Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: BpL36GuSMqtgfzs+RFTtMEm3Vrd/ch1kveWBZ+i/PXM=
Subject key identifier: 92:8A:4E:AA:8E:93:C7:8E:31:3A:8B:19:5D:64:0A:B1:90:CC:F5:36
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01A0811BBA3EAACD60B3E85F64DEE09A2E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1A4D
Signing time: Tue 08 Sep 2026 13:01:13 +0000
Manifest this update: Tue 08 Sep 2026 13:01:13 +0000
Manifest next update: Wed 09 Sep 2026 13:01:13 +0000
Files and hashes: 1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: fN5vVa8wo+odKY54ojFsXhVs2vHtx73Tfi4WD4BsEuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1b:ba:3e:aa:cd:60:b3:e8:5f:64:de:e0:9a:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Sep 8 13:01:13 2026 GMT
Not After : Sep 9 13:01:13 2026 GMT
Subject: CN=928a4eaa8e93c78e313a8b195d640ab190ccf536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:32:71:f3:0e:99:03:1b:db:21:71:1c:a2:
32:3b:d2:77:97:79:08:da:76:35:da:91:5d:56:a7:
f6:59:7b:5b:4c:7e:98:8b:57:91:12:0f:3f:75:01:
bb:33:cf:f5:3a:93:20:b4:68:46:46:fc:f4:04:a2:
17:f6:17:bf:88:12:de:95:d5:41:26:b2:e3:6d:c7:
22:23:9d:60:a0:ed:ac:83:55:b3:5d:0d:59:88:9d:
09:a6:ef:f3:2e:e2:6e:df:14:a8:34:fb:b5:e1:42:
76:cd:7c:7a:d5:67:ac:09:ca:44:c2:f6:6a:8f:5f:
4b:4b:b0:28:17:73:94:8f:13:46:27:c6:39:1a:f0:
53:86:00:af:57:b0:dd:fd:7a:31:e5:c3:1f:a3:9e:
07:15:ad:ef:65:15:bf:1b:7e:33:c1:0f:0a:9f:9f:
44:e5:18:fe:1c:b2:92:ac:5f:b5:81:6c:73:56:81:
65:ec:72:3a:d9:ed:43:4b:5c:03:12:64:f7:ba:9e:
b0:79:84:4a:fd:99:7c:1f:20:87:bb:eb:e9:46:91:
a1:23:53:91:d6:1a:b0:0e:95:0b:92:d0:ad:90:cb:
c1:64:81:a8:00:4c:a3:6b:a5:a4:4c:15:77:e0:db:
1c:81:54:33:3d:c4:62:e0:f5:c3:72:18:7b:a8:6f:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:4E:AA:8E:93:C7:8E:31:3A:8B:19:5D:64:0A:B1:90:CC:F5:36
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5e:61:0b:76:eb:fb:bd:13:70:3d:0f:45:56:0b:eb:28:5d:
eb:b0:95:8d:84:73:aa:f3:28:85:61:09:f0:87:75:68:d1:37:
7f:ce:e1:2a:94:a3:50:3e:ea:89:ee:9b:13:d4:54:77:5b:bf:
6a:0a:64:17:5e:05:be:05:27:b0:93:04:58:08:d1:b8:34:6b:
46:3b:43:99:ac:b4:9d:0c:dd:64:c6:61:75:f6:0e:0b:91:27:
fd:36:a2:ae:4b:98:7c:5f:3b:9f:ca:1c:f9:cb:d1:d0:a1:51:
a8:72:2c:29:ee:fb:9c:5f:8b:b2:53:ee:94:79:f9:be:32:ce:
06:76:6e:fd:9b:d0:11:f6:09:a5:d4:c8:77:87:de:73:7b:eb:
85:ed:d9:24:bd:51:e5:da:c5:e6:1a:5f:52:f9:de:61:83:2e:
eb:8c:b1:96:7d:c1:47:38:b5:28:24:d8:a0:48:51:aa:82:38:
83:f6:0b:c4:1c:d0:4c:06:00:b8:44:60:61:01:2e:fd:33:eb:
75:cb:6f:34:56:28:66:4a:2f:1b:d0:0a:a8:0c:dd:1b:e3:b7:
f6:21:93:36:5c:c2:45:30:79:11:1d:48:b9:fe:a0:31:cb:fe:
86:7f:8c:58:06:bc:93:7b:5d:dc:a2:6b:58:ff:4d:74:f1:62:
37:4f:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:41:12 2026 by rpki-client