Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: XveO2HrBMKjeuhCBKEJ8nUmZ0M/+A92nYKN7ODdXjMQ=
Subject key identifier: 58:4B:4E:19:A0:95:3B:6C:F2:64:62:E5:53:C5:AF:DA:E1:C6:A0:59
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01A18006CC1C44E257FDE3D4957555716F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1936
Signing time: Wed 28 Oct 2026 01:01:31 +0000
Manifest this update: Wed 28 Oct 2026 01:01:31 +0000
Manifest next update: Thu 29 Oct 2026 01:01:31 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: lFalOfV+LT5H3OONaY/Gza3UslZvfUeIPDQ3q5n14Xs=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:cc:1c:44:e2:57:fd:e3:d4:95:75:55:71:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Oct 28 01:01:31 2026 GMT
Not After : Oct 29 01:01:31 2026 GMT
Subject: CN=584b4e19a0953b6cf26462e553c5afdae1c6a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:5c:cd:19:0a:93:c5:86:84:9d:7b:18:e4:
d7:b0:2b:04:fb:f9:23:fe:7d:5b:66:0a:37:cd:e3:
4d:68:5f:dc:28:5c:f3:e1:ba:b0:1c:60:05:5c:0c:
fd:8d:b5:31:fd:0f:fe:2c:f9:13:56:8f:c4:30:d5:
86:bb:94:04:2a:90:48:52:69:5f:72:87:ef:a9:00:
ab:6e:86:6f:af:12:91:0b:c8:73:4a:39:d5:de:40:
db:b7:3a:14:4c:ee:8e:59:c4:e7:81:e0:fe:77:56:
6a:3f:ea:26:bc:61:3e:8d:71:2a:7f:1d:24:09:df:
a2:6f:44:33:94:f2:11:5e:bd:83:c1:c9:57:e4:e1:
e1:e2:46:dc:a0:3b:75:0c:99:0c:0f:e4:71:aa:32:
43:57:75:48:f8:20:be:d8:34:29:47:a8:45:7e:59:
b5:f6:ac:c9:15:a7:32:a3:39:a1:33:ad:82:36:63:
0d:c8:2a:53:98:66:b8:2f:a1:ef:6d:b5:10:bf:28:
53:b7:cc:a3:2d:3b:0e:57:90:80:dc:0a:83:a1:b8:
5b:cf:69:b1:2a:0c:f0:e9:db:3b:68:9f:87:d2:91:
ae:a8:43:1a:74:6d:89:b1:57:ae:5a:ee:57:37:09:
3b:90:44:92:6b:18:66:83:79:1b:7a:aa:b1:92:77:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:4E:19:A0:95:3B:6C:F2:64:62:E5:53:C5:AF:DA:E1:C6:A0:59
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:ed:ba:b4:0e:66:4d:51:1e:a2:09:b2:61:8d:79:e9:ee:
d5:3a:dc:33:be:3a:be:27:c0:d6:7d:4d:36:d9:a6:5e:4b:8b:
48:c6:a7:d5:fc:d0:42:2d:2c:d0:cd:8e:a3:68:52:7b:cb:d9:
80:8c:19:c1:ac:1b:f7:00:6f:14:62:96:4b:b3:99:11:76:95:
42:72:45:04:18:83:7a:cf:27:0a:7b:5b:2f:69:7f:9e:fe:76:
ee:e2:49:03:e4:48:80:e8:68:29:b7:cb:1e:3b:76:90:5a:b8:
48:a7:3b:bc:06:9e:aa:ac:2e:9a:07:c0:91:a4:ab:0e:b8:64:
96:af:ab:87:cf:ee:b3:34:fc:5c:91:4c:0b:db:66:21:36:fa:
bb:b6:3a:b2:3d:f2:e6:f9:09:da:0c:9d:d1:50:bd:70:06:31:
a3:8d:62:cb:fd:0f:8d:92:e7:af:96:40:2b:1e:8d:a4:2e:2c:
f2:83:3e:c0:36:0c:8b:ba:46:c5:05:63:dc:3b:e6:65:63:1b:
60:96:97:71:73:09:67:b3:27:ed:d3:fc:0b:00:70:69:70:df:
31:39:42:14:75:22:6d:0d:d5:71:29:62:fc:f0:6c:25:18:4b:
eb:b3:d1:d2:e3:04:4b:ba:cb:d6:c1:ca:73:5a:a1:05:45:05:
ec:8c:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:04 2026 by rpki-client