5d:ff:35:0e:03:8d:3e:b6:3d:d7:bc:6b:c2:0e:d2:03:f5:
0e:7f:36:03:d2:5c:7e:49:76:9f:2c:d8:18:9c:ad:00:3a:59:
c1:1d:67:b8:9b:b7:fa:0d:e4:a8:69:9c:4d:26:67:cc:78:81:
68:86:28:3f:dd:b5:cd:f2:cb:49:a4:46:45:f2:f1:da:2a:9b:
23:a3:ab:5e:98:4b:b7:0b:e5:a9:e2:9b:92:aa:01:89:df:5a:
bf:cc:33:1f:37:93:92:1b:82:ac:59:e3:f7:e1:77:11:1d:13:
8b:aa:9b:55:56:a9:f5:c4:84:ce:bd:ae:55:95:a5:28:92:a9:
e5:3f:7e:fc:ae:51:07:bd:af:0d:f8:6b:02:e4:3d:73:f9:6a:
ae:71:6a:41:7e:30:12:eb:97:c1:ed:d8:d1:a5:68:79:01:22:
fe:d5:66:4c:03:87:9f:7c:4d:dc:03:cd:b3:75:44:f0:02:a1:
94:99:87:40:34:ec:a6:a7:94:02:77:7d:f2:6e:1a:c8:0e:64:
b6:27:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:49:19 2026 by rpki-client