Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier: xxTg9r/SWH2/TIt6LdzLkFNoaEtVYwzk0e5OgFwoGXk=
Subject key identifier: 4B:7D:3D:35:C7:6D:B7:1D:DD:A0:49:E5:81:9D:CF:46:D4:EE:97:20
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01A1807472016C8B5531366E17DC124ED88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 03:01:17 +0000
Manifest this update: Wed 28 Oct 2026 03:01:17 +0000
Manifest next update: Thu 29 Oct 2026 03:01:17 +0000
Files and hashes: 1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: qu4Ct3tJClw4nMAqy6gsCLPqzjUIrp8d2I0V2shZn9U=)
6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:72:01:6c:8b:55:31:36:6e:17:dc:12:4e:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Oct 28 03:01:17 2026 GMT
Not After : Oct 29 03:01:17 2026 GMT
Subject: CN=4b7d3d35c76db71ddda049e5819dcf46d4ee9720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:4d:a7:ff:85:a8:43:e5:d4:af:c6:3a:3e:
4b:bd:03:bf:18:b4:1d:7f:50:f7:02:64:6a:ae:d3:
6d:95:85:b9:f8:ec:a8:9e:c0:65:22:6a:a7:36:e7:
51:62:d9:28:91:21:bc:7e:30:9e:de:8f:ea:57:0f:
9b:da:e2:0e:95:02:c5:51:44:b8:83:bc:b9:a9:a7:
b1:68:3e:84:24:82:93:47:8a:74:17:3e:bc:82:f7:
06:91:89:7c:00:d5:c2:b3:9a:10:d4:d2:bc:ef:cb:
73:db:e3:c7:7a:c6:ee:4f:95:69:c0:4b:3a:eb:95:
f6:32:ba:30:39:66:76:f0:9d:cb:07:5d:0e:5f:20:
28:e2:be:e4:0d:e1:b1:19:54:6c:7f:72:0b:6e:0b:
00:fb:ab:90:31:77:72:5a:a7:dc:42:95:8c:e7:ae:
db:6f:a6:b4:f2:ee:7e:8c:ae:bc:aa:80:2c:a1:26:
9d:63:1b:54:4a:07:20:df:29:ec:a5:87:23:68:72:
16:79:52:04:24:14:2b:4b:99:ef:68:c0:69:d9:b1:
6b:5b:f7:ae:a6:bd:f3:1b:85:ae:a6:6f:ca:43:b1:
7e:97:13:f7:af:0e:6f:23:5d:99:26:5f:88:1b:02:
18:3e:06:6c:cf:a1:5e:d7:0a:ba:41:09:9f:25:35:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:3D:35:C7:6D:B7:1D:DD:A0:49:E5:81:9D:CF:46:D4:EE:97:20
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ad:30:76:8f:de:12:7f:fb:27:f3:c0:37:6e:71:63:a3:fa:
ef:1f:db:9f:cb:c2:a3:5e:87:c3:f8:37:59:74:1f:bc:af:4c:
23:a3:5c:55:40:aa:39:f8:f8:5c:bc:58:e6:a2:ef:e0:a8:2c:
eb:6d:5e:b5:72:1c:d9:e9:7a:dd:1c:c7:6b:d5:cd:e3:a8:8c:
be:15:b7:70:59:3f:98:c4:3c:80:87:aa:ee:1e:52:8e:c2:78:
e9:9d:11:e2:68:fa:47:79:cf:2e:79:ef:64:ea:c6:20:b9:75:
f3:08:fd:b6:e3:02:5d:bc:62:da:29:fd:ed:92:67:cc:ee:78:
90:69:df:d6:24:a2:bf:db:ca:cf:54:71:b1:16:eb:30:db:d5:
73:a8:b3:8e:05:c4:0d:72:3d:81:63:12:74:4d:29:d5:10:93:
9d:38:c2:ea:3d:86:e5:4c:8e:b5:11:91:94:7d:6b:5b:e2:04:
9b:e2:b0:58:4b:2c:ff:1f:63:cb:4f:f3:a9:b0:ae:a4:04:80:
50:78:a2:f9:2b:c7:13:6d:f7:89:83:36:81:01:dd:c0:ea:58:
b1:d7:5e:94:ed:89:56:cd:02:a4:d8:3e:96:cc:13:19:93:88:
02:a8:bb:31:b9:19:52:68:d9:9d:bf:61:77:17:33:d0:28:4e:
45:a7:1b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdHIBbItVMTZuF9wSTtiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjYxMDI4MDMwMTE3WhcNMjYxMDI5MDMwMTE3WjAzMTEwLwYDVQQD
Eyg0YjdkM2QzNWM3NmRiNzFkZGRhMDQ5ZTU4MTlkY2Y0NmQ0ZWU5NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ZNp/+FqEPl1K/GOj5LvQO/GLQd
f1D3AmRqrtNtlYW5+OyonsBlImqnNudRYtkokSG8fjCe3o/qVw+b2uIOlQLFUUS4
g7y5qaexaD6EJIKTR4p0Fz68gvcGkYl8ANXCs5oQ1NK878tz2+PHesbuT5VpwEs6
65X2MrowOWZ28J3LB10OXyAo4r7kDeGxGVRsf3ILbgsA+6uQMXdyWqfcQpWM567b
b6a08u5+jK68qoAsoSadYxtUSgcg3ynspYcjaHIWeVIEJBQrS5nvaMBp2bFrW/eu
pr3zG4Wupm/KQ7F+lxP3rw5vI12ZJl+IGwIYPgZsz6Fe1wq6QQmfJTWZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt9PTXHbbcd3aBJ5YGdz0bU7pcgMB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1a0wdo/e
En/7J/PAN25xY6P67x/bn8vCo16Hw/g3WXQfvK9MI6NcVUCqOfj4XLxY5qLv4Kgs
621etXIc2el63RzHa9XN46iMvhW3cFk/mMQ8gIeq7h5SjsJ46Z0R4mj6R3nPLnnv
ZOrGILl18wj9tuMCXbxi2in97ZJnzO54kGnf1iSiv9vKz1RxsRbrMNvVc6izjgXE
DXI9gWMSdE0p1RCTnTjC6j2G5UyOtRGRlH1rW+IEm+KwWEss/x9jy0/zqbCupASA
UHii+SvHE233iYM2gQHdwOpYsddelO2JVs0CpNg+lswTGZOIAqi7MbkZUmjZnb9h
dxcz0ChORacbYA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:10 2026 by rpki-client