Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: Oh884204qojTsuyPhPNInuMIJzdAlZJAn/nMzmXd0+k=
Subject key identifier: 14:FB:94:D6:B7:80:32:E6:B6:6C:4E:AA:27:5C:9D:88:C3:FE:4B:9F
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01A10D398E951C3045CFC81565DE91E4F0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 124B
Signing time: Mon 05 Oct 2026 18:00:38 +0000
Manifest this update: Mon 05 Oct 2026 18:00:38 +0000
Manifest next update: Tue 06 Oct 2026 18:00:38 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: a6yFJ5vL7sI/g/TTeRIPMk0yw+zeVJpWuRL1ARKFLrQ=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:39:8e:95:1c:30:45:cf:c8:15:65:de:91:e4:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Oct 5 18:00:38 2026 GMT
Not After : Oct 6 18:00:38 2026 GMT
Subject: CN=14fb94d6b78032e6b66c4eaa275c9d88c3fe4b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:4b:9b:94:cd:92:b4:35:e8:af:9e:20:03:
81:b5:33:2e:f0:d6:25:38:a2:65:d3:97:7c:a9:c9:
05:1f:2b:c5:92:17:8c:08:f6:21:9f:7a:f8:7a:5e:
b2:fe:82:fb:ad:83:8f:9b:a0:87:51:87:98:b9:79:
d6:50:39:26:c3:ed:ad:5a:5c:70:8f:7d:e2:ba:d6:
4f:a8:e6:f7:c6:df:5f:60:eb:61:9f:8f:15:67:ef:
c5:09:bc:d4:b5:56:10:c1:ac:a6:79:a0:20:9f:51:
c4:27:b4:d6:c7:b3:ca:bf:63:08:5e:ed:5c:0f:41:
27:e9:b1:13:6a:86:df:d6:ef:89:19:63:f6:24:99:
47:10:5a:8d:d1:b5:f9:3d:31:db:98:6e:d9:fa:b3:
0f:f5:b3:c3:9a:82:9c:30:52:ed:4a:4b:37:ac:7d:
4d:1a:a8:2a:f7:69:4c:12:99:ac:04:a3:ac:c7:71:
3a:ff:52:f5:ce:2b:d9:36:05:d1:9b:78:61:8d:d9:
fd:04:dc:bd:fa:f2:b5:a0:a6:f9:f6:c6:5e:df:ad:
2a:2d:b2:2b:49:e3:1c:01:4c:d0:31:26:fd:f8:a1:
48:67:90:a7:fb:fe:30:75:f7:61:99:5a:f3:12:ce:
75:5c:bc:27:17:d1:c8:a3:36:b9:28:82:11:bd:e5:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:94:D6:B7:80:32:E6:B6:6C:4E:AA:27:5C:9D:88:C3:FE:4B:9F
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:53:42:94:ba:34:7a:eb:2f:ad:aa:86:8c:05:36:b2:97:c1:
ce:d7:d0:cf:fd:03:14:00:c0:3c:e6:dd:60:4e:39:bc:a8:e8:
32:9f:a0:c9:ec:52:86:8e:1a:b1:a7:5d:e6:59:38:06:45:7d:
25:b7:45:30:6d:e1:77:79:2b:7f:93:24:ea:5f:ed:c5:08:b8:
bd:84:45:26:c0:aa:25:ff:ae:f1:31:f9:75:54:3a:06:15:d3:
a6:ca:39:69:c1:90:a9:4b:11:95:b3:93:f5:83:a4:b4:8e:29:
e9:fb:1e:61:48:4c:8e:f4:f5:93:9f:cf:dc:f1:4d:0d:2d:32:
cc:d3:b8:95:f7:99:69:ba:9d:4b:e5:5c:5c:04:b3:a7:c4:e9:
27:ac:ea:ce:b0:da:68:0e:cb:f0:0e:38:7a:dd:6b:c5:58:d9:
11:8a:37:f8:fc:7a:a9:f7:0b:64:5b:27:6c:2d:05:02:57:73:
e6:ea:a9:d5:63:cf:d2:04:94:96:52:6b:d7:12:ca:d7:bb:9d:
63:b4:40:b4:17:21:b4:ba:23:6d:94:5f:92:53:31:cf:3c:3b:
96:63:f7:6b:93:ca:20:e1:05:60:73:c1:17:b4:f2:4e:52:1e:
4d:3d:18:df:95:a6:84:a9:2f:76:1d:5b:a1:9d:5b:29:12:f7:
07:3f:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:00:58 2026 by rpki-client