Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: 49++KoXjBPYg/nx6wdc/jRCJd9SCV/GxmMeFIP3r74I=
Subject key identifier: 8E:44:19:AF:7E:71:24:A4:11:F5:1D:CA:CB:D1:7C:5C:40:88:EE:0C
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01A06FBA4849D18F14B8ABBD4E3AFBD609B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 18A9
Signing time: Sat 05 Sep 2026 04:01:14 +0000
Manifest this update: Sat 05 Sep 2026 04:01:14 +0000
Manifest next update: Sun 06 Sep 2026 04:01:14 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: JhuNYAwbodeI2J1F4eImugGmS0oByCVNz/aeF0nTvb8=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:48:49:d1:8f:14:b8:ab:bd:4e:3a:fb:d6:09:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Sep 5 04:01:14 2026 GMT
Not After : Sep 6 04:01:14 2026 GMT
Subject: CN=8e4419af7e7124a411f51dcacbd17c5c4088ee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:6f:3c:9b:6e:5a:f7:0c:3b:4c:ee:e1:89:
13:bf:39:b0:bc:09:cc:15:0f:f1:13:1c:f6:38:dc:
17:7d:60:ba:cb:63:68:75:bb:74:2f:c3:09:66:90:
d2:52:df:f8:65:53:d4:d6:04:c0:a1:00:34:e9:3f:
cf:11:fb:dc:34:66:f6:56:81:c6:1d:d8:a0:7a:ab:
c5:cf:85:1b:61:70:bb:72:c5:2d:b9:64:55:c7:8b:
83:48:3d:49:37:9a:cb:45:b7:13:23:3a:60:2b:ae:
71:53:84:a3:a6:37:e6:47:38:4a:4e:51:16:c5:73:
4b:ed:9b:0b:8f:9f:f7:94:66:4f:f5:48:1d:01:9d:
fc:a7:1b:00:31:36:5c:d3:ef:11:91:f1:bd:1e:1b:
64:cf:13:0d:34:c3:3a:2e:5e:a7:9c:2a:a5:ad:00:
82:da:9e:97:6d:e1:67:5f:34:55:ed:93:53:d8:fd:
ca:aa:51:9d:f9:7d:5d:09:61:50:dd:20:a7:7e:e5:
b1:bf:15:82:f1:04:8d:53:a1:2e:b6:aa:32:a5:67:
9e:1e:3c:48:38:dc:e1:46:23:62:92:26:44:c9:c0:
7d:5d:f1:35:de:a0:50:51:a7:db:57:02:e9:76:69:
b9:88:72:80:66:1d:4e:4b:47:b7:51:85:98:4f:ef:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:19:AF:7E:71:24:A4:11:F5:1D:CA:CB:D1:7C:5C:40:88:EE:0C
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4b:83:0f:a7:ac:db:23:79:ea:e4:02:20:72:74:81:5c:2e:
7d:4d:9b:56:ec:61:45:b6:7a:ea:d6:c6:2e:70:6e:11:43:cc:
7d:5b:a3:2c:15:1e:25:09:58:08:0f:d7:e0:ae:de:e7:9d:5f:
5e:ed:38:08:b1:c6:01:b7:fd:48:e0:57:bf:51:dd:00:53:e2:
66:02:aa:07:f0:42:b1:be:e8:15:af:57:3e:f5:cc:21:55:95:
f1:1a:a2:b6:0f:e0:ea:9f:3e:4b:21:d0:12:32:7a:9c:82:91:
7a:e3:95:43:b5:42:b1:b8:f3:9f:45:c1:10:68:06:16:05:19:
88:c7:7b:1a:1a:18:9a:a3:2e:6e:ab:b4:1d:fa:66:b1:21:8c:
16:98:d8:ec:0f:9e:7c:dd:ef:82:ec:a5:63:e8:49:f6:cd:ba:
bb:86:49:ea:f2:d9:59:e8:05:9e:98:0b:79:87:53:f2:10:01:
d3:0f:5a:e7:c4:86:8e:87:25:e0:b6:1d:67:a8:49:cd:27:3c:
2f:a8:d7:93:ac:0a:ce:cd:a4:d1:a4:66:42:40:29:a9:5a:87:
52:d1:af:bb:80:84:9e:d0:b0:22:d8:8a:58:fd:68:a2:c8:cf:
e8:21:47:62:02:a9:76:6e:15:35:68:2a:b9:f7:81:ea:1d:93:
24:ce:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:20:23 2026 by rpki-client