
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier: oWLpbuMLPQfsmg3Cc2ZYPQlp7FzkF/e88OSD+bef4BA=
Subject key identifier: F0:F9:A8:3C:E9:F8:FF:21:35:01:40:F1:84:30:8C:92:17:1B:77:1B
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01A090FCBB454006A5C740E5E28FDFF4C8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number: 1A52
Signing time: Fri 11 Sep 2026 15:01:17 +0000
Manifest this update: Fri 11 Sep 2026 15:01:17 +0000
Manifest next update: Sat 12 Sep 2026 15:01:17 +0000
Files and hashes: 1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: QMzkgfjTE2upY5kgEqF0kyg1wEmKdpdYBh1nxgxID0M=)
6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:fc:bb:45:40:06:a5:c7:40:e5:e2:8f:df:f4:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Sep 11 15:01:17 2026 GMT
Not After : Sep 12 15:01:17 2026 GMT
Subject: CN=f0f9a83ce9f8ff21350140f184308c92171b771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:46:2a:08:3d:3b:74:40:24:14:28:3a:8f:
24:32:04:16:38:52:d7:80:f1:e6:3d:f7:f9:24:5c:
b7:11:51:73:83:9f:0e:18:9b:7b:22:1b:0e:05:c4:
db:70:04:d8:de:65:92:c1:b9:99:d1:70:2b:92:d3:
bf:8b:33:8b:a2:9d:ab:75:0a:84:41:f0:2b:0d:17:
96:09:62:f6:0c:d3:69:e1:d7:7e:38:fa:d0:43:ac:
6c:3c:90:84:d8:44:98:83:58:d5:97:7f:18:73:20:
b6:b9:4f:ea:14:e2:59:04:97:f6:43:c8:e5:27:2c:
79:a7:f5:f5:88:23:2c:00:ae:63:f5:51:ec:a4:ee:
dc:ed:90:82:e1:ed:8b:85:7a:c8:35:ed:ca:a4:c2:
a8:67:d4:6d:3a:f3:3e:26:af:9a:b3:73:5d:70:2a:
d6:3b:db:b0:5b:29:18:e3:27:7a:11:2b:dd:47:aa:
55:66:60:1e:f5:df:42:d6:1c:a6:8b:b8:0e:57:aa:
a6:9d:cf:83:5b:96:25:03:7f:b3:db:f1:c7:bf:99:
e5:8c:b7:8b:63:c4:67:3f:dd:5d:10:72:90:15:05:
e8:58:4a:28:f8:6c:ca:03:c9:44:9c:fa:d5:1d:a1:
a8:1d:c5:12:37:a0:70:91:e7:4e:3e:b9:ca:2d:89:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:A8:3C:E9:F8:FF:21:35:01:40:F1:84:30:8C:92:17:1B:77:1B
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5f:17:86:0f:93:2a:8b:f7:d8:e1:95:6f:2b:18:b0:69:60:
d4:a8:99:4f:22:15:75:cd:e3:7d:02:18:bd:c8:ae:53:d6:19:
38:3b:fb:d4:03:a3:c5:59:07:d7:08:a1:5c:26:14:33:49:06:
06:d4:c9:b1:9c:50:84:25:cc:c8:82:27:6a:c7:07:da:58:7d:
f9:93:67:b2:8f:28:cb:9f:f1:9b:44:e6:2b:a7:19:68:10:76:
fa:04:33:5b:b1:de:33:5e:ee:0c:3b:54:b1:2b:57:cb:12:cd:
14:cd:3a:f1:05:8a:83:13:f0:56:90:f4:80:bc:23:1f:5d:be:
04:11:00:ea:3d:54:20:20:2a:8b:3b:37:06:5d:64:03:bb:9b:
1f:79:71:39:a1:04:20:dd:88:55:5d:b6:65:8c:46:ba:de:ee:
82:d9:3d:c7:c0:04:d4:3d:44:06:a9:30:ac:f6:9e:31:be:61:
ec:7b:c5:4b:be:60:50:5e:ab:13:8d:18:e1:52:3f:dd:c4:cd:
e1:0d:4a:c4:ad:57:62:e8:3c:4f:8c:6d:04:40:d5:60:47:9c:
e0:10:25:b8:11:79:8a:20:17:22:1b:5c:7c:b9:47:e6:81:4a:
ad:ca:00:f8:aa:48:65:25:eb:10:29:0a:e9:dc:47:79:4f:66:
a3:d0:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:11:51 2026 by rpki-client