Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: /860USfCUffgXrYCOzJPW3qEj21XjGQz2g5eRLWvEW4=
Subject key identifier: A1:8B:55:46:01:02:EA:26:05:26:A5:40:34:FC:18:41:6B:68:54:91
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 01A1220A89AD724A5A82E49301E21760A90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 0689
Signing time: Fri 09 Oct 2026 19:01:18 +0000
Manifest this update: Fri 09 Oct 2026 19:01:18 +0000
Manifest next update: Sat 10 Oct 2026 19:01:18 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: 6oSBqo4YpwlT6e2i7r+T4mzBB5yg+H1B0WvVAr1b3ic=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:89:ad:72:4a:5a:82:e4:93:01:e2:17:60:a9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Oct 9 19:01:18 2026 GMT
Not After : Oct 10 19:01:18 2026 GMT
Subject: CN=a18b55460102ea260526a54034fc18416b685491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:34:f7:72:02:fa:f7:2d:47:45:6a:50:2b:
68:92:da:33:4c:24:19:da:2d:09:eb:e5:91:fa:e8:
5e:01:4f:34:82:47:e8:9b:50:4c:50:66:a7:84:27:
9c:1b:fd:01:d2:3b:dc:bd:20:a4:2b:19:3f:56:e9:
ef:e9:b8:de:78:c9:7e:17:bf:50:41:1e:07:ef:fe:
e0:56:a6:80:f8:77:1a:a8:b6:9e:ea:dd:d2:b4:e1:
d2:02:9f:de:4b:8f:dc:f1:f9:5e:02:44:d0:0a:ef:
15:0f:1b:7c:aa:8c:76:a0:05:7f:cc:ac:4a:bc:3e:
8a:0d:2a:36:22:a8:c9:96:85:b4:b7:b9:08:75:50:
5b:55:db:56:14:1e:64:52:14:b5:8c:3d:d0:6b:07:
9c:a1:79:b1:ce:2b:51:e1:cd:20:89:f2:db:dc:86:
9d:f4:34:b3:21:58:80:02:23:19:93:68:7f:77:2e:
64:f0:22:3d:9c:ba:47:f7:39:f9:40:da:b8:41:97:
b7:c5:19:7f:68:9b:80:9c:27:4e:d8:e8:7e:a1:b7:
59:a3:86:31:43:26:49:ab:6a:3d:60:ad:43:db:7e:
24:6c:69:bf:37:bb:3e:b6:b7:03:ba:27:5a:41:97:
eb:05:e6:6a:2a:23:cd:8d:65:de:09:06:9b:88:7c:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:55:46:01:02:EA:26:05:26:A5:40:34:FC:18:41:6B:68:54:91
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:89:11:35:99:f0:d6:7f:7b:fe:f0:57:8b:5c:1e:50:ad:
f0:e5:67:8e:7f:1d:38:29:d2:cc:39:ef:e4:4d:e5:06:16:9e:
53:92:f9:50:c9:43:de:f7:73:46:36:40:aa:3b:07:b2:5b:fa:
f9:3e:12:4e:bc:d6:2c:dc:4a:24:3f:bf:62:8c:4f:71:c7:a8:
a0:5f:67:40:72:12:ea:d2:8c:4f:1a:31:5b:5b:7e:67:3e:55:
7b:10:2e:df:6a:29:40:a7:10:08:49:df:31:f2:ac:dd:72:a2:
d8:2a:75:06:34:36:4e:78:1b:30:d6:16:46:10:d0:50:a6:91:
f9:e3:df:f4:8a:0d:78:38:e1:40:24:3e:21:8d:33:00:57:83:
4f:37:d8:c3:b6:e6:6e:3b:b0:45:9a:70:30:1a:24:9d:25:45:
fc:b8:c2:45:67:34:7b:e8:92:82:d8:7d:31:86:f8:fb:7f:d2:
eb:21:39:b1:c2:0b:05:78:26:df:af:5e:1a:b7:cc:c7:81:ec:
5b:d1:f5:d1:25:d3:64:bf:4d:eb:f0:8b:5a:b7:98:99:7b:2e:
db:20:a2:31:91:df:80:ce:8f:81:dd:3c:7d:4d:55:9d:19:b5:
70:16:80:9b:d4:84:76:cf:31:be:18:0e:a5:75:6f:a0:bc:1b:
06:ac:de:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiComtckpaguSTAeIXYKkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0
ZmM4ZWQwHhcNMjYxMDA5MTkwMTE4WhcNMjYxMDEwMTkwMTE4WjAzMTEwLwYDVQQD
EyhhMThiNTU0NjAxMDJlYTI2MDUyNmE1NDAzNGZjMTg0MTZiNjg1NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulo093IC+vctR0VqUCtoktozTCQZ
2i0J6+WR+uheAU80gkfom1BMUGanhCecG/0B0jvcvSCkKxk/Vunv6bjeeMl+F79Q
QR4H7/7gVqaA+HcaqLae6t3StOHSAp/eS4/c8fleAkTQCu8VDxt8qox2oAV/zKxK
vD6KDSo2IqjJloW0t7kIdVBbVdtWFB5kUhS1jD3QawecoXmxzitR4c0gifLb3Iad
9DSzIViAAiMZk2h/dy5k8CI9nLpH9zn5QNq4QZe3xRl/aJuAnCdO2Oh+obdZo4Yx
QyZJq2o9YK1D234kbGm/N7s+trcDuidaQZfrBeZqKiPNjWXeCQabiHwcZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGLVUYBAuomBSalQDT8GEFraFSRMB8GA1UdIwQY
MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt
NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5
LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnWJETWZ
8NZ/e/7wV4tcHlCt8OVnjn8dOCnSzDnv5E3lBhaeU5L5UMlD3vdzRjZAqjsHslv6
+T4STrzWLNxKJD+/YoxPcceooF9nQHIS6tKMTxoxW1t+Zz5VexAu32opQKcQCEnf
MfKs3XKi2Cp1BjQ2TngbMNYWRhDQUKaR+ePf9IoNeDjhQCQ+IY0zAFeDTzfYw7bm
bjuwRZpwMBoknSVF/LjCRWc0e+iSgth9MYb4+3/S6yE5scILBXgm369eGrfMx4Hs
W9H10SXTZL9N6/CLWreYmXsu2yCiMZHfgM6Pgd08fU1VnRm1cBaAm9SEds8xvhgO
pXVvoLwbBqzeEA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:49 2026 by rpki-client