Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: Q2q5N5XWYiFVDMzXJf0jy1bKOBjRWxppwpgJ0bKlwBY=
Subject key identifier: B7:62:94:A8:16:24:86:9F:0B:6E:E9:BB:E0:19:CF:01:E6:EF:ED:5F
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01A05A44B729A9DE02FE284994AEB7372F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 169D
Signing time: Tue 01 Sep 2026 00:00:47 +0000
Manifest this update: Tue 01 Sep 2026 00:00:47 +0000
Manifest next update: Wed 02 Sep 2026 00:00:47 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: asoH9JFIkVgNAA+NaBv4SOKAReu31CQnR5+9KE77qtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:b7:29:a9:de:02:fe:28:49:94:ae:b7:37:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Sep 1 00:00:47 2026 GMT
Not After : Sep 2 00:00:47 2026 GMT
Subject: CN=b76294a81624869f0b6ee9bbe019cf01e6efed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:38:38:aa:a4:69:93:c6:3b:6a:2e:6a:be:
90:62:fd:01:71:d8:42:bd:17:ec:ee:f2:61:88:ea:
fa:23:5a:d0:40:b1:64:88:e7:39:e5:2f:3f:6a:68:
76:4e:81:3e:4d:95:1f:65:49:16:b8:7f:62:f1:8a:
94:fd:cc:d8:47:25:d1:28:45:02:3d:c6:8b:f3:61:
d1:05:0b:16:4e:34:58:17:80:4b:22:82:40:de:4e:
e1:4d:b6:94:51:bf:16:68:d4:37:1c:bb:bd:39:48:
aa:38:d8:fc:f1:47:f4:c5:68:5d:92:d5:88:b4:70:
e5:5c:6f:40:f2:d4:57:97:0b:ae:7c:c4:05:cd:87:
38:95:ec:64:bc:12:9b:7a:ab:7b:f6:57:79:b6:09:
d9:b2:6f:c9:1f:d8:d9:13:6a:49:6f:ab:64:f0:d9:
62:65:fc:e0:7a:6b:35:9e:a1:f4:d3:4a:a4:46:dc:
ed:fa:a2:d7:1c:3d:78:e0:05:42:73:aa:30:04:44:
f4:6b:eb:b2:00:91:0b:6c:95:3f:35:77:a4:5a:a6:
7f:66:9a:d5:7f:79:ad:e1:5d:c0:23:04:d7:1c:49:
b1:45:e6:90:7c:62:96:c2:45:e9:9d:de:87:4d:4c:
d5:53:92:00:17:4d:eb:3f:9f:6d:66:5b:f0:b6:34:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:94:A8:16:24:86:9F:0B:6E:E9:BB:E0:19:CF:01:E6:EF:ED:5F
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c7:b9:2f:0a:c5:93:68:69:48:da:bd:40:43:db:93:d8:49:
bf:d9:22:ee:e8:26:0f:7e:42:62:f7:71:07:01:ac:60:e0:f0:
48:cc:75:d1:fc:39:3d:9c:d3:eb:ab:a3:9a:c6:19:76:61:90:
72:27:86:99:73:d8:02:79:8e:1a:e1:a8:e2:7c:68:06:07:30:
d1:69:41:54:ba:94:fc:ee:02:45:90:1f:9f:fd:45:85:97:8c:
7f:bb:57:42:e8:2f:15:28:0f:3d:23:49:c9:bc:73:d7:0c:d0:
df:ef:0c:fd:e0:ab:82:83:f1:0b:5e:f2:71:c3:1e:f6:46:43:
02:22:4c:ef:bf:a0:f0:7f:17:d7:30:4f:f3:c2:58:76:27:0d:
88:8f:4b:6a:08:8c:32:19:7a:f0:0d:18:d0:aa:07:6f:d2:14:
f6:e9:2e:60:a3:d5:4e:18:03:66:d6:b9:36:b1:57:50:30:6c:
df:38:86:f2:06:b1:ae:38:ae:cb:66:98:b6:45:8e:4a:de:88:
54:6b:a5:69:75:5d:92:8e:8d:3b:cd:5c:b9:35:1f:05:19:52:
8f:1f:48:11:30:af:41:78:9b:13:86:26:e3:c9:b1:1a:16:2f:
6c:25:85:4a:76:7b:b5:8c:93:76:ce:dd:d8:a9:95:84:98:30:
dc:ec:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:22 2026 by rpki-client