Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier: 8WUZGC10+9w2nAZuvGuoVgmwawXXSb9hzBAqMYtwomU=
Subject key identifier: 02:51:19:A5:C3:97:EF:E9:61:21:8E:A9:8E:D7:C3:24:B1:12:5A:A3
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 01A13258F08B3CDE1AFDD0AB0EE4CC007600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number: 1AA4
Signing time: Mon 12 Oct 2026 23:00:51 +0000
Manifest this update: Mon 12 Oct 2026 23:00:51 +0000
Manifest next update: Tue 13 Oct 2026 23:00:51 +0000
Files and hashes: 1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: MP6ygyxT7QFIEQaRLc3GRBSWpg43vzxJO2wvfmxAfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:58:f0:8b:3c:de:1a:fd:d0:ab:0e:e4:cc:00:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Oct 12 23:00:51 2026 GMT
Not After : Oct 13 23:00:51 2026 GMT
Subject: CN=025119a5c397efe961218ea98ed7c324b1125aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:c2:cb:15:a4:1a:be:80:2a:3b:d3:9f:f9:
bc:b7:ad:0f:08:bb:63:01:59:3c:1c:e3:11:b2:90:
39:65:6e:b6:7d:af:c7:8c:89:ca:6b:c3:d7:01:f2:
c2:75:31:9c:fe:19:15:45:08:97:f9:5d:05:d9:b9:
8f:79:f4:65:f4:2d:de:fe:ea:70:44:66:e5:d1:af:
ee:b2:5e:93:01:4c:f4:aa:5f:cc:05:e6:2a:94:bc:
7e:fd:ae:ab:26:d6:90:25:68:87:c3:18:2b:01:60:
b2:6e:51:9e:9b:75:4b:13:3d:cc:28:83:82:95:3f:
b9:49:41:65:30:c6:9c:24:ff:c8:dc:ce:fd:6e:ed:
12:ed:c6:62:d2:32:f2:6e:91:79:7a:a0:13:b8:3a:
4c:ad:aa:f8:2a:fe:9c:eb:aa:e3:55:c5:ba:1f:07:
02:20:d8:50:29:b0:a7:0a:b5:9e:6a:96:98:55:6e:
d2:2b:b6:22:57:dc:e5:3e:86:a9:e1:de:0c:cc:84:
3a:6b:bb:48:b2:fe:63:7a:6c:18:98:72:91:bd:77:
07:23:e5:56:4f:28:84:f0:58:15:d8:86:8c:d3:e2:
87:6c:8a:27:db:51:60:da:0d:a7:3b:bf:89:66:e9:
db:ff:e5:7a:42:ae:48:6b:33:44:e7:26:66:92:dc:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:19:A5:C3:97:EF:E9:61:21:8E:A9:8E:D7:C3:24:B1:12:5A:A3
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:8a:3b:82:1b:a0:c1:84:6a:25:34:e4:9c:56:f5:79:8a:
1d:1d:c6:0e:40:4b:42:9e:3c:15:1d:ea:fc:06:86:dc:57:b4:
8b:49:e4:92:b5:ce:c3:19:0b:a3:22:ed:78:4b:0e:33:77:27:
71:d7:58:e2:64:9d:29:f8:25:bd:83:0e:b9:1a:a8:dc:52:2a:
b5:3c:1a:1a:9b:66:ee:3a:a5:d5:c3:fa:6c:8f:ae:be:7e:04:
c6:ca:30:5b:48:84:0a:d0:6d:3b:bb:e5:49:11:15:a4:c0:23:
39:56:3b:56:69:69:14:0e:72:6a:3f:e2:93:04:e9:6d:68:01:
d6:cb:3d:2e:4a:f2:11:4b:48:cc:36:96:5c:22:50:c7:ed:0e:
06:50:e6:03:45:5d:16:91:7d:a1:0e:1e:2f:ee:9f:89:46:00:
a8:eb:f1:23:52:4e:f2:d8:5e:1b:f8:cd:00:3e:03:94:37:f8:
1a:ac:a0:ce:ab:fc:2c:dc:f4:4b:63:1c:8f:69:52:e1:6a:72:
ba:56:28:76:23:ef:4a:02:e9:65:d3:e2:d1:f0:86:51:b3:39:
e2:a4:81:82:6b:79:9b:b3:09:de:5e:fe:b1:03:fc:31:bf:a3:
8e:77:80:c0:58:7a:11:b0:73:1d:d9:b1:1e:38:91:e2:d3:53:
f2:db:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:16:10 2026 by rpki-client