Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: fo14JXPKiCFx68J1YQ0GN/C8aBOn7AGASyMvQcBnD9w=
Subject key identifier: 1A:B6:1C:12:5F:E4:26:69:94:0E:66:5A:DB:5A:FD:2F:2C:24:75:80
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A14985BFB1ED7C6451C9A1E948729BAF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1B67
Signing time: Sat 17 Oct 2026 11:01:04 +0000
Manifest this update: Sat 17 Oct 2026 11:01:04 +0000
Manifest next update: Sun 18 Oct 2026 11:01:04 +0000
Files and hashes: 1: FlNvIBDOBdonn3aaFX3mtfoEgdY.roa (hash: NV4aCXfghszJfOz/yii1kdXVIUYUXdQt970ZYxOTSP8=)
2: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
3: GQvA85yFUDcjjef1VnyNvvzPcxo.roa (hash: 9QUGETTuRTyPsf6ud9LKDqNrZm0h6j7Ww3iNgGQDOxI=)
4: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
5: Zg1qY1NaT2tr6uTrqkYf6RG57DY.roa (hash: 5X0GUYM338jJy94+ZfFU9JyyfiBFBWBwDRJLk78a0KQ=)
6: kw9CUacJaHnXXDA6SiegmShaBgg.roa (hash: 5fFQ4oxcoXjsXkXsvEeSalm4fLE5QxvAQY7+dMRnCk4=)
7: puc6OmG1OuK-1tdDeaTEBhl4xAM.roa (hash: OTGPHJHXp9Xi8w0pLop8Pbhr1rg2m2dafkxwzmiiPJI=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: W4Fmdg7es+CFjh70/HWoCXN0eh7IlIjc+n6Yrd8ppGU=)
9: ufay5LNVTR-1Xvc0NDHgdFmlBbM.roa (hash: YK88JhgL1jfgEgilMOUD5BXf2OP6hidfNljwHoTC7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:85:bf:b1:ed:7c:64:51:c9:a1:e9:48:72:9b:af:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 17 11:01:04 2026 GMT
Not After : Oct 18 11:01:04 2026 GMT
Subject: CN=1ab61c125fe42669940e665adb5afd2f2c247580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:29:e7:2a:a7:1c:14:5d:85:88:96:5f:60:
88:c3:75:e3:6f:06:04:e7:47:0f:10:1d:f9:cd:19:
b6:24:8a:7a:28:e4:33:de:5e:63:0a:03:5f:e4:90:
ec:90:38:4a:28:80:ef:54:b7:7a:f6:0b:2c:86:28:
1a:88:5d:2e:75:f9:76:91:00:35:76:a5:e5:c8:76:
bd:8b:13:e7:55:46:dd:20:27:14:e5:ca:cc:ca:04:
2c:11:7b:84:7e:da:22:ee:99:c9:ae:d2:2f:52:b6:
c3:bb:62:dc:93:b3:fe:e1:7c:59:15:cf:2d:82:71:
29:35:85:a9:02:48:32:2e:d2:8f:c8:1f:05:9f:a6:
d8:c9:24:c3:af:21:34:4b:ad:4d:34:a9:a3:5b:bf:
8a:e7:83:50:d0:8c:f6:01:27:82:30:b8:25:02:1c:
80:db:d9:07:89:1b:ad:58:90:d8:1f:f9:3e:76:f8:
75:70:33:b1:59:b4:1e:fc:4f:85:3a:35:b4:41:f5:
4f:0e:ff:c0:19:01:75:74:dc:46:4a:88:5c:9b:19:
3f:83:24:17:af:3a:09:e8:ff:97:7e:02:f0:f8:9b:
4b:47:c2:8a:ce:da:bb:ed:ed:4a:1a:30:42:4b:1a:
c6:27:aa:0c:3c:3e:9b:5b:d9:eb:dc:b8:ab:48:42:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:1C:12:5F:E4:26:69:94:0E:66:5A:DB:5A:FD:2F:2C:24:75:80
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:16:54:c0:31:ba:1f:f1:37:e9:18:6f:68:07:be:37:32:
3c:d5:65:f9:39:25:27:df:0c:ae:4d:df:85:68:a1:2a:65:99:
88:6f:95:0d:9a:10:39:e0:df:e3:88:09:b2:a5:06:3b:ed:8f:
af:4f:04:ae:b9:d2:d9:41:cc:3a:e2:01:2a:eb:93:e7:a4:8a:
63:7d:82:5a:93:10:38:6b:40:1d:5f:c4:61:24:64:ac:62:70:
f6:cb:29:92:0c:f3:1f:2b:2b:15:39:93:52:56:8e:59:63:f1:
9b:07:2f:bf:27:fc:87:21:d0:e2:ef:5c:79:91:75:62:9e:82:
77:72:70:be:1f:be:40:9f:79:a1:9d:30:06:07:b2:92:c8:71:
e1:2b:84:f3:a4:99:69:c8:9f:93:21:ea:2c:0f:6b:89:59:7d:
cd:8e:a1:d1:e6:4f:73:2d:7b:9e:8f:f3:cc:29:5e:bb:06:74:
dd:36:a4:8a:f7:ea:3e:11:ae:89:92:23:51:4f:37:81:d3:66:
5e:55:3b:33:69:e9:ec:9c:83:4e:3c:b2:7c:6c:d0:88:3e:f5:
a6:b7:8c:45:1b:3d:ba:ea:91:04:1a:6f:59:ac:c0:b9:68:5d:
f7:eb:49:41:9f:d7:d7:c9:2b:39:0a:fe:86:8f:9b:8c:fd:60:
99:d0:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:52:24 2026 by rpki-client